Fraud Alert vs. Credit Freeze: How the Two Protections Differ

Last updated October 7, 2026 · 1,506 words · Identity Theft

A fraud alert tells businesses to verify identity before extending credit, while a credit freeze blocks access to a credit file until the consumer removes it. An alert is a flag shared across the three nationwide agencies; a freeze is an access restriction applied separately at each. Both are consumer rights under the FCRA.

This guide is general educational information for U.S. readers. It is not financial advice and does not describe your individual credit file. Figures such as score ranges and timeline estimates are typical examples, not promises.

Key takeaways

A fraud alert tells businesses to verify identity before extending credit, while a credit freeze prevents a credit reporting agency from releasing the file to most third parties.
An initial fraud alert lasts 1 year, and an extended fraud alert lasts 7 years.
A security freeze is free to place, temporarily lift, or remove under federal law, and it stays in place until the consumer removes it.
A freeze is requested from each nationwide agency individually, while an alert placed with one agency is referred to the other two.
Neither tool is a factor in credit scoring models, and neither removes information from a credit file.
FCRA section 605A covers fraud alerts, and section 605B covers blocking of information that resulted from identity theft.

A fraud alert asks businesses to verify a consumer's identity before extending credit, while a credit freeze blocks a credit reporting agency from releasing the file to most third parties until the consumer removes it or lifts it temporarily. Both are rights under the Fair Credit Reporting Act (FCRA), and both are handled through the three nationwide credit reporting agencies: Equifax, Experian, and TransUnion. The core of the difference between a fraud alert and a credit freeze is access — an alert lets a credit application move forward with added identity checks, while a freeze stops most new lenders from pulling the file at all.

According to the Federal Trade Commission, both tools are free, and a consumer can use them at the same time.

What a fraud alert does

A fraud alert is a notice added to a credit file that tells businesses to take reasonable steps to confirm identity before extending credit. It does not prevent a business from obtaining a credit report; it changes what the business is expected to do with the request. The same Federal Trade Commission page describes an alert as a signal that a consumer may be a victim of identity theft, and creditors generally respond by verifying identity through an additional method before opening a new account.

FCRA section 605A, codified at 15 U.S.C. section 1681c-1, sets out two versions of the alert:

Initial fraud alert. Lasts 1 year.
Extended fraud alert. Lasts 7 years and is available to a consumer who has filed an identity theft report.

The statute also directs a nationwide agency that receives an alert to notify the other nationwide agencies, which is why one request generally covers all three files. A fraud alert changes nothing inside the file itself. Balances, payment history, and account ages remain exactly as they were before the alert was placed.

What a credit freeze does

A security freeze is an access restriction. When a freeze is active, a credit reporting agency will not release the credit report or a credit score to a third party without express authorization from the consumer. Federal law makes a freeze free to place, to lift temporarily, and to remove.

The FTC notes that a freeze must be requested from each of the three nationwide agencies separately. That is a key contrast with a fraud alert, which one agency refers to the others. A freeze can be lifted for a defined window or for a specific business and then put back in place, because a frozen file cannot be pulled by most new lenders while the freeze stands.

Fraud alert vs. credit freeze at a glance

Feature	Fraud alert	Credit freeze
Core effect	Tells businesses to verify identity before extending credit	Blocks release of the credit file to third parties without express authorization
Duration	1 year for an initial alert; 7 years for an extended alert	Remains in place until the consumer removes it or lifts it temporarily
Cost	Free	Free to place, temporarily lift, or remove under federal law
Where it is placed	One nationwide agency, which refers it to the other two	Each of the three nationwide agencies separately
Effect on a new credit application	The application can proceed once the creditor verifies identity	The application may be delayed or declined because the file cannot be pulled
Statutory basis	FCRA section 605A, 15 U.S.C. section 1681c-1	FCRA; federal law makes placing, temporarily lifting, and removing a freeze free

Where a credit lock fits

A credit lock is a separate product offered by an individual credit reporting agency, and its terms are set by the company that offers it rather than by statute. A security freeze is defined in federal law and is free to place, temporarily lift, or remove. Anyone comparing the two can read the lock's contract terms alongside the statutory definition; the guide to credit locks and the guide to security freezes cover the distinction in more detail.

Using a fraud alert and a credit freeze together

The two tools are not mutually exclusive. A freeze limits who can pull the file, and an alert adds a verification expectation for the businesses that are still permitted to obtain it. Placing both means a new lender that cannot reach a frozen file is stopped at the access stage, while an existing creditor or another party with a permissible purpose still encounters the alert when it pulls the file.

Neither step alters the data in the file, and neither is a factor in a credit scoring model. The credit reports held by the three agencies continue to show the same accounts, balances, and payment records.

