Protecting Your Credit

A credit freeze stops the credit bureaus from releasing your credit report to potential creditors without your permission. When your credit is frozen, a lender pulling your credit to process an application gets blocked. This prevents someone from opening credit in your name because lenders can't access your report to approve new accounts.

To apply for new credit while frozen, you temporarily unfreeze your report (at the bureau's website) for a specific time period (hours or days), allowing the lender to access it. Then you re-freeze. A freeze is free and is the gold standard for identity theft protection.

A credit lock is similar but is offered as a service by individual bureaus. Equifax, Experian, and TransUnion each offer lock services (free or paid) that restrict access to your credit. Locks work like freezes but are managed through the bureau's service (not a legal freeze). The distinction is mainly technical—a freeze is statutory (legal), while a lock is a service.

For strong protection, set up a free credit freeze at all three bureaus (equifax.com, experian.com, transunion.com). You'll receive a PIN and can unfreeze temporarily when you want to apply for credit. This is the simplest protection tool available.

A fraud alert is a flag on your credit report that notifies lenders to take extra steps to verify your identity before approving new credit. When a fraud alert is active, a lender trying to open an account in your name sees the alert and typically calls you to confirm it's really you before proceeding.

Fraud alerts are free and last 1 year (initial alert) or 7 years (extended alert if you're a confirmed victim of fraud). You place an alert with one bureau, and it's shared across all three.

Fraud alerts are less restrictive than freezes. Your credit can still be accessed and new credit can be opened, but the lender must make extra verification efforts. This doesn't prevent fraud but slows it down and alerts you via contact attempts.

To place a fraud alert, contact any of the three bureaus (you only need to contact one, and they share it). You can extend the alert to 7 years if you're a victim of identity theft and can provide an identity theft report (police report or FTC identity theft report from identitytheft.gov).

Fraud alerts are useful for people who've already been victims and want ongoing protection, but freezes are stronger for proactive prevention.

Credit monitoring services track your credit reports and scores, alerting you to changes and potential fraud. Services range from free (basic credit report access) to paid (comprehensive monitoring with credit scores, fraud protection, and insurance).

Free monitoring is often available through banks or credit card companies. Some services like Credit Karma offer free monitoring plus free credit scores. These let you see your credit file and get alerts about major changes like new inquiries or new accounts.

Paid services ($10–20/month) typically include:

Continuous credit score monitoring from all three bureaus. Alerts when your credit report changes (new accounts, inquiries, address changes). Identity theft insurance (up to $1M in some cases). Credit optimization tips based on your profile. Monitoring typically alerts you to changes within 1–3 days of them happening.

The value of monitoring is early detection. If someone opens a fraudulent credit card in your name, you'll know within days instead of weeks, limiting damage. However, monitoring doesn't prevent fraud—it detects it. Prevention is done through freezes and fraud alerts.

Recommendation: use free monitoring (Credit Karma, your bank's service) to start. If you've been a victim of fraud or have high net worth and want comprehensive protection, paid monitoring adds value.

If you discover you're a victim of identity theft, act immediately. The faster you respond, the less damage occurs.

Step 1: Report to the FTC at identitytheft.gov. This generates an official identity theft report you'll need for disputing fraudulent accounts. The FTC provides a customized recovery plan.

Step 2: Call the three credit bureaus and place a fraud alert. Provide them with your identity theft report. The alert notifies lenders that your identity may have been compromised.

Step 3: Review your credit reports from all three bureaus (free at annualcreditreport.com). Identify all fraudulent accounts and unauthorized inquiries.

Step 4: Dispute fraudulent accounts with each bureau using your identity theft report. Include documentation of the theft.

Step 5: Contact creditors directly for accounts opened fraudulently in your name. Many have fraud departments and can close fraudulent accounts without payment responsibility.

Step 6: File a police report if applicable (particularly for serious fraud or if someone has stolen physical documents). Provide the police report number to creditors and bureaus.

Step 7: Monitor your credit continuously for months to ensure no new fraudulent accounts appear.

Step 8: Consider placing an extended 7-year fraud alert or credit freeze.

The entire process takes weeks to months, depending on the scope of fraud. Creditors must investigate within 30 days, similar to credit disputes. Fraudulent accounts can typically be removed from your report with documentation.

Beyond using monitoring services, build daily habits that protect your credit:

Check your credit reports at least annually (all three) at annualcreditreport.com. More frequently if you've had issues.

Review statements monthly. Watch credit card statements, loan statements, and bank statements for unauthorized transactions.

Check your credit reports for unknown accounts and unauthorized inquiries.

Monitor your mail. Unexpected credit card offers, statements, or bills might indicate fraud. Set up paperless billing for sensitive accounts so fraudulent mail stands out.

Use strong, unique passwords for online banking and credit accounts. Use a password manager if possible. Avoid reusing passwords across accounts.

Be cautious with personal information. Don't share your SSN unless necessary. Ask why it's needed before providing it. Secure your SSN on tax returns and financial documents.

Secure your mailbox. A locked mailbox prevents mail theft. Remove mail promptly. Consider a PO Box if mail theft is a concern.

Use credit freezes. This is the single most effective prevention tool. If your credit is frozen, fraudsters can't open accounts in your name even if they have your SSN.

Watch for phishing scams. Criminals send emails pretending to be banks or credit companies, asking for personal information. Legitimate banks don't request sensitive information via email. If you get an email like this, ignore it and call the bank directly.

Identity theft is a crime, but it's not necessarily permanent or catastrophic if you respond quickly. The FTC estimates identity theft victims spend 100+ hours recovering, but the financial damage is often limited if caught early.

Your legal protections under the FCRA and other federal law are strong. Creditors must remove fraudulent accounts if you provide an identity theft report. Fraudulent accounts can't be enforced against you if you prove they weren't yours. Creditors can't pursue you for fraudulent debt (though disputes take time to resolve).

Most victims don't have to pay for fraudulent accounts opened in their name. The Fair Credit Reporting Act places the burden on the creditor to verify the account owner, and if they can't prove it was you, the account must be removed. Credit card companies often write off small fraudulent charges rather than pursue them.

How much damage depends on how much fraud occurred and how quickly you detected it. Small fraud caught within weeks might only require disputing a few accounts. Large fraud scale might require months of work disputing dozens of accounts. Either way, you have legal remedies and tools to recover.

Protecting credit isn't a one-time action—it's ongoing maintenance. Think of it like health: you don't go to the doctor once and assume you're healthy forever; you have annual checkups and maintain good habits.

Monthly: Review statements and credit card transactions.

Quarterly: Check credit scores (from free services). Look for unexpected changes.

Annually: Request and review your credit reports from all three bureaus (free at annualcreditreport.com). This is the most important annual task.

As-needed: Update passwords, especially after data breaches (when services notify you of breaches). Monitor recommended articles or financial websites for fraud alerts and scams targeting consumers.

When applying for credit: Be strategic about timing. Too many inquiries in short periods looks like financial desperation. Space applications 3–6 months apart if possible. If you're rate shopping for auto loans or mortgages, do it within 14–45 days so the inquiries count as one.

When sharing information: Question why it's needed. Your SSN, date of birth, and address are sensitive—never provide them via email or to unknown callers. Verify the entity requesting information by calling them directly (not using a number they provide).

When passwords are breached: Most breaches happen at company systems (not because you did something wrong). When a service notifies you of a breach, change your password immediately, especially if you reused the password elsewhere. This is why unique passwords per account are important.