Your Social Security Number was in a data breach. You Googled what to do. Half the results said freeze your credit. The other half said place a fraud alert. A few said do both.
Nobody explained the difference, and none of them told you which one actually stops someone from opening a credit card in your name tomorrow morning.
Here’s the clear version.
Two tools. Different jobs. Most people use neither.
A credit freeze and a fraud alert are both protective measures you can place on your credit file. They don’t offer the same level of protection, and for most breach scenarios involving your national ID number, one is clearly the right choice.
Most people — even people who know these tools exist — don’t use either. They assume it’s complicated, or figure it won’t happen to them. Then someone opens a credit card in their name and they find out during an apartment application.
The tools are free. The process takes about fifteen minutes. There is no good reason not to use them after a serious breach.
What a credit freeze does
A credit freeze (sometimes called a security freeze) locks your credit file at each bureau. When you apply for new credit — a loan, a credit card, a mortgage — lenders pull your credit report to check your creditworthiness. A frozen file returns an error instead of your report. The lender can’t evaluate you, so they can’t approve the application.
This blocks identity thieves from opening new accounts in your name even if they have your full name, date of birth, address, and Social Security Number. Without a credit report to review, there’s no approval. The fraud attempt dies there. (For the full picture of how that data reaches a fraudster, see how identity theft happens.)
A credit freeze does not affect your existing accounts. Your current credit cards still work. Your credit score isn’t touched. You can still use your bank account. It only blocks new credit inquiries — which is exactly the attack it’s designed to stop.
When you legitimately need to apply for new credit, you temporarily lift (or “thaw”) the freeze at the relevant bureau, complete your application, and refreeze. Lifting takes minutes online. In the US, credit freezes have been free at all three major bureaus — Equifax, Experian, and TransUnion — since 2018.
What a fraud alert does
A fraud alert adds a flag to your credit file telling lenders to take extra verification steps before approving anything. You only need to contact one bureau — they notify the others. It lasts one year. For confirmed identity theft victims, an extended fraud alert lasts seven years.
The limitation: it doesn’t block the credit check. The lender still pulls your report. They’re supposed to verify you more carefully, but lenders vary in how seriously they treat the flag. A determined fraudster can still get through.
A fraud alert is better than nothing. A credit freeze is better than a fraud alert.
When to use each
If your national ID number was exposed — your SSN in the US, National Insurance number in the UK, Aadhaar in India — place a credit freeze. Not a fraud alert. A freeze.
Your national ID number doesn’t expire. It doesn’t change. It can be used against you years after the original breach. The only reliable defence against new account fraud is blocking the credit check entirely. That’s what a freeze does.
Use a fraud alert when you’re generally cautious but don’t have confirmed ID exposure, or as a quick interim step while you set up freezes at all three bureaus. If your SSN was in a breach: freeze.
How to place a credit freeze in the US
You must place the freeze separately at each of the three major bureaus. One call to Equifax doesn’t freeze your Experian or TransUnion file.
Equifax: equifax.com/personal/credit-report-services/credit-freeze/ or call 1-888-298-0045. You’ll create an account and set a PIN or password to manage the freeze.
Experian: experian.com/freeze/center.html or call 1-888-397-3742. Same process — create an account, set a PIN, manage online.
TransUnion: transunion.com/credit-freeze or call 1-888-909-8872. Same.
For thorough protection, also freeze at ChexSystems (chexsystems.com) — this covers bank account applications, not just credit — and NCTUE (nctue.com), which covers utility and telecom accounts. Identity thieves who can’t open a credit card sometimes open utility accounts for financial fraud instead.
Have your SSN, date of birth, and address ready. The online process takes about five minutes per bureau.
UK, India, and other markets
The US credit freeze has no direct equivalent everywhere, but similar protective tools exist.
UK: The closest equivalent is a CIFAS Protective Registration (cifas.org.uk). CIFAS is the UK’s fraud prevention service; a Protective Registration flags your identity as at risk, requiring lenders to take additional verification steps before approving applications. It costs around £25 for a two-year registration. Experian UK, Equifax UK, and TransUnion UK also offer credit lock features through their consumer portals — check each bureau’s site for current options.
India: The Credit Information Bureau India Limited (CIBIL) offers a credit lock through mycibil.com — free for registered users. This works similarly to a US credit freeze, blocking new credit inquiries. Equifax India and Experian India have their own consumer portals with protective options. CRIF High Mark is the fourth major bureau; check crif.in for their current consumer tools.
If you’re outside these markets, search for your country’s credit reporting bureaus and ask specifically about credit freezes, credit locks, or protective flags. Most developed credit markets have some equivalent.
What a credit freeze doesn’t protect against
A credit freeze stops new account fraud. It doesn’t stop everything.
Existing account fraud — someone using your current credit card number — is not affected. A freeze has nothing to do with your existing accounts. Monitor your statements.
Tax fraud is a separate problem. In the US, attackers file fake tax returns in your name to claim your refund. File your taxes early — filing first closes the window. The IRS offers an Identity Protection PIN at irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin that blocks fraudulent returns.
Child identity theft is a specific risk: children have clean SSNs that no one monitors. That clean ID also makes them a target for synthetic identity fraud. If your child’s information was exposed in a breach, freeze their credit too. Each bureau allows it with a parent or guardian acting on their behalf.
A credit freeze solves one specific problem — new account fraud — well. Know what else you need to handle separately.
What you can do right now
Want to see what data brokers expose about you? See what a scan finds → shows an example report: the kinds of sites that list your name, phone, and address. Once KnytX Shield launches it will find and remove these automatically. Join the waitlist to get in early.