Credit Lock vs Fraud Alert: How the Two Tools Differ
A credit lock is a service offered by a credit reporting agency that blocks access to your file at that agency, under the provider's own terms. A fraud alert is a federal notice under FCRA section 605A that is shared with all three nationwide agencies and requires identity verification before credit is extended.
This guide is general educational information for U.S. readers. It is not financial advice and does not describe your individual credit file. Figures such as score ranges and timeline estimates are typical examples, not promises.
Key takeaways
- A credit lock is a provider service that blocks access to a credit file at the agency offering it, while a fraud alert is a federal notice that requires identity verification before credit is extended.
- An initial fraud alert lasts 1 year and an extended fraud alert lasts 7 years, while a lock stays in place until the provider's unlock process is completed.
- A fraud alert placed with one nationwide agency is passed to the other two, but a lock must be placed separately at each of Equifax, Experian, and TransUnion.
- Neither a lock nor a fraud alert adds or removes information from a credit file, and neither is a factor in FICO or VantageScore scoring models.
- A security freeze is a federal right that is free to place, temporarily lift, or remove, which distinguishes it from a provider-based lock.
A credit lock and a fraud alert both change how a credit file can be used, but they are not the same tool. A credit lock is a service a credit reporting agency offers under its own contract terms, and it blocks access to your file at that one agency. A fraud alert is a notice created by federal law that requires businesses to take reasonable steps to verify your identity before extending credit, and one request is shared with all three nationwide agencies.
What a credit lock does
A credit lock is a product rather than a federal right. It is placed directly with a credit reporting agency, and because it is offered under a contract, the terms belong to the provider: what the lock is called, whether a fee applies, how a consumer locks and unlocks the file, and how quickly an unlock takes effect. Those terms can change, and disagreements about the lock itself are handled under the provider agreement rather than as a claim under the Fair Credit Reporting Act. The credit file behind the lock is still governed by the FCRA.
The three nationwide credit reporting agencies are Equifax, Experian, and TransUnion, and each maintains its own file. A lock placed at one agency does not carry over to the other two, so file-level blocking at all three generally means three separate locks and three sets of provider terms. The credit lock section of this site covers how provider products differ from one another.
What a fraud alert does
Fraud alerts are defined in section 605A of the FCRA, codified at 15 U.S.C. section 1681c-1. A consumer who contacts one nationwide agency to report suspected fraud triggers an alert that the agency must pass to the other two, so a single request covers all three files. The alert does not block access. Instead, it requires a business that uses the file to take reasonable steps to verify the identity of the person applying for credit, usually by reaching the consumer at a phone number the consumer supplies.
Duration is set by statute. An initial fraud alert lasts 1 year, and an extended fraud alert lasts 7 years and requires an identity theft report. Section 605A also includes an active duty alert provision for service members. Because a fraud alert is a legal notice rather than a commercial product, there is no provider contract to compare; the FTC describes how alerts and freezes are placed and how long each one lasts.
Credit lock vs fraud alert, side by side
The table below summarizes the difference between a credit lock and a fraud alert across the points consumers compare most often.
| Feature | Credit lock | Fraud alert |
|---|---|---|
| Source of the right | Provider agreement with one credit reporting agency | FCRA section 605A (15 U.S.C. 1681c-1) |
| Coverage | Only the agency where the lock is placed | All three nationwide agencies after one request |
| Effect | Blocks access to the file at that agency while the lock is in place | Does not block access; adds a requirement to verify identity before credit is extended |
| Duration | Set by the provider's terms; remains until unlocked | 1 year for an initial alert; 7 years for an extended alert |
| Cost | Set by the provider; not fixed by federal law | No fee, as described by the FTC |
| Ending it | Unlock through the provider's process | Expires on its own; can be removed earlier |
| Effect on scores | None directly; a lock is not a scoring factor | None directly; an alert is not a scoring factor |
One row deserves a closer look. Neither a lock nor an alert adds or removes information from a credit file, and neither appears among the factors FICO or VantageScore models use. A file with a lock and a file with an alert can produce the same score when the underlying data is the same.
