What Is a Fraud Alert and How Does It Work?
A fraud alert is a notice placed on a credit file that asks lenders to take reasonable steps to verify identity before extending credit. Federal law sets two versions: an initial alert lasting one year and an extended alert lasting seven years. It adds a verification step but does not freeze the file.
This guide is general educational information for U.S. readers. It is not financial advice and does not describe your individual credit file. Figures such as score ranges and timeline estimates are typical examples, not promises.
Key takeaways
- A fraud alert is a consumer right under section 605A of the Fair Credit Reporting Act, 15 U.S.C. section 1681c-1, and it asks lenders to verify identity before extending credit.
- An initial fraud alert lasts 1 year, while an extended fraud alert lasts 7 years and requires an identity theft report.
- Contacting one nationwide credit reporting agency is enough, because that agency must notify the other two.
- A fraud alert is not a security freeze: a freeze is free to place, temporarily lift, or remove under federal law and restricts access to a credit file.
- A fraud alert is not a factor in FICO or VantageScore models, which use a score range of 300 to 850.
A fraud alert is a notice added to a credit file that tells lenders and other users of that file to take reasonable steps to verify a person's identity before extending credit. It is a consumer right created by section 605A of the Fair Credit Reporting Act (FCRA), 15 U.S.C. section 1681c-1, and it can be placed with each of the three nationwide credit reporting agencies — Equifax, Experian, and TransUnion. A fraud alert adds a verification step; it does not lock a file the way a security freeze does.
What a credit fraud alert changes on a file
When a business requests a credit file that carries an active alert, the alert signals that the file's owner has reported or suspects identity theft. The business is expected to take reasonable extra steps to confirm that the applicant is the person described in the file, often by contacting a phone number the consumer has on record with the credit reporting agency. The Federal Trade Commission describes fraud alerts and security freezes as separate tools that consumers can use after identity theft.
The practical effect is friction rather than a wall. An application that would otherwise be decided automatically may pause while identity is confirmed, and a consumer whose contact details are out of date may not be reachable for that confirmation.
Initial fraud alerts and extended fraud alerts
The FCRA sets two durations. An initial fraud alert lasts 1 year. An extended fraud alert lasts 7 years.
| Feature | Initial fraud alert | Extended fraud alert |
|---|---|---|
| Duration | 1 year | 7 years |
| What supports the request | A good-faith suspicion that identity theft has occurred or is about to occur | An identity theft report |
| Typical documentation | Proof of identity | Proof of identity plus the identity theft report |
| End of term | Falls off unless placed again | Remains for the full term unless removed |
The identity theft report is what separates the two categories. A person whose identity has been stolen can report it at IdentityTheft.gov, and the Internal Revenue Service accepts Form 14039 for tax-related identity theft. The extended alert is the longer, document-backed version of the same mechanism.
Placing a credit bureau fraud alert
According to the FTC, contacting one of the three nationwide credit reporting agencies is enough, because that agency must tell the other two. Identity is verified during the process, usually with identifying documents, and the alert then applies across the three nationwide files. An alert can also be removed before its term ends.
Because the terms are fixed, a fraud alert is time-limited rather than permanent. An initial alert that is not placed again simply expires at the end of its year, and the file returns to its prior state. Contact information attached to the alert matters for the same reason: verification only works if the lender can reach the right person.
Fraud alert, security freeze, and credit lock compared
| Tool | What it does | Legal basis | Cost and term notes |
|---|---|---|---|
| Fraud alert | Directs lenders to take reasonable steps to verify identity before extending credit | FCRA section 605A, 15 U.S.C. section 1681c-1 | Lasts 1 year as an initial alert or 7 years as an extended alert |
| Security freeze | Restricts access to the credit file so most new-account inquiries are blocked until the freeze is lifted | Federal law | Free to place, temporarily lift, or remove |
| Credit lock | A commercial feature offered by a credit reporting agency that resembles a freeze in function | Agency contract terms, not the FCRA | Governed by the agency's own agreement and conditions |
Both fraud alerts and security freezes are rights created by federal law. A freeze goes further: it blocks access rather than prompting verification. Credit locks sit outside that framework, because they are contractual products rather than statutory rights. More detail is available on this site's pages about credit freezes and credit locks.
What a fraud alert does not do
- It does not freeze a credit file. Lenders can still access the file; the alert asks them to verify identity first.
- It does not remove fraudulent accounts, collection items, or unauthorized inquiries from a credit report.
- It is not recorded as a negative item, and it is not an input to credit scoring models.
- It does not cover bank accounts, tax filings, medical records, or government benefits.
