How to Freeze Your Credit at All 3 Bureaus (Plus Everything Else You Need to Know)

A breach notice lands in your inbox, or you spot a login attempt you don’t recognize, and someone tells you to freeze your credit. The advice is sound, but the instructions people pass around usually stop at “go to the three websites,” and that skips most of what actually matters once you’re in the process.

One thing to sort out before you start: a credit freeze and a card replacement solve different problems. If your card number itself was exposed, replacing the card is what stops someone from using it — some issuers also let you generate a virtual card number on the spot instead of waiting on a new physical one. A credit freeze is for a different threat — someone using your Social Security number or other personal details to open a brand-new account you don’t know about. A breach involving your SSN, and not just a card number, is the kind that calls for a freeze, and once that’s settled, the details are what matter: how to freeze and unfreeze your file at Equifax, Experian, and TransUnion, the bureaus most guides skip entirely, what to do about a kid’s file, and what changes once fraud has already happened.

What you are going to Read

If You’re Dealing With This Right Now

Replace any compromised cards. Call your issuer and get a new number before anything else, if a card number was exposed.
Freeze your credit at Equifax, Experian, and TransUnion (instructions below).
Turn on multi-factor authentication on your email, banking, and any account tied to your identity.
Change passwords on financial accounts, starting with anything reused elsewhere.
Review recent bank and card statements for charges you don’t recognize.
Place a fraud alert too, if you suspect actual misuse and not just exposure — it’s free and takes one call.
File a report at IdentityTheft.gov if your information has already been misused; you’ll get a recovery plan built around what happened to you.
Watch your mail for account confirmations, bills, or collection notices for accounts you never opened.

What a Credit Freeze Actually Does

A credit freeze restricts access to your credit report at a given bureau. When a lender pulls your file to approve a new credit card, auto loan, or mortgage, a frozen report blocks that pull — most lenders will deny the application rather than proceed without seeing your file. That makes it very difficult for someone to open new credit in your name, even with your Social Security number, date of birth, and address in hand.

A freeze does not:

Affect your credit score

Stop you from using accounts you already have

Protect a card you already own from being misused — that’s a card replacement problem

Stop existing creditors, debt collectors, or your current card issuer from checking your file for account reviews

Stop government agencies, court orders, or your own requests for your credit report

Apply across all three bureaus automatically

That last point catches a lot of people off guard. Equifax, Experian, and TransUnion each keep a separate file, built from data reported by different lenders. Freezing one does nothing to the other two — and as you’ll see further down, there are useful bureaus beyond those three as well.

When to Freeze (and When Not To)

You don’t need a specific reason — the Federal Trade Commission notes that anyone can freeze their file at any time. It’s especially worth prioritizing if:

Your Social Security number appeared in a breach notice
Your wallet, purse, or ID was lost or stolen
Identity theft has already been confirmed
A company disclosed a breach involving personal information, not just card numbers
Tax documents, mail, or a passport were stolen
Your information showed up in a breach involving a hospital, insurer, school, or government agency — medical and SSN data tends to be worth more to fraudsters than card numbers

A freeze is the wrong tool for a narrower problem, though. If someone used your existing card number, replace the card instead — freezing your credit does nothing about a number that’s already been used. If you just want to pause spending on a misplaced card that might turn up, a card lock in your issuer’s app handles that instantly, with none of the unwinding a freeze later requires. And if you’re about to apply for a mortgage or new card in the next few days, you can still freeze now — you’ll just lift it briefly when the lender pulls your file.

Freeze vs. Fraud Alert vs. Lock vs. Monitoring

Feature	Credit Freeze	Fraud Alert	Credit Lock	Credit Monitoring
What it does	Blocks lenders from viewing your report	Requires lenders to verify your identity first	Similar effect to a freeze, but a private product	Watches your file and alerts you to changes
Legal protection	Guaranteed by federal law (FCRA)	Guaranteed by federal law (FCRA)	Set by the bureau’s own terms, not law	Not a legal protection
Cost	Free	Free	Usually free	Often paid; some free versions exist
Where you place it	Each bureau separately	One bureau — they notify the other two	Each bureau separately	Wherever the service monitors
Duration	Until you remove it	One year standard; seven years after a confirmed identity-theft report	Until you unlock it	As long as you’re subscribed
Legal response-time guarantee	Yes	Yes	No	N/A

A freeze is the strongest option, with response times set by federal law rather than a company’s policy. A lock can be more convenient — some apps let you toggle access with one tap — but your recourse depends on the bureau’s own terms, not a federal statute. A fraud alert is lighter-touch: useful as a baseline, or alongside a freeze. Monitoring doesn’t block anything; it just shortens how long it takes you to find out something happened.

How to Freeze Your Credit at Each Bureau

Online is fastest — plan on five to ten minutes per bureau if you have your full legal name, current and previous addresses, date of birth, and Social Security number ready.

