Fraud Alert vs Credit Freeze: How Each One Works

What a Fraud Alert Does

A fraud alert is a notice added to a consumer report file that directs a user of that report to take reasonable steps to verify the identity of the person applying for credit. Under the Fair Credit Reporting Act, nationwide consumer reporting companies must include a fraud alert when a consumer requests one and provides appropriate proof of identity. The alert does not block a lender from seeing the file; it adds a verification condition before credit is extended.

Federal law defines two main types of fraud alerts. An initial fraud alert is available to a consumer who suspects identity theft or believes personal information may be at risk. It lasts one year and may be renewed. An extended fraud alert requires an identity theft report, such as a report filed with a law enforcement agency, and lasts seven years. An active-duty military alert has its own duration and requirements.

A fraud alert is placed with one nationwide credit reporting company, and that company must notify the other nationwide companies so the alert appears on all files. During the alert period, a business that requests a credit report is expected to use reasonable procedures to confirm identity, which may include contacting the consumer by phone. The alert does not freeze the file and does not prevent a lender from approving an application if verification succeeds.

What a Credit Freeze Does

A credit freeze, also called a security freeze, restricts access to a consumer report. Federal law gives consumers the right to place a freeze, lift it temporarily, or remove it. When a freeze is active, a creditor generally cannot obtain the report unless the consumer lifts the freeze or provides a PIN or password that the credit reporting company issued.

A freeze is more restrictive than a fraud alert. It does not alter a credit score, a credit history, or the contents of a credit report; it changes who can see the report. Existing creditors may still have access for account review, and certain government agencies may access reports for specific purposes such as child support or tax collection. A freeze does not stop all identity theft, such as misuse of an existing account or fraudulent tax filing.

A freeze remains in place until the consumer lifts or removes it. A temporary lift can be requested for a set period or for a specific creditor. Federal law sets timing rules: a credit reporting company must place or lift a freeze within one business day of an online or phone request, and within three business days of a mailed request. Freezes are free under federal law.

How They Differ in Mechanics and Duration

The core difference is the type of control each tool creates. A fraud alert creates a verification requirement; a credit freeze creates an access restriction. An alert lets a creditor see the report after identity checks, while a freeze stops most creditors from seeing the report at all until the consumer lifts it.

Duration differs as well. An initial fraud alert lasts one year, an extended fraud alert lasts seven years, and a credit freeze lasts until it is lifted or removed. An alert may expire without further action, while a freeze continues indefinitely unless the consumer acts.

Scope of placement also differs. A fraud alert placed with one nationwide credit reporting company is shared with the other nationwide companies. A freeze must be placed separately with each nationwide company. Specialty consumer reporting companies, such as those that handle employment or insurance reports, may also offer freezes under federal law.

Effect on credit decisions differs. A freeze can delay or prevent a new credit application from being processed because the lender cannot access the report. A fraud alert may add a step to the process, but it does not by itself stop the application from moving forward once the lender verifies identity.

Placing, Lifting, and Managing Each Option

A consumer requests a fraud alert by contacting one nationwide credit reporting company and providing proof of identity, such as a government-issued identification, a Social Security number, and a current address. The company then notifies the other nationwide companies. A consumer requests a credit freeze by contacting each nationwide credit reporting company separately, since a freeze is not shared across companies.

When a freeze is placed, the credit reporting company provides a PIN, password, or both. These credentials are used later to lift or remove the freeze. Because the credentials control access to the file, they are kept in a secure place. If a credential is lost, the company has a process to verify identity and restore access.

Lifting a freeze can be temporary or permanent. A temporary lift may be set for a specific date range or for a specific creditor. Federal law requires a company to lift a freeze within one hour of a phone or online request and within three business days of a mailed request. Fraud alerts can be removed or allowed to expire, and an extended alert can be renewed with a new identity theft report.

Federal law makes these tools free. A nationwide credit reporting company may not charge a fee to place, lift, or remove a fraud alert or a credit freeze. Some companies market a separate product called a credit lock, which is a contractual service rather than a legal freeze; its terms and fees are set by the company.

When Each Tool Is Used

A fraud alert is often used when a consumer suspects identity theft, receives a data breach notice, loses a wallet or purse, or wants a lighter layer of verification without blocking access to a credit file. It is also available in a specific form for active-duty service members who are deployed.

A credit freeze is used when a consumer wants to restrict access to a credit report, often after confirmed identity theft or when no new credit applications are planned. Some consumers place a freeze and lift it temporarily when they apply for credit, insurance, or a rental.

The two tools are not mutually exclusive. A freeze and a fraud alert can be in place at the same time. A freeze restricts access, while an alert adds an identity-verification step for any creditor that is allowed to see the file. Neither tool replaces reviewing a credit report, disputing inaccurate information, or filing an identity theft report.

A consumer can obtain free credit reports from the nationwide credit reporting companies through AnnualCreditReport.com. Identity theft can be reported at IdentityTheft.gov, which is operated by the Federal Trade Commission. Those reports support disputes and can document the identity theft report needed for an extended fraud alert.

Related Terms and Where to Verify Information

The terms fraud alert, credit fraud alert, and credit agency fraud alert are often used interchangeably for the same notice placed on a credit file. A fraud alert on a credit report is the same tool described above: a verification instruction tied to the file. Credit fraud is a broader term for unauthorized use of credit or credit-related information.

A credit bureau fraud alert is not an official category. The nationwide credit reporting companies are separate businesses, and a consumer requests an alert from one of them to have it shared with the others. The Fair Credit Reporting Act and the Federal Trade Commission describe the legal requirements that apply.

Authoritative information about fraud alerts and credit freezes is available from the Federal Trade Commission, IdentityTheft.gov, and the Consumer Financial Protection Bureau. These sources describe the federal rights, the duration of each tool, and the process for placing, lifting, or removing them.