Credit Freeze Equifax: Placement, Lifts, and Removal

What a Freeze Does to an Equifax File

A security freeze, often called a credit freeze, is a restriction that a consumer places on their own consumer report. Under the Fair Credit Reporting Act, as amended by the Economic Growth, Regulatory Relief, and Consumer Protection Act, a nationwide credit reporting company generally may not release the contents of a frozen file to a third party without the consumer's express authorization. Equifax maintains its own files, as do Experian and TransUnion, and a freeze is recorded only on the file named in the request.

In practice, the restriction is most visible during a new credit application, because most lenders request a report before making a decision. A frozen file also means that a business or other user cannot pull the report without authorization, subject to exceptions written into the statute. Those exceptions include a company that already does business with the consumer, a debt collector working an existing account, and certain government requests made under legal authority.

A freeze does not delete or correct anything in the file; it changes who is permitted to see the file. Consumers can still obtain their own report and their own credit score from the company that holds the frozen file, so the freeze does not shut a consumer out of their own information.

Because a freeze is not one of the factors used in the widely used credit scoring models, placing or removing one does not add or subtract points by itself. It is best understood as an access control rather than a scoring event.

• A freeze restricts release of the file to third parties without express authorization.
• Existing creditors and collectors acting on existing accounts generally retain access.
• Consumers retain access to their own report and score.

Why an Equifax Freeze Does Not Cover the Other Companies

The three nationwide credit reporting companies keep separate files, and none of them forwards a freeze instruction to the others. A freeze recorded by Equifax has no effect on the files maintained by Experian or TransUnion. A consumer who wants the restriction to apply everywhere must request it from each company individually, which is the same pattern described in the general credit-freeze guide and in the guide to freezing a file with Experian.

This matters because lenders differ in which company they pull from. Some pull from a single company, some pull from two, and some pull from all three. A freeze in place at one company limits access to that company's file only, so the practical coverage of a single freeze depends on the lender's own reporting practices.

Smaller specialty consumer reporting companies, such as those used for banking history and employment screening, also maintain files. Federal law gives consumers freeze rights with those companies as well, and those requests must also be made one company at a time.

How a Freeze Is Placed at Equifax

A security freeze can be requested online, by telephone, or by mail. Federal law requires that these requests be free of charge at every nationwide credit reporting company, and the same three channels are available at each of them.

Timing rules are set by statute rather than by company policy. When a freeze is requested online or by phone, the company must place it within one business day. When the request arrives by mail, the company has three business days after receiving it to place the freeze. Each company also has obligations to confirm the freeze and to explain how to lift it.

A freeze request is an identity-sensitive transaction, so the company will ask for identifying details before acting. In return, the company issues a personal identification number, password, or similar credential that is used later to lift or remove the freeze. That credential is the practical key to the freeze, and requests to lift a freeze generally move fastest when it is available.

When a freeze is requested by mail rather than online, companies commonly ask for copies of documents that corroborate identity and current address. These copies are used to match the request to the correct file and are not a substitute for the credential issued afterward.

• Full legal name, including any suffix
• Current address and recent prior addresses
• Social Security number and date of birth
• For mailed requests, copies of a government-issued identification and a document showing current address

Freeze, Lock, and Fraud Alert Are Different Tools

A security freeze is a right created by statute. A credit lock is a product offered by a credit reporting company and is governed by that company's terms of service rather than by the freeze provisions of the Fair Credit Reporting Act. A lock may be marketed as faster or easier to toggle, but its scope, duration, and dispute process are set by contract, and a lock at one company does not extend to the others.

A fraud alert works differently again. It does not block access to a file. Instead, it directs a business that receives the report to take reasonable steps to verify the identity of the person applying for credit. An initial fraud alert lasts one year, while an extended fraud alert, which requires an identity theft report, lasts seven years. Both are free, and a fraud alert placed with one company must be shared with the other nationwide companies.

The three tools are not mutually exclusive. A freeze can remain in place indefinitely until the consumer asks for it to be removed, whereas a fraud alert expires. Consumers dealing with confirmed identity theft sometimes use an extended fraud alert in addition to a freeze, and a recovery plan from IdentityTheft.gov can help organize those steps.

Company branding adds another layer of confusion, because the same word, lock, is used by multiple companies for different products. The reliable question is whether the arrangement is a security freeze under the statute or a contract-based lock that a company can change on its own terms.

Lifting or Removing an Equifax Freeze

A freeze can be paused rather than removed. Consumers can request a temporary lift for a specific period, which is useful when an application is expected, or they can request permanent removal. Both actions require the credential issued at placement, or a fresh identity verification if that credential has been lost.

The same statutory clocks apply in reverse. A lift or removal requested online or by phone must be completed within one hour, and one requested by mail must be completed within three business days of receipt. A freeze does not expire on its own and stays in place until the consumer requests removal, which distinguishes it from a fraud alert.

If a lender cannot obtain the report because a freeze is active, the application may be delayed or declined. Scheduling a temporary lift so that it covers the application window is one way consumers coordinate a freeze with a planned credit application, and the unfreeze guide covers the same mechanics for the other companies.

Identity theft adds a further layer. If information in a file is the result of identity theft, an identity theft report can support a dispute over that information, and it is also the document that unlocks an extended fraud alert. A freeze and a dispute address different problems: one controls access, and the other addresses accuracy.

What a Freeze Does Not Do

A freeze does not close accounts, and it does not stop a thief who already has an account number from using it. Existing creditors and debt collectors working existing accounts can generally still access the file, so a freeze is not a substitute for reviewing statements and account activity.

A freeze also does not address every kind of identity theft. Tax-related, medical, and employment-related fraud typically run through records held by other institutions, and a credit file freeze has no direct effect on those records.

Freezes do not change the underlying information in a file, and they do not stop a consumer from obtaining the free annual reports available through the centralized process established by federal law. Consumers who want to limit prescreened credit offers use a separate opt-out process established under the Fair Credit Reporting Act, which operates independently of a freeze.

Finally, a freeze is not a monitoring service. It restricts new access rather than flagging new activity, so it is commonly paired with periodic report review rather than treated as a complete answer to identity theft.