Credit Freeze and Security Freeze: How They Work

What a Credit Freeze Security Freeze Is

In federal law, the terms credit freeze and security freeze refer to the same mechanism. A freeze restricts a nationwide credit reporting company from releasing a consumer's credit report to a third party without the consumer's express authorization. The Fair Credit Reporting Act, as amended by the Economic Growth, Regulatory Relief, and Consumer Protection Act, sets the baseline requirements for freezes.

A freeze is not a lock. A credit lock is a contractual feature offered by a credit reporting company, and its terms are set by that company. A freeze is a statutory right that applies to Equifax, Experian, and TransUnion, the three nationwide credit reporting companies.

When a freeze is active, most creditors cannot obtain a credit report to evaluate a new application. The freeze does not prevent the consumer from obtaining their own credit report, including the free reports available through annualcreditreport.com.

• Credit freeze and security freeze are interchangeable in federal law.
• A freeze applies to credit reports, not to credit scores directly.
• A freeze remains in place until the consumer lifts or removes it.

How a Freeze Differs from a Fraud Alert

A fraud alert is a separate tool. It requires creditors to take reasonable steps to verify a consumer's identity before extending credit. An initial fraud alert lasts one year; an extended fraud alert, supported by an identity theft report, lasts seven years.

A freeze blocks access to the credit report unless the consumer lifts it. A fraud alert does not block access; it adds a verification step. Both are free, but they serve different purposes.

A consumer can place a fraud alert with one nationwide credit reporting company, and that company must notify the other two. A freeze must be placed separately with each company. This is a key operational difference.

• Fraud alert: verification step, does not block report access.
• Freeze: blocks report access until lifted or removed.
• Fraud alert can be placed with one company; freeze must be placed with each.

Placing a Freeze at Each Nationwide Credit Reporting Company

Consumers can request a freeze online, by phone, or by mail. Each of the three nationwide credit reporting companies maintains a dedicated process for freeze requests and identity verification.

Federal law sets timing requirements. If a freeze is requested by phone or online, the company must place it within one business day. If requested by mail, the company must place it within three business days. There is no fee for placing, lifting, or removing a freeze.

A freeze requested at one company does not automatically apply to the others. A consumer who wants a freeze at all three must contact Equifax, Experian, and TransUnion separately. Some states have additional requirements, but the federal baseline applies nationwide.

• Online or phone: freeze placed within one business day.
• Mail: freeze placed within three business days.
• No fee for placing, lifting, or removing a freeze.

What a Freeze Does and Does Not Do

A freeze limits access to a credit report for most third parties. It does not prevent existing creditors from accessing the report for account review, collection, or other permissible purposes. It also does not block government agencies that access reports for child support, tax, or law enforcement purposes.

A freeze has no effect on credit scores. It does not prevent identity theft entirely. A thief may still use existing accounts, file a fraudulent tax return, or misuse non-credit information. A freeze also does not stop prescreened credit offers; consumers can opt out of those separately.

A freeze can delay applications for new credit, insurance, or utilities because the company cannot access the report until the consumer lifts the freeze. Some non-credit services, such as checking accounts, may also check credit reports.

• Blocks most new creditors from accessing the report.
• Does not block existing creditors or certain government agencies.
• Does not affect credit scores.
• Does not stop prescreened offers.

Lifting or Removing a Freeze

A consumer can temporarily lift a freeze to allow a specific creditor or a specific time period to access the report. This is sometimes called an unfreeze. The consumer uses the PIN, password, or credentials provided when the freeze was placed.

Federal law requires a temporary lift to be processed within one business day if requested online or by phone, and within three business days if requested by mail. A permanent removal follows the same timing rules. Both are free.

If the PIN or credentials are lost, the consumer can request a replacement. The company may require additional identity verification. A freeze remains in place until the consumer takes action to lift or remove it.

• Temporary lift: allows access for a set time or a specific creditor.
• Permanent removal: eliminates the freeze entirely.
• Both are free and subject to the same timing requirements.

Common Misunderstandings About Freezes

A freeze is not the same as a credit lock. A lock is a service offered by a credit reporting company, and its terms, including any fees, are set by that company. A freeze is a statutory right with legally defined timing and cost requirements.

A freeze does not prevent the consumer from obtaining their own credit reports. Consumers can still request free reports from annualcreditreport.com. A freeze also does not automatically expire; it remains until the consumer lifts or removes it.

Placing a freeze at one nationwide credit reporting company does not freeze the other two. Each company must be contacted separately. A freeze also does not block all identity theft; it is one tool among several, including fraud alerts and security freezes for children.

• Freeze is not a lock.
• Freeze does not block the consumer's own access to reports.
• Freeze does not automatically apply to all three companies.
• Freeze does not stop all forms of identity theft.