Credit freeze vs. fraud alert: which protection do you need?

Quick answer: A credit freeze restricts access to your credit report, while a fraud alert tells lenders to take identity-verification steps before granting new credit. You must request a freeze separately from all three nationwide bureaus. For an initial fraud alert, contact one bureau; it must notify the other two. Both are free, and you can have both at the same time. Neither automatically removes fraudulent accounts or resolves misuse of existing accounts.

Choose the action that fits the problem

The FTC explains the difference between freezes and fraud alerts. A freeze limits new-credit access, including access needed for your own applications. An alert allows the report to be accessed but adds an identity-verification requirement.

When a freeze may fit your needs

If you want to restrict access and are willing to manage temporary lifts for legitimate applications, a freeze directly addresses that goal. You do not have to wait for proof of identity theft. Keep the account-access and recovery instructions for each bureau secure.

Before applying for credit, ask the lender which bureau reports it needs. A freeze is a restriction on access, not a promise that an application will be approved once the restriction is removed.

When a fraud alert may fit your needs

If you suspect identity theft, an initial alert tells prospective creditors to verify identity. Make sure the contact information you supply is current so legitimate verification attempts can reach you.

If identity theft has actually occurred, an extended fraud alert may be available. The FTC says it lasts seven years and requires an FTC identity theft report or a police report. An initial alert and an extended alert have different eligibility and documentation requirements.

Use the official instructions linked by the FTC rather than paying a service solely to place an alert. Save the confirmation and note when an initial alert needs renewal.

Can you use a freeze and an alert together?

Yes. The FTC explicitly states that you can add a fraud alert even when a freeze is already in place. Treat them as separate controls and check their status separately.

Illustrative scenario: You receive a breach notice, are not applying for credit, and suspect your identity could be misused. You can request freezes at all three bureaus and place an initial fraud alert through one bureau. If an unfamiliar account later appears, investigate it; the existence of protections does not explain away the account.

If you have already found an unfamiliar credit check, follow our guide to disputing an unrecognized hard inquiry. A freeze or fraud alert does not remove an existing inquiry.

What if an account is already fraudulent?

For entries caused by identity theft, see how to request an identity theft block. The checklist covers correcting reported information alongside the separate freeze or alert you use for protection.

1. Save the relevant report entry and any notices.
2. Contact the affected company’s fraud department using verified contact details.
3. Use IdentityTheft.gov to report identity theft and obtain recovery steps.
4. Review the rest of your reports and financial accounts for related problems.

Our credit report reading guide helps you locate account details. An unfamiliar entry can also arise from a mixed file, so compare the evidence before deciding what occurred; see what to do when someone else’s information appears on your report.

Keep the protections organized

Record the date, bureau, confirmation, and any renewal or temporary-lift period. Review paid products separately using our identity theft protection vs. credit monitoring guide. A paid alert service should not be confused with the free fraud alert that you place on your credit file.

Turn the decision into separate tasks

For an initial fraud alert, record which bureau you contacted, the confirmation date, the contact details you supplied, and the expiration or renewal information in the confirmation. For freezes, track three separate bureau statuses. Do not use a single checkbox labeled “identity protected” for both tasks.

If you also need to apply for credit, ask the lender how it will contact you to verify identity and when it needs report access. Keep your contact details current and arrange any necessary temporary lift. Our three-bureau freeze guide covers the separate access restrictions. Suspected misuse of an existing account still needs attention from the affected institution.

Three alerts with different purposes

The initial, extended, and active-duty alerts are distinct options. Use the FTC’s current alert guidance to choose the one that fits your circumstances.

Contacting one bureau starts the alert-notification process to the others. That sharing rule does not apply to freezes. If you choose both protections, your task list still needs three individual freeze requests as well as the alert request.

Choose your next action from the evidence you have

You received a breach notice but see no unfamiliar account

Save the notice and identify what information it says was affected. You can request freezes without waiting for an account to appear. If you suspect possible identity theft, consider the initial-alert route as well. A paid service offered with a notice should be evaluated separately from these free actions.

A company contacts you about an account you did not open

Do not use an unexpected message’s link or telephone number as your only way to verify it. Contact the company’s fraud department through independently verified details and preserve the account notice. Freezes and alerts address future access and verification; they do not close or correct the account in the notice.

An existing card has a charge you do not recognize

Start with the card issuer’s fraud-reporting process and review the account. Freezing a bureau file is a different action from replacing a compromised card or securing an existing login. Keep the two workstreams separate so an important account-level response is not left undone after you receive a freeze confirmation.

Prepare for legitimate identity checks

If you place an alert, keep the contact details associated with it accurate. When applying for credit, ask the lender how it handles identity verification and respond through its verified channel. An alert should not be treated as an automatic denial, but you should plan for the additional verification step.

Illustrative scenario: You have an initial alert and three freezes, then decide to apply for an auto loan. Coordinate the necessary freeze lifts with the lender. Separately, make sure the lender can reach you for identity verification. Lifting a freeze does not mean you intended to remove the alert.

Afterward, record the freeze status, the alert’s expiration date, and any unresolved fraudulent-account issue on separate lines. This makes the next review specific: restore a restriction, renew an alert, or follow up on a company response. A single “done” note would conceal which of those tasks still needs attention.

Download the private worksheet

Download the three-page credit review and freeze worksheet pack (PDF). Start with page 2 to track each bureau and any temporary lift. Print the relevant page and complete it offline. This organizer is not a bureau request form; keep identifying numbers and passwords out of it.

By Claire Bennett, the editorial name used by the site’s founder and editor. Factual guidance checked against the official sources below. Cover photograph: Vitaly Gariev / Unsplash.

Explore related guides on credit reports and disputes.

Sources

• FTC: credit freezes and fraud alerts
• CFPB: security freezes and processing times
• FTC: protecting a child’s identity

Sources checked October 3, 2026. This article provides general educational information for U.S. readers, not individualized financial or legal advice.