How a security freeze compares with both
A security freeze sits between the two. Like a fraud alert, it comes from federal law rather than a provider contract, and it is free to place, temporarily lift, or remove under federal law. Like a lock, its main effect is to block access to a credit file at the agency where it is placed, and it generally must be requested separately from each of the three nationwide agencies. The FTC explains how freezes and fraud alerts work together, and the security freeze section covers the mechanics of placing and lifting one.
How locks and alerts relate to credit scores
Most credit scores, including FICO and VantageScore, use a range of 300 to 850. The FICO model weighs its factors approximately as follows:
- Payment history: 35%
- Amounts owed: 30%
- Length of credit history: 15%
- New credit: 10%
- Credit mix: 10%
VantageScore uses its own factor weighting and does not publish fixed percentages. Because both models read the contents of the credit file, what matters to a score is which accounts, balances, and inquiries are reported, not whether a lock or a fraud alert is in place. More detail is available in how credit scores are calculated, FICO vs VantageScore, and payment history and credit scores.
Situations where each tool is commonly used
- Suspected fraud. A consumer who believes someone has used their information can place an initial fraud alert for 1 year, or an extended alert for 7 years with an identity theft report.
- Ongoing, file-level control. Some consumers treat a lock as a standing preference and unlock it temporarily when they plan to apply for credit, since unlocking runs through the provider's account tools.
- A lender that pulls a single agency. A lock placed at one agency does not stop a lender that obtains a file from a different agency, while a fraud alert reaches all three by design.
- A breach notice. After a data breach, a fraud alert is the option that takes one request and covers all three files.
Identity theft reports and blocked information
If identity is stolen, the report can be filed at IdentityTheft.gov, and tax-related identity theft can be reported to the IRS using Form 14039. FCRA section 605B, codified at 15 U.S.C. section 1681c-2, lets a consumer ask a credit reporting agency to block information that resulted from identity theft, using an identity theft report together with proof of identity. The identity theft section covers the documents involved and how blocking differs from a disputed item.
Reviewing the file behind a lock or alert
The FCRA gives consumers the right to a free credit report from each nationwide agency every 12 months, and the three agencies currently provide free reports weekly through AnnualCreditReport.com. A dispute filed with an agency generally must be investigated within 30 days, and that period can extend to 45 days if the consumer provides additional information during the initial 30-day window. Most negative information, including late payments, stays on a credit report for 7 years; a Chapter 7 bankruptcy stays for 10 years, a Chapter 13 bankruptcy for 7 years, and hard inquiries typically remain for 2 years. The CFPB publishes consumer material on credit reports and scores, and this site covers credit reports, credit checks, and credit monitoring.
This page explains how credit locks, fraud alerts, and security freezes work under federal law. It is for education only and is not financial advice.
Compare three-bureau credit scores and reports from a single place. Educational links, disclosed below.
Three Bureau Credit Scores and ReportsCreditMonitored.com may earn a commission from partner links at no additional cost to you.
Frequently asked questions
What is the main difference between a credit lock and a fraud alert?
A credit lock is a service a credit reporting agency offers under its own contract terms, and it blocks access to a credit file at that one agency. A fraud alert is a notice created by FCRA section 605A that does not block access; it requires businesses to take reasonable steps to verify identity before extending credit, and one request is shared with all three nationwide agencies.
How long does each one last?
An initial fraud alert lasts 1 year, and an extended fraud alert lasts 7 years and requires an identity theft report. A lock has no statutory duration; it stays in place until it is unlocked through the provider's own process, and the provider's terms govern how that works.
Does a credit lock or a fraud alert affect a credit score?
Neither one is a factor in the FICO or VantageScore models, and neither adds or removes information from a credit file. Because scoring models read the data in the file, two files with identical data produce the same score whether or not a lock or alert is in place.
Do consumers need to contact all three credit reporting agencies?
For a fraud alert, one request to any of the three nationwide agencies is passed to the other two, so all three files carry it. For a lock, each agency maintains its own file and its own provider terms, so a lock is placed separately at Equifax, Experian, and TransUnion.
Is a credit lock the same as a security freeze?
No. A security freeze is a right under federal law and is free to place, temporarily lift, or remove. A credit lock is a commercial feature governed by the provider's agreement, so its availability, price, and unlock process are set by the agency that offers it.
Related guides
- How Credit Scores Are Calculated
- Fico Vs Vantagescore
- Payment History And Credit Scores
- Credit Score Ranges Explained