Bureau	Online	Phone	Mail
Equifax	Create a myEquifax account at equifax.com	(888) 298-0045, or the 24-hour automated freeze line at (800) 685-1111	Equifax Information Services LLC, P.O. Box 105788, Atlanta, GA 30348-5788
Experian	experian.com/freeze	(888) 397-3742	Experian Security Freeze, P.O. Box 9554, Allen, TX 75013
TransUnion	transunion.com/credit-freeze or the TransUnion app	(888) 909-8872	TransUnion, P.O. Box 160, Woodlyn, PA 19094

All three verify your identity with your Social Security number, date of birth, and address, sometimes plus a past address or old account detail. Online and phone verification is often instant, through a knowledge-based question or a one-time code — but if your phone number is on a prepaid or VOIP line, or isn’t registered in your name, that automated check can fail, and you may end up needing to mail in ID documents instead. Worth knowing before you’re relying on it during a time crunch.

Save your login credentials or PIN somewhere secure once you’re set up — a password manager works well — since you’ll need them again the next time you apply for credit and have to lift the freeze.

Once submitted: the bureau places the freeze within one business day (online or phone) or three business days (mail), sends confirmation by email or mail, and issues login credentials or a PIN for managing it going forward. There’s no expiration — it stays active until you lift or remove it yourself.

Is It Actually Free?

Yes, at all three major bureaus, by federal law. A 2018 law — the Economic Growth, Regulatory Relief, and Consumer Protection Act — eliminated the fees bureaus used to charge for placing and lifting freezes. It costs nothing no matter how many times you do it, and there’s no reason to pay a third-party service to fill out a free form on your behalf.

Timing: Placing and Lifting

Placing online or by phone: active within one business day
Placing by mail: three business days
Lifting online or by phone: within one hour
Lifting by mail: three business days

Most online lifts happen almost immediately — the one-hour window is a legal ceiling, not the typical wait. That means you can often lift a freeze right before a lender pulls your file and reinstate it the same day, without leaving your file open for long.

When You’ll Need to Lift It

Any time you apply for new credit — a mortgage, auto loan, new card, sometimes even a phone plan or an apartment — you’ll need to temporarily unfreeze the relevant bureau.

Two ways to do it: set a temporary lift for a date range, so the freeze reactivates automatically afterward (the easier default), or lift indefinitely and manually refreeze once your application is done.

Ask the lender which bureau they’ll pull from before you apply — many only check one or two of the three, so you may only need to lift that one rather than all three.

To remove a freeze permanently, each bureau lets you do it through the same portal, phone line, or mail address used to place it, within the same legal windows.

Freezing a Child’s Credit

Kids are attractive targets specifically because a child’s Social Security number is a blank slate — no existing file to flag unusual activity, and the fraud often goes unnoticed for years, until the child applies for their first credit card or student loan.

Federal law lets a parent, legal guardian, or someone with power of attorney place a protected consumer freeze for a child under 16, even without an existing file. If the bureau has no file for your child, it creates one purely so it can be frozen — that file can’t be used to extend credit, only to block one from being opened.

Placing one works differently than freezing your own file, in a few specific ways:

This has to go by mail at all three bureaus. Since custody or guardianship can’t be verified electronically, expect to send copies of your ID, your child’s birth certificate or Social Security card, and proof of your authority to act on their behalf.
It’s free, same as an adult freeze.
It doesn’t expire until removed.
Federal law sets 16 as the age a minor can start managing their own freeze, but the mechanics vary by bureau. Experian is the outlier — it lets minors 14 and older register their own online account to manage their freeze directly. Equifax and TransUnion still require a parent or guardian to handle it by mail for any child under 16 (Equifax allows a 16- or 17-year-old to request it themselves by phone or mail, but you need to be 18 to manage it through the online myEquifax portal). Check with each bureau directly if your child is close to that age.
The same process applies to an incapacitated adult under a guardian’s or conservator’s care.

If you suspect your child’s identity may already be compromised — a bill or collection notice shows up in their name — each bureau offers a way to check whether a file already exists for a minor, worth doing before you place the freeze.

Beyond the Big Three: The Specialty Bureaus

Freezing Equifax, Experian, and TransUnion stops someone from opening a new credit card or loan in your name. It does nothing about fraud that runs through a different kind of reporting agency entirely — a gap most freeze guides skip.

Five agencies are worth adding to that list:

Innovis. A fourth nationwide credit bureau, used by some lenders for identity verification and fraud screening alongside standard credit reporting.
ChexSystems. Tracks checking and savings account history — bounced checks, accounts closed for cause. Banks and credit unions widely use it to screen new account applicants, so freezing it can stop someone from opening a bank account in your name even after your credit files are locked down. If you’re going to add just one bureau beyond the big three, this is usually the highest-value pick, since a new bank account is a common target for stolen identities.
National Consumer Telecom & Utilities Exchange (NCTUE). Used by phone carriers, cable and internet providers, and utility companies before opening a new account.
LexisNexis Consumer Disclosure (including SageStream). A broader risk-and-identity database used across banking, insurance, and other industries.
Clarity Services. Focuses on alternative financial products like payday loans and rent-to-own agreements.

