The names make these two tools sound more similar than they are.
A fraud alert tells a business that it should take extra steps to verify your identity before opening new credit in your name.
A credit freeze is more restrictive: it blocks prospective creditors from accessing your credit report, which normally stops a new account from being opened while the freeze is in place.
If your concern is somebody opening a credit card or loan using your identity, that distinction matters more than the terminology.
For the wider identity-protection framework around freezes, disputes, fraud recovery and monitoring, see Credit and Identity Protection.
A freeze is a lock. An alert is a warning.
The Federal Trade Commission’s current consumer guidance describes a credit freeze as a way to prevent new credit accounts from being opened in your name while the freeze is active.
A fraud alert does not block access to the report. Instead, it tells businesses to verify that the person applying for credit is really you.
That makes a freeze the stronger tool for preventing new-account fraud.
You do not need to be an identity-theft victim to freeze your credit
This is one of the most useful facts and one many consumers still miss.
Anyone can place a credit freeze at any time and for any reason. You do not have to wait for a data breach, stolen Social Security number or fraudulent account.
Placing and lifting a freeze is free, and the FTC says a freeze does not affect your credit score.
The administrative difference: three bureaus versus one
To freeze your credit comprehensively, you contact each of the three nationwide credit bureaus: Equifax, Experian and TransUnion.
A fraud alert is simpler to place. For an initial fraud alert, you can contact one of the three bureaus; that bureau is required to notify the other two.
That procedural difference is small, but it is the kind of thing that matters when someone is dealing with an actual identity-theft problem rather than reading about one abstractly.
How long do they last?
A credit freeze remains in place until you lift it.
An initial fraud alert lasts one year and can be renewed. An extended fraud alert is available to identity-theft victims who meet the FTC’s documentation requirements and lasts seven years. Active-duty military members also have a specific alert option.
A freeze is reversible quickly — which matters more than people think
A common objection to freezing credit is the fear that it will be a nightmare to undo when you actually need a mortgage, car loan or credit card.
Federal law requires a nationwide credit bureau to place a freeze within one business day when the request is made electronically or by phone. When you later ask for a temporary lift electronically or by phone, the bureau generally must remove the freeze within one hour.
You can also specify a temporary lift period instead of removing the freeze permanently.
That makes a freeze much less cumbersome than the word “freeze” suggests.
What happens when you actually need credit?
A freeze is not a permanent ban on borrowing.
If you apply for a mortgage, car loan, credit card or another product that requires a credit check, you can temporarily lift the freeze. The FTC notes that if you know which bureau the lender will use, you may only need to lift the freeze at that bureau.
Once the legitimate credit check is complete, the freeze can be restored.
Here’s the part people often misunderstand: neither tool fixes an account that is already compromised
A credit freeze is primarily about preventing new credit from being opened.
It does not cancel a fraudulent transaction on an existing card. It does not replace a stolen bank balance. It does not magically secure an email account whose password has been compromised.
If identity theft has already occurred, the FTC directs consumers to IdentityTheft.gov for a recovery plan. The freeze is one defensive layer, not a complete cleanup process.
Can you use both?
Yes.
The FTC explicitly notes that a person can have a fraud alert even when a credit freeze is already in place.
The tools do different things, so there is no contradiction in using a freeze to restrict access and an alert to signal identity risk.
When does a fraud alert make sense?
A fraud alert can be useful when you suspect identity theft or want additional verification without fully locking access to your credit file.
It may also be less administratively annoying for someone who expects several legitimate credit checks in the near future.
But if the goal is straightforward — do not let somebody open new credit in my name — the freeze is the more direct mechanism.
The free freeze and the paid “credit lock” are not the same product
One of the more practical traps is that the credit bureaus also market paid products described as credit locks or identity-protection subscriptions.
The CFPB says a security freeze is a legal right and can be placed and lifted for free. Paid locks may be convenient, but they are commercial products rather than the statutory freeze itself.
If your goal is simply to prevent most new-credit access, do not assume you need a monthly subscription to do it.
The bigger catch: the Big Three are not the entire reporting ecosystem
Equifax, Experian and TransUnion dominate ordinary credit reporting, but the CFPB maintains a much broader list of specialty consumer-reporting companies used for bank-account screening, utilities, telecom, insurance, employment and other decisions.
For example, the National Consumer Telecom & Utilities Exchange collects telecom and utility-account information and offers its own freeze. Other specialty companies cover banking, insurance, employment and subprime lending.
That means a freeze at the three nationwide bureaus is extremely useful for conventional credit fraud, but it is not a universal identity lock across every consumer-reporting database.
What this does not protect
Neither a freeze nor a fraud alert should be mistaken for general cybersecurity.
They do not protect your email, bank login, tax account, mobile-phone account or every form of identity fraud. They deal with how your credit report is accessed and how new credit is issued.
That is why identity protection is better thought of as layers: secure accounts, watch financial statements, protect the credit file and respond quickly when something looks wrong.
The short version
| Credit freeze | Fraud alert | |
|---|---|---|
| Stops access for new credit | Generally yes | No |
| Requires identity verification | Not the main mechanism | Yes |
| Cost | Free | Free |
| Who can use it? | Anyone | Depends on alert type |
| How placed? | Contact all three bureaus | For an initial alert, contact one bureau |
| Federal Trade Commission — Credit Freezes and Fraud Alerts | Freeze and fraud-alert rules, duration, cost and bureau procedures. |
| IdentityTheft.gov | Identity-theft recovery guidance. |
| CFPB — Consumer Reporting Companies | Specialty consumer-reporting markets beyond the three nationwide credit bureaus. |
| CFPB — National Consumer Telecom & Utilities Exchange | Telecom/utility reporting and separate security-freeze availability. |
| CFPB — Credit Freeze or Security Freeze | Free statutory freezes, temporary lifts and distinction from commercial credit locks. |
| CFPB — Credit Freeze Timing | One-business-day placement and one-hour electronic/phone lift requirements. |