MalwareZero

Freezing your credit is free at all three bureaus and takes about fifteen minutes

Updated August 6, 2026

Zero dollars, about fifteen minutes, three separate websites. That's the entire price of freezing your credit at Equifax, Experian and TransUnion, assuming identity verification cooperates, and lifting it again costs nothing either. Congress made freezes free in every state back in 2018. What those fifteen minutes buy you is that new lenders can't pull your credit file, and that's the step that actually blocks someone from opening an account in your name. So if a page is asking you for a credit card number, you're on the wrong page.

The three places you go, and nothing else

You have to do all three separately. A freeze at one bureau does nothing at the other two, and lenders don't all pull from the same one, so freezing two out of three is barely better than freezing none.

All three will ask for your name, current and previous addresses, date of birth and full Social Security number. Handing that over feels wrong the first time. It isn't. They already hold every digit of it, and they need it to match you to the right file rather than to some other person with your name.

Where people actually get stuck

The freeze isn't the hard part. The hard part is the knowledge-based quiz the bureaus use to confirm you're you: which of these four streets did you live on, which lender holds a loan you opened around 2019, what was the monthly payment. Miss one and you get bounced to the manual path.

Manual means paper. You send a written request with copies of a government ID and something showing your current address, like a utility bill or a bank statement. It's slow and annoying, and the bureau still can't charge you a cent for it. Budget a couple of weeks instead of an afternoon.

The timing rules are useful to know. Ask online or by phone and the bureau has one business day to place the freeze. Ask them to lift it online or by phone and they have one hour. Mailed requests get three business days in each direction. In practice, online freezes are usually instant and online thaws take seconds.

Freeze, lock and fraud alert are not the same thing

These three get blurred constantly, and sometimes that's deliberate.

A security freeze is a legal right under the Fair Credit Reporting Act. It's free, it never expires on its own, and what the bureau owes you is set by statute rather than by a contract you clicked through.

A credit lock is a product. Roughly the same practical effect most days, different legal footing, and the terms are whatever the bureau's agreement says they are. Equifax gives its lock app away free. Experian's CreditLock, by contrast, sits inside the paid CreditWorks membership, which is the version people end up subscribed to by accident while trying to do the free thing. My blunt read: locks exist largely because freezes became free and the bureaus needed something adjacent to sell. Take the freeze.

A fraud alert blocks nothing at all. It flags your file so lenders are supposed to take reasonable steps to verify the applicant is really you. It's free, runs one year, and you only contact one bureau because that bureau is required to notify the other two. Confirmed identity theft victims can get an extended alert lasting seven years, which also pulls you off prescreened credit and insurance mailing lists for five. Deployed servicemembers can place a one-year active duty alert.

An alert beats doing nothing and loses badly to a freeze, because "reasonable steps" means whatever the lender feels like doing that afternoon.

What a freeze does not stop

This gets oversold, and it matters, because people freeze their credit and then assume they're finished.

Lifting it when you actually need credit

Thawing is the part people dread in advance and it's genuinely easy. You log in and either remove the freeze entirely, lift it for a date range you choose, or in some cases open it up for one named creditor.

Ask the lender which bureau they pull. Mortgage lenders usually pull all three. Card issuers and car dealers often pull just one, and if nobody will tell you, thaw all three for a few days and let them close again on their own. Set a calendar reminder if the thaw doesn't expire by itself.

Store your login recovery details somewhere real. The most common freeze complaint I run into isn't a freeze failing, it's somebody locked out of a myEquifax account on the morning of a closing.

The bureaus nobody mentions

Three isn't the full list. Innovis is a fourth consumer bureau and takes free freezes at innovis.com. NCTUE holds telecom and utility account history, which is what a thief leans on to open a phone line. ChexSystems covers new checking accounts. LexisNexis Risk Solutions keeps a separate consumer file of its own.

Worth your time? For most people, honestly, no. Do the big three and stop. If you've had real fraud already, or your number turned up in a breach alongside your full name and date of birth, then spend the extra half hour on the rest.

Kids and older relatives

Child identity theft is quiet and genuinely nasty, because nobody checks a nine-year-old's credit file for a decade. Federal law lets a parent or guardian place a free protected consumer freeze for a child under sixteen. You'll almost always do it by mail, with a birth certificate and proof of your authority, and each bureau publishes its own document checklist.

For an aging parent you'll need either their participation or a power of attorney. While you're having that conversation anyway, it's a decent moment to set up a family safe word, because the relative who can't get through a credit freeze form is exactly the one a cloned voice will call at two in the morning.

Fifteen minutes against a whole category of harm

A credit freeze is the highest-value fifteen minutes in consumer security. Boring, permanent, free, and it removes a whole category of harm rather than reducing it. There's no reason to wait for a breach letter to arrive.

Realistically this is one afternoon, or a couple of weeks if the verification quiz bounces you onto the paper path. Six months from now the freeze will still be sitting there, because it doesn't expire and nobody makes you renew it, and you'll have forgotten it exists until a car loan or a mortgage has you thaw it for a weekend. Also still true in six months: a freeze won't protect you from being talked into something in the moment. Freezes are structural. Scams are conversational. If your worry started with a package, a text, or a code somebody told you to scan, run it through the QR code checker first, then come back and freeze anyway.