The process mirrors the big three — contact each one, verify your identity, save the PIN or confirmation you’ll need to lift it later. These freezes are free nationwide today, the same as the big three, so there’s no need to check for a state-by-state fee before starting. Because you’re unlikely to need most of these unfrozen on short notice, many people set them once and leave them frozen indefinitely, lifting one only when a specific situation calls for it — opening a new bank account, switching utility providers, and so on.

If Your Identity Has Already Been Stolen

File a report at IdentityTheft.gov. It generates a personalized recovery plan based on what happened — new accounts opened, tax fraud, medical identity theft, and so on.
Pull your free credit reports at AnnualCreditReport.com to see what’s actually on file.
Freeze all three major bureaus, plus whichever specialty bureaus are relevant to what was exposed.
Dispute any fraudulent accounts directly with the bureau and the creditor — your IdentityTheft.gov report includes letter templates for exactly this.
Consider an extended fraud alert. Once you’ve filed an identity theft report, you qualify for one lasting seven years instead of one.
File a police report if a creditor or the FTC asks for one — not always required, but sometimes necessary to remove certain fraudulent items.
Keep records — dates, names, confirmation numbers. Recovery tends to be a paperwork marathon, and a clear timeline speeds it up.

Mistakes People Make

Freezing only one bureau — usually the most familiar one — and leaving the other two, plus every specialty bureau, open.
Paying for something that’s free by law. A third-party “freeze assistance” service isn’t doing anything you can’t do yourself in the same few minutes.
Treating a lock and a freeze as legally identical. They behave similarly, but your protection differs.
Losing the PIN or login, which means a longer identity-verification process to lift a freeze set up years ago.
Freezing your own file but not a partner’s, assuming shared finances mean shared coverage. Each person’s file is separate.
Forgetting a child’s file entirely — most parents assume kids can’t have one until someone opens one fraudulently.
Forgetting to refreeze after a temporary lift, leaving the file open indefinitely after a single application.

Your Legal Rights

Credit freezes are a right under the Fair Credit Reporting Act, as amended by the 2018 Economic Growth, Regulatory Relief, and Consumer Protection Act. That law made freezes and lifts free with no limit on frequency, set the response-time requirements above, extended standard fraud alerts from 90 days to one year, created the protected consumer freeze for minors and incapacitated adults, and allowed foster care representatives to freeze a child’s file on their behalf. Because these are statutory rights, a bureau can’t reintroduce fees or slow-walk a request beyond the legal window without violating federal law.

Frequently Asked Questions

Does freezing my credit hurt my score, or affect accounts I already have? No to both. A freeze only blocks new applications from being approved against your file — it doesn’t touch your score or your existing accounts, and you can keep using your current cards normally.

Do I need to freeze all three bureaus? Yes. Lenders pull from different bureaus depending on who they use, so a freeze at only one leaves the others open.

How long does it take, and how long does it last? One business day to place online or by phone (three by mail), one hour to lift online or by phone (three business days by mail). Once placed, it stays active indefinitely until you lift or remove it yourself.

Will a freeze stop employers or landlords from checking my credit? It depends on what they’re pulling. A landlord using a standard tenant-screening report drawn from credit data will typically hit the same wall a lender does. An employer running a background check often uses a separate report that isn’t blocked by a credit freeze — but if the employer specifically pulls a full credit report, as is common in finance and banking roles, a freeze will block that too. If you’re job or apartment hunting, plan to lift the relevant freeze shortly before a check is expected, just in case.

What does a freeze not protect against? Misuse of an account you already have, tax refund fraud, medical identity theft, and fraud running through a bureau you haven’t frozen. Tax-related identity theft specifically goes through the IRS, not the credit bureaus — the IRS offers a separate Identity Protection PIN program for that.

Can I freeze my child’s credit, or my spouse’s? For a child under 16, yes — by mail, at each bureau, with documentation proving your authority to act on their behalf. For a spouse or partner, it depends on the bureau: TransUnion allows a spouse to place or lift a freeze on your behalf over the phone once you both pass identity verification, but Equifax and Experian require each adult to manage their own file directly.

Sources: Federal Trade Commission (consumer.ftc.gov), Consumer Financial Protection Bureau (consumerfinance.gov), IdentityTheft.gov, and the official freeze pages of Equifax, Experian, TransUnion, Innovis, ChexSystems, and NCTUE. Phone numbers and processes confirmed current as of July 2026; bureaus occasionally update contact details, so verify directly if a number doesn’t connect.