Extended alerts and blocked information after identity theft

An extended fraud alert runs for 7 years and requires an identity theft report. FCRA section 605B, codified at 15 U.S.C. section 1681c-2, is a separate provision that lets a consumer who has filed an identity theft report ask a credit reporting agency to block information in the file that resulted from the theft. The two address different problems: an alert changes how businesses handle credit requests, while a block removes specific items from the file.

Identity theft can be reported at IdentityTheft.gov and to the IRS using Form 14039. The Consumer Financial Protection Bureau publishes consumer tools on fraud and scams that describe how reports are filed and what happens afterward, and the identity theft section of this site walks through the documentation that reports typically require.

What neither tool does

A fraud alert does not remove an account, a late payment, or a collection account from a credit file.
A credit freeze does not remove information or change how a credit score is calculated.
Neither tool blocks an existing creditor, a debt collector, or a government agency that has a permissible purpose or a legal exception.
Neither tool prevents every form of identity theft, such as misuse of a Social Security number to file a tax return.
A freeze placed with one agency does not apply to the files held by the other two.
Neither tool is permanent: an alert expires, and a freeze remains until it is removed.

How alerts and freezes relate to credit reports and scores

Neither a fraud alert nor a credit freeze appears as a factor in a credit scoring model. Most credit scores, including FICO and VantageScore, use a range of 300 to 850, and the inputs come from the underlying file. FICO publishes approximate weights for its factors: payment history 35%, amounts owed 30%, length of credit history 15%, new credit 10%, and credit mix 10%. VantageScore uses its own weighting and does not publish fixed percentages. The FICO and VantageScore comparison and the guide to how credit scores are calculated explain how those inputs are assembled, and credit scores are covered in more depth in the main section of this site.

Because an alert and a freeze leave the underlying data untouched, they do not change a score by themselves. A freeze can still shape an outcome indirectly, since a lender that cannot pull a file usually cannot approve a request. The factors that move a score are the ones inside the file — payment history, amounts owed relative to credit limits, and the age of accounts.

Under the FCRA, consumers are entitled to a free credit report from each nationwide agency every 12 months, and the three agencies currently provide free reports weekly through AnnualCreditReport.com. If a dispute is filed, an agency generally must investigate within 30 days; that period can extend to 45 days when the consumer provides additional information during the initial 30-day window.

Other timing rules matter when a file is reviewed after identity theft. Most negative information, including late payments, stays on a credit report for 7 years. A Chapter 7 bankruptcy stays for 10 years and a Chapter 13 bankruptcy stays for 7 years. Hard inquiries typically remain on a credit report for 2 years. A credit check shows what is currently reporting, and a credit profile review can confirm whether an unfamiliar account has appeared.

Renewal, removal, and record keeping

Fraud alerts expire. The 1-year initial alert and the 7-year extended alert eventually end and would need to be re-established if the concern continues. Freezes do not expire on their own; they stay until they are removed. Because a freeze has to be handled at each of the three nationwide agencies, keeping a record of when each freeze was placed, lifted, or removed makes it easier to confirm the current status of every file.

Credit monitoring tracks a file over time and can surface new accounts or inquiries, but it does not replace the access restriction that a freeze provides. The two serve different purposes, and the difference between a fraud alert and a credit freeze comes down to the same idea: an alert changes what a business does with a credit file, and a freeze changes whether the business can see it at all.

This page is for education only and is not financial advice.

Compare three-bureau credit scores and reports from a single place. Educational links, disclosed below.

Three Bureau Credit Scores and Reports

CreditMonitored.com may earn a commission from partner links at no additional cost to you.

Frequently asked questions

What is the main difference between a fraud alert and a credit freeze?

A fraud alert tells businesses to take reasonable steps to verify identity before extending credit, but it still allows the credit file to be pulled. A credit freeze blocks a credit reporting agency from releasing the report or score to most third parties without express authorization from the consumer.

How long does each one last?

An initial fraud alert lasts 1 year, and an extended fraud alert lasts 7 years. A security freeze has no set expiration and remains in place until the consumer removes it, although it can be lifted temporarily for a defined period or a specific business.

Do I have to contact all three credit reporting agencies?

A freeze must be requested from each of the three nationwide agencies — Equifax, Experian, and TransUnion — separately. A fraud alert placed with one nationwide agency is referred by that agency to the other two under FCRA section 605A.

Does a fraud alert or a credit freeze affect credit scores?

Neither is a factor in credit scoring models. Most scores, including FICO and VantageScore, use a range of 300 to 850 and are calculated from items in the credit file such as payment history, amounts owed, length of credit history, new credit, and credit mix. Alerts and freezes do not change that data.

Can a consumer have a fraud alert and a credit freeze at the same time?

Yes. The two are separate protections and can be in place together. The freeze controls access to the file, and the alert sets a verification expectation for the businesses that are permitted to obtain it.

What is the difference between a credit freeze and a credit lock?

A security freeze is defined in federal law and is free to place, temporarily lift, or remove. A credit lock is a product offered by an individual credit reporting agency, and its terms are set by that company rather than by statute.