Guide

How to freeze your credit for free after a scam or data breach

Short answer: Contact all three credit bureaus, Equifax, Experian and TransUnion, and ask for a freeze. The FTC says it’s free to place and lift, doesn’t affect your credit score, and lasts until you lift it. You can lift it for a while when you apply for credit, then put it back.

By Agent Lane Editorial · Page dated 3 November 2026

What does a credit freeze do?

While a freeze is on, nobody can open a new credit account in your name, including you. The FTC says there’s no cost to place or lift one, and it doesn’t affect your credit score. It doesn’t stop someone using a card or account you already have, so watch those too.

When should I freeze my credit?

Any time. The FTC says anyone can freeze their credit for any reason, and you don’t have to wait for a data breach. It matters most if your Social Security number or other details were exposed, for example after a scam caller, a fake support chat or a phishing site got them. Using an AI chatbot? Never paste your Social Security number into it; see is it safe to let an AI read my statements.

How do I freeze it, step by step?

  1. Contact all three credit bureaus. The FTC says a freeze must be placed at each one: Equifax, Experian and TransUnion.
  2. Type the bureau’s address yourself rather than clicking a link in an email or text.
  3. Keep any PIN or login each bureau gives you somewhere safe. You’ll need it to lift the freeze.
  4. Check your free credit reports for accounts you don’t recognize. The FTC says those can be a sign of identity theft.

What if I need to apply for credit later?

Lift the freeze for a while. The FTC suggests asking the lender which bureau it uses, lifting the freeze at just that one, then putting it back once the credit check is done. The same goes for renting an apartment, applying for a job or buying insurance.

Freeze or fraud alert: which do I need?

Credit freezeFraud alert
What it doesBlocks new credit in your nameLenders must check with you first
Lenders can see your report?NoYes
Where to askAll three bureausOne bureau, which tells the other two
How longUntil you lift it1 year (initial), 7 years (extended, after identity theft)
CostFreeFree

You can have both. The FTC says an extended alert needs an FTC identity theft report from IdentityTheft.gov or a police report. Parents can also ask for a free freeze for a child under 16.

Does a freeze protect my crypto or bank account?

No. It only stops new credit. For an exchange account, follow how to lock down your crypto exchange account. If money already left, see exchange account hacked? what to do and report it at ReportFraud.ftc.gov.

Sources

Checked 3 November 2026 on each organization’s own site.

Related guides

All guides