Key Takeaways
- Request free credit freezes separately with the three nationwide credit bureaus.
- A freeze addresses new-credit risks but does not prevent every kind of identity theft.
- Protect existing accounts and keep recovery information secure.
Identity protection starts with controlling access and noticing changes, not buying a monitoring subscription. A credit freeze can make it harder for someone to open new credit using your identity. Strong account security and regular review address other risks. No single step prevents every kind of identity theft.
Understand a freeze and an alert
The FTC says placing and lifting a credit freeze is free and does not affect your credit score. Request a freeze separately with Equifax, Experian and TransUnion using their official channels. Keep recovery information somewhere secure that you can access when needed.
A freeze remains until lifted. If you plan to apply for credit or another service that needs access to a report, ask which bureau will be checked and arrange the necessary lift. A freeze is not a substitute for reviewing existing accounts, tax records or other signs of misuse.
An initial fraud alert is different: it tells businesses to check your identity before opening credit and lasts one year unless renewed. You can contact one of the three bureaus; that bureau must notify the other two. The FTC explains separate requirements for extended and active-duty alerts.
Protect the accounts you already use
Use a different strong password for each important account and enable two-factor authentication. The FTC identifies authenticator apps and security keys as more secure options than common text or email passcodes when available. Follow each institution’s setup and recovery instructions.
Protect your email too, because it may receive password-reset messages. Update devices and software. Do not enter credentials from unexpected message links, and do not give a caller a one-time authentication code. Contact a company using a website, app or number you already know is genuine.
Keep a short review routine
| Review | What needs attention |
|---|---|
| Bank and card activity | Payments or transfers you do not recognize |
| Credit reports | Unfamiliar accounts or incorrect personal details |
| Account notifications | Unexpected changes to access or contact details |
| Mail and official notices | Unexplained bills or records requiring verification |
Verify a suspicious notice independently. A genuine-looking logo or caller ID does not establish who sent it. Keep sensitive evidence private rather than posting account details in a public complaint.
If information has already been misused
Contact affected institutions promptly through verified channels. Tell them which transaction or account you dispute, request the applicable fraud process and retain reference numbers. Go to IdentityTheft.gov for an FTC report and a recovery plan appropriate to what happened. For possible exposure without confirmed misuse, the FTC points to IdentityTheft.gov/databreach.
If money was sent, contact the bank, payment provider or card issuer immediately and ask whether it can reverse or recover the payment. Recovery is not guaranteed, and deadlines and protections vary. A freeze alone will not recover lost money.
When a paid service might add value
Compare its specific monitoring, recovery assistance, exclusions, renewal price and cancellation terms with free measures you already have. Monitoring may notify you after a change; it does not make identity theft impossible. Start by checking whether your three freezes and account security are actually in place.
General education for US readers. Examples are fictional. No first-hand product testing or credentials are claimed.
Sources
- Credit Freezes and Fraud Alerts | Consumer Advice
- Protect Your Personal Information From Hackers and Scammers | Consumer Advice
- What To Do if You Were Scammed | Consumer Advice
