Freeze your credit & what to do about identity theft

As of Oct. 13, 2026

The FTC calls a credit freeze the best way to protect against someone opening new accounts in your name. A fraud alert makes lenders check it's really you. Both are free under federal law. Here's which one fits, who to call, and what to do if your identity was already stolen.

What's your situation? Tap one.

Facts, not legal advice. Everything here comes from the FTC, CFPB, IRS and federal law, with dates. If you were a victim, IdentityTheft.gov gives you an official recovery plan.

Freeze vs. fraud alert, side by side

Source: FTC. Lengths and the 5-year marketing opt-out for extended alerts are also in federal law (15 U.S.C. 1681c-1 (Fair Credit Reporting Act).

The three credit bureaus: where to freeze

Websites and phone numbers as listed by the FTC (FTC handout). Type the address yourself; don't use links in texts or emails that claim to be from a bureau.

How fast the bureaus must act (federal law)

• Freeze requested online or by phone: placed within 1 business day.
• Freeze requested by mail: placed within 3 business days.
• Lifting a freeze online or by phone: within 1 hour. By mail: within 3 business days.
• Placing and lifting a freeze is free.

Source: 15 U.S.C. 1681c-1 (Fair Credit Reporting Act, subsection (i). The CFPB notes the federal free-freeze law does not apply to someone who requests your report for employment, tenant screening or insurance purposes (CFPB).

Free credit reports every week

Equifax, Experian and TransUnion made free weekly credit reports permanent. Get them at AnnualCreditReport.com, the only site authorized to fill the free reports required by law. Other sites may charge you or be fake (FTC).

Stop tax-return identity theft: IRS IP PIN

An Identity Protection PIN is a six-digit number that stops someone else from filing a tax return with your Social Security number or ITIN. Anyone who has one of those numbers and can verify their identity can get one, and parents can request one for dependents. The fastest way is your IRS online account. The IRS will never call, email or text to ask for your IP PIN (IRS).

How common is this? (FTC data)

• In 2025, consumers sent the FTC 3 million fraud reports and reported $15.9 billion in losses, up from 2.6 million reports and over $12 billion the year before (FTC press release).
• A text message was the top reported way scammers made contact in 2025, when people named one (same FTC testimony).
• These are unverified reports people filed, not a survey, so the real totals may differ.

What a freeze does not do

• It doesn't stop someone from using a credit card or bank account you already have. Watch your statements.
• It doesn't stop tax-return fraud. That's what the IRS Identity Protection PIN is for.
• You have to lift it (free) at the bureau a lender uses before applying for new credit (FTC).
• VaultRubric doesn't sell identity theft protection or credit monitoring, and nothing on this page is paid placement.

Sources & dates

• FTC: Credit Freezes and Fraud Alerts (checked 2026-10-13)
• FTC handout: Credit Freezes and Fraud Alerts (bureau phone numbers) (checked 2026-10-13)
• CFPB: What do I do if I am a victim of identity theft? (checked 2026-10-13)
• 15 U.S.C. 1681c-1 (Fair Credit Reporting Act: fraud alerts and security freezes) (checked 2026-10-13)
• FTC: Permanent access to free weekly credit reports (updated Oct. 13, 2023) (updated 2023-10-13)
• IRS: Get an identity protection PIN (checked 2026-10-13)
• FTC press release: testimony to the Joint Economic Committee (Mar. 25, 2026) (2026-03-25)
• IdentityTheft.gov (FTC report and recovery plan) (checked 2026-10-13)