What Is an Extended Fraud Alert?

Last updated October 7, 2026 · 1,275 words · Identity Theft

An extended fraud alert is a seven-year fraud alert on your credit reports that requires a report of identity theft filed with a law enforcement agency. It tells businesses to take extra steps to verify your identity before extending credit. Unlike an initial fraud alert, which lasts one year, an extended alert can only be placed with supporting documentation.

This guide is general educational information for U.S. readers. It is not financial advice and does not describe your individual credit file. Figures such as score ranges and timeline estimates are typical examples, not promises.

Key takeaways

An extended fraud alert remains on a credit report for seven years, compared with one year for an initial fraud alert.
Placing an extended fraud alert requires an identity theft report filed with a law enforcement agency.
A fraud alert adds a verification step for businesses that pull a credit report; it does not block access to the file.
A security freeze restricts access to a credit report and is free to place, temporarily lift, or remove under federal law.
A fraud alert is not a factor in FICO or VantageScore calculations, and neither model references it.
The three nationwide credit reporting agencies are Equifax, Experian, and TransUnion, and an alert is held at each.

An extended fraud alert is a fraud alert that stays on a consumer's credit reports for seven years. It is available to people who have filed an identity theft report with a law enforcement agency, and it directs businesses that request a credit report to take reasonable steps to verify the identity of the applicant before extending credit. It is placed separately with each of the three nationwide credit reporting agencies: Equifax, Experian, and TransUnion.

What an Extended Fraud Alert Does

A fraud alert is a notice attached to a credit report. When a lender, landlord, insurer, or other business pulls that report in connection with an application, the alert signals that the consumer may have been a victim of identity theft and that the business should confirm the applicant's identity before proceeding. Federal law defines the alert and its duration in FCRA section 605A, codified at 15 U.S.C. section 1681c-1.

Two durations appear in that section. An initial fraud alert lasts one year and can be requested by any consumer who suspects that personal information has been misused. An extended fraud alert lasts seven years and is available only to consumers who supply an identity theft report. The longer window reflects how identity theft works: a stolen Social Security number or account credential can be reused years after the original incident, and the accounts that result can appear on a credit report long after the first sign of trouble.

The Federal Trade Commission describes fraud alerts and credit freezes together as two of the primary tools available after identity theft, and its Federal Trade Commission page on credit freezes and fraud alerts explains how the two differ. The Consumer Financial Protection Bureau maintains a separate Consumer Financial Protection Bureau resource covering fraud reporting options.

What an extended fraud alert does not do

An extended fraud alert does not freeze a credit file. It does not stop a business from opening a new account in a consumer's name, and it does not remove fraudulent accounts, inquiries, or balances from a credit report. It functions as a verification signal rather than a block. Removing fraudulent information is handled through the dispute and blocking provisions of the FCRA, which operate separately from the alert itself.

How Long Does a Fraud Alert Last?

Duration is set in federal law and depends on which alert is placed. The differences are summarized below.

Alert type	How long it lasts	What is required to place it
Initial fraud alert	1 year	A request to one nationwide credit reporting agency, which must notify the other two
Extended fraud alert	7 years	An identity theft report filed with a law enforcement agency
Active duty alert	1 year	A request by an active duty service member

The question of how long fraud alerts last therefore has two common answers: one year for an initial alert and seven years for an extended alert. Seven years is also the retention period that applies to most negative information on a credit report, including late payments. Two bankruptcy entries run longer: a Chapter 7 bankruptcy stays on a credit report for 10 years, and a Chapter 13 bankruptcy stays for 7 years.

How an Extended Fraud Alert Is Placed

Placement begins with an identity theft report. In practice that means a report filed with a law enforcement agency, such as a police report, together with a completed identity theft affidavit submitted to the credit reporting agency. A request submitted to one nationwide agency triggers a notification to the other two, which then place their own alerts. Identity theft can also be reported at IdentityTheft.gov, the federal government's reporting site, and to the Internal Revenue Service using Form 14039.

According to the Federal Trade Commission, placing a fraud alert is free, and a security freeze is free to place, temporarily lift, or remove under federal law.

Extended Fraud Alert vs. Security Freeze vs. Credit Lock

These three tools are often treated as interchangeable, but they work differently. A freeze is a statutory right. A lock is a commercial feature offered by a credit reporting agency under its own terms. An alert is a statutory notice that adds a verification step without restricting access to the file.

