In September 2017 Equifax announced that a breach had exposed the personal information of 147 million people, roughly every American adult with a credit history. The settlement that followed ran to as much as 425 million dollars. The more useful consequence was a change in federal law: a year later, freezing your credit file at all three nationwide bureaus became free everywhere in the country, with deadlines attached that the bureaus have to meet.
Eight years on, most households still have not done it, usually because of a vague fear that a freeze will get in the way at the exact moment they need credit. That fear is worth taking seriously and is also solvable. The freeze has a thaw, the thaw has a clock, and the whole arrangement is manageable once you know which lever does what.
What a freeze actually blocks
A freeze stops a consumer reporting agency from handing your file to a business considering a new account. Since almost no lender opens an account without pulling a report, the practical effect is that new credit cannot be issued in your name. That includes credit issued to you, which is the part people find inconvenient and which is also the point.
Placing one costs nothing and does not touch your credit score. Anyone may place one at any time, with no requirement to have been breached, defrauded, or even worried. It lasts until you remove it, with no expiration date to track and no renewal to forget.
What it does not do matters just as much. A freeze does nothing about fraud on accounts you already hold, because your existing card issuer does not need to pull your report to approve a charge. It does not stop tax refund fraud, medical identity theft, or someone using your details to claim government benefits. It is one lock on one door, and the door happens to be the one thieves prefer.
The clock federal law puts on each bureau
The timing is not a courtesy the bureaus extend. It is written into the Fair Credit Reporting Act, and knowing the numbers changes how you plan around a loan application.
| Request | By phone or secure electronic means | By mail |
|---|---|---|
| Place a freeze | Within 1 business day | Within 3 business days |
| Remove or temporarily lift | Within 1 hour | Within 3 business days |
The one hour removal window is the fact that dissolves most objections. A mortgage officer who needs a file pulled this afternoon can be accommodated from your phone during the meeting. The bureau also has to send written confirmation within five business days of placing the freeze, along with the method you will use to lift it later, which is the document to keep.
Mail is the slow lane in both directions by design. Use the online portal or the toll-free line, and treat the mailed route as a fallback for anyone who cannot pass an online identity check.
Thawing one bureau instead of all three
The reflex when applying for something is to lift every freeze, which leaves you fully exposed for however long you forget to put them back. There is a smaller move. Ask the lender which bureau it pulls, since most pull one, then lift only that file.
Federal law also lets you request a temporary removal for a period you specify, so the freeze restores itself on a date you set rather than waiting on your memory. Use it. A lift with an end date is the difference between a routine application and a file left open for eleven months.
One more detail belongs in the plan. If a business tries to pull a frozen file for a credit application and you do not release it, that business may treat the application as incomplete rather than denied. Nothing negative attaches to your record, but the application stalls until you act, so tell the loan officer the freeze exists before they discover it.
A freeze, a lock, and an alert are three different things
The bureaus sell products with names like credit lock that behave similarly and are governed by a contract you accept rather than by statute. The freeze is the version with federal deadlines behind it. When the two are offered side by side, the free statutory one is the one with recourse attached.
Fraud alerts are a separate tool and can sit alongside a freeze. An initial fraud alert tells businesses to verify your identity before opening an account, lasts one year, is free, and only has to be placed at one bureau, which must notify the other two. An extended alert lasts seven years and requires an identity theft report filed at IdentityTheft.gov or a police report. Active duty servicemembers can place a one year alert of their own and get free electronic credit monitoring from each bureau.
Alerts are weaker than a freeze, since they ask a lender to check rather than blocking the pull outright. They are worth adding anyway, because the two failures they cover are different ones.
Children have credit files and nobody looks at them
A child's Social Security number is attractive precisely because no one checks it for eighteen years. Fraud opened against a nine year old surfaces during a first car loan application, by which point the damage is old and the paper trail is cold.
For a child under 16, a parent or guardian can request a free freeze that stays in place until removed. The process differs from the adult one and each bureau publishes its own instructions, generally requiring proof of your authority and of the child's identity. Doing all three in one sitting takes an afternoon and closes the account for a decade and a half. The same applies to an adult under a guardianship or conservatorship, where the person whose file it is may never see a statement.
Setting yours up in one sitting
Block ninety minutes, gather a photo ID, your Social Security number, and proof of address, and work through the three bureaus one at a time. Guidance on each step is on the FTC's page covering credit freezes and fraud alerts, and the statutory deadlines themselves sit in section 1681c-1 of the Fair Credit Reporting Act.
Then do the part everyone skips. Record which bureau holds which account credentials, where the confirmation letters are filed, and how each thaw is requested, in whatever place your household keeps documents. A freeze nobody can lift becomes an argument at a closing table. A freeze with its instructions written down next to it is a quiet system that costs nothing and asks for your attention roughly twice a decade.