- It does not last indefinitely; the FCRA sets the 1-year and 7-year terms for the two alert types.
Fraud alerts alongside disputes and blocked information
Fraud alerts sit beside two other FCRA mechanisms that address inaccurate information directly. A credit reporting agency generally must investigate a dispute within 30 days, and that period can extend to 45 days if the consumer provides additional information during the initial 30-day period. Separately, section 605B of the FCRA, 15 U.S.C. section 1681c-2, allows a consumer who submits an identity theft report to ask an agency to block information that resulted from identity theft. Both provisions are published in full by Cornell Law School's U.S. Code collection.
Timelines explain why this matters. Most negative information, including late payments, stays on a credit report for 7 years. A Chapter 7 bankruptcy stays for 10 years, and a Chapter 13 bankruptcy stays for 7 years. An account opened fraudulently that is never disputed or blocked can therefore remain visible on a file for years, long after the alert itself has expired.
Fraud alerts and credit scores
Most credit scores, including FICO and VantageScore, use a range of 300 to 850. A fraud alert is not one of the inputs to either model. FICO publishes approximate weights for the factors it considers:
| FICO factor | Approximate weight |
|---|---|
| Payment history | 35% |
| Amounts owed | 30% |
| Length of credit history | 15% |
| New credit | 10% |
| Credit mix | 10% |
VantageScore uses its own factor weighting and does not publish fixed percentages. Nothing about a fraud alert changes how any of these factors are calculated. A fraudulent account on a report, however, can touch several of them at once: an unpaid balance attributed to the consumer may be counted in amounts owed, and a late payment on a fraudulent account may be counted in payment history. The mechanics are described in the guides on payment history, credit utilization, and how credit scores are calculated.
Reviews, reports, and monitoring alongside an alert
Under the FCRA, consumers have the right to a free credit report from each nationwide agency every 12 months, and the three agencies currently provide free reports weekly through AnnualCreditReport.com. Those reports are where unauthorized accounts and unfamiliar inquiries usually surface, and hard inquiries typically remain on a credit report for 2 years. The Consumer Financial Protection Bureau publishes consumer-facing material on fraud and scams, including how to recognize them and where to report them.
Fraud alerts work as one layer among several. Reports show what is on a file, monitoring services watch for changes between reviews, freezes limit access to the file, and identity theft report blocking targets specific items that came from theft. This site covers those layers on the credit reports, credit monitoring, credit check, and identity theft pages, with additional context on the credit profile and credit score hubs and in the comparison guide FICO vs. VantageScore.
This page is for education only and is not financial advice.
Compare three-bureau credit scores and reports from a single place. Educational links, disclosed below.
Three Bureau Credit Scores and ReportsCreditMonitored.com may earn a commission from partner links at no additional cost to you.
Frequently asked questions
What is a fraud alert in simple terms?
A fraud alert is a notice placed on a credit file that asks lenders and other users of that file to take reasonable steps to verify identity before extending credit. It is a right under section 605A of the Fair Credit Reporting Act, 15 U.S.C. section 1681c-1, and it can be placed with Equifax, Experian, and TransUnion.
How long does a fraud alert last?
An initial fraud alert lasts 1 year. An extended fraud alert lasts 7 years and requires an identity theft report. An initial alert that is not placed again expires at the end of its term.
Do I need to contact all three credit reporting agencies to place one?
According to the Federal Trade Commission, contacting one of the three nationwide credit reporting agencies is enough, because that agency must tell the other two. Identity is verified during the process, typically with identifying documents.
Does a fraud alert affect a credit score?
A fraud alert is not a factor in FICO or VantageScore models. Most credit scores, including FICO and VantageScore, use a range of 300 to 850, and the factors considered are payment history, amounts owed, length of credit history, new credit, and credit mix, with VantageScore using its own weighting.
What is the difference between a fraud alert and a security freeze?
A fraud alert asks lenders to verify identity before extending credit. A security freeze restricts access to the credit file so most new-account inquiries are blocked until the freeze is lifted. A freeze is free to place, temporarily lift, or remove under federal law.
Will a fraud alert remove fraudulent accounts from a credit report?
No. A fraud alert is a verification prompt, not a deletion mechanism. Removing inaccurate or fraudulent items involves the dispute process, which a credit reporting agency generally must investigate within 30 days, extendable to 45 days if the consumer provides additional information during the initial 30-day period, or identity theft report blocking under FCRA section 605B, 15 U.S.C. section 1681c-2.
Related guides
- How Credit Scores Are Calculated
- Fico Vs Vantagescore
- Payment History And Credit Scores
- Credit Utilization Explained