Tool	What it does	How long it lasts
Extended fraud alert	Adds a verification step when a business pulls a credit report	7 years
Security freeze	Restricts access to a credit report until the consumer lifts it	Until removed; free to place, temporarily lift, or remove under federal law
Credit lock	A contractual feature offered by a credit reporting agency under its own terms	Set by the provider's agreement

Related reading: credit freeze and credit lock describe each of the other two tools in detail.

Fraud Alerts and Credit Scores

A fraud alert is not a factor in credit scoring. FICO's factors and their approximate weights are payment history 35%, amounts owed 30%, length of credit history 15%, new credit 10%, and credit mix 10%. VantageScore uses its own factor weighting and does not publish fixed percentages. Most credit scores, including FICO and VantageScore, use a range of 300 to 850. None of those models references the presence of a fraud alert.

What can appear on a report is the fraud itself. Accounts opened by an identity thief show up as new accounts or hard inquiries, and hard inquiries typically remain on a credit report for 2 years. Under the FCRA, a credit reporting agency generally must investigate a dispute within 30 days, and that period can extend to 45 days if the consumer provides additional information during the initial 30-day period. FCRA section 605B, at 15 U.S.C. section 1681c-2, provides a separate blocking process for information that resulted from identity theft.

For background on how those factors are assembled, see how credit scores are calculated and FICO vs. VantageScore. Ongoing review of reports and accounts, often described as credit monitoring, is how many consumers first notice an account they did not open.

Other Rights That Accompany Identity Theft

The FCRA gives consumers the right to a free credit report from each nationwide agency every 12 months; the three agencies currently provide free reports weekly through AnnualCreditReport.com.
A dispute filed with a credit reporting agency generally must be investigated within 30 days, extendable to 45 days when additional information is supplied.
FCRA section 605B, 15 U.S.C. section 1681c-2, allows a consumer to request that information resulting from identity theft be blocked from a credit file.
Identity theft can be reported at IdentityTheft.gov and to the Internal Revenue Service using Form 14039.
A security freeze is free to place, temporarily lift, or remove under federal law.

The FCRA was enacted in 1970 and amended by the Fair and Accurate Credit Transactions Act in 2003. The Consumer Financial Protection Bureau was created by the Dodd-Frank Act in 2010 and began operating in 2011, and it now houses much of the federal consumer education material on credit reporting. Broader context on how files are assembled and maintained appears in the credit reports hub and in the identity theft section.

What Happens When the Seven Years End

Once the seven-year period concludes, the alert expires and the file returns to its ordinary state. A consumer whose identity theft is ongoing or recurs can place a new alert by submitting a current identity theft report. Because each nationwide agency maintains its own record, confirming the status of an existing alert is handled directly with the individual agency, and a review of the underlying file is handled through the dispute process described above.

This page is published for education only and is not financial advice.

Compare three-bureau credit scores and reports from a single place. Educational links, disclosed below.

Three Bureau Credit Scores and Reports

CreditMonitored.com may earn a commission from partner links at no additional cost to you.

Frequently asked questions

What is an extended fraud alert?

An extended fraud alert is a notice placed on a credit report for seven years at the request of a consumer who has filed an identity theft report with a law enforcement agency. It directs businesses that request the credit report to take reasonable steps to verify the applicant's identity before extending credit. It is defined in FCRA section 605A, 15 U.S.C. section 1681c-1.

How long does an extended fraud alert last?

An extended fraud alert lasts seven years. An initial fraud alert, which does not require an identity theft report, lasts one year. Both durations are set in federal law rather than by the credit reporting agencies.

How long do fraud alerts last in general?

There are three durations in federal law: one year for an initial fraud alert, seven years for an extended fraud alert, and one year for an active duty alert requested by a service member. Only the extended alert requires an identity theft report.

Does an extended fraud alert affect a credit score?

No. A fraud alert is not one of the factors used by FICO or VantageScore. FICO's published factors are payment history, amounts owed, length of credit history, new credit, and credit mix, and VantageScore uses its own weighting without publishing fixed percentages.

What is the difference between an extended fraud alert and a security freeze?

A fraud alert adds a verification step when a business pulls a credit report, while a security freeze restricts access to the report until the consumer lifts it. A freeze is free to place, temporarily lift, or remove under federal law and does not have a fixed expiration date.

What documentation is required to place an extended fraud alert?

An extended fraud alert requires an identity theft report, which generally consists of a report filed with a law enforcement agency plus an identity theft affidavit submitted to the credit reporting agency. An initial fraud alert requires no such documentation.