How to Freeze Your Credit at All 3 Bureaus (2026 Guide)

How to Freeze Your Credit at All 3 Bureaus (2026 Guide)

It's 11:40pm and you just got the "we detected your information in a recent data breach" email. Or your card got skimmed at a gas pump. Or nothing happened at all and you just want to close a door before someone tries it. Every one of those situations has the same best next move, and it takes about ten minutes: freeze your credit at all three bureaus.

I'll be honest, most people put this off because "credit freeze" sounds like paperwork. It isn't. It's three websites, three ten-minute forms, and then you're done — permanently, for free, whether or not anyone has actually tried to use your information yet. Here's exactly how to do it, plus the parts almost every quick-tip list leaves out: what it doesn't protect against, how to freeze a kid's credit, and when a freeze isn't actually the tool you need.

What a Credit Freeze Actually Does (and Doesn't)

A credit freeze blocks new lenders from pulling your credit report. No pull, no approval — which means nobody can open a credit card, car loan, or line of credit in your name while it's on, even with your Social Security number in hand. That's it. That's the whole mechanism, and it's a genuinely strong one, because almost every form of new-account fraud depends on a lender being able to check your file first.

What it doesn't do: it doesn't stop someone from using a card you already have, it doesn't affect your credit score, and it doesn't stop tax fraud, medical fraud, or someone draining an existing bank account. It's specifically a new-account blocker. Pair it with the other steps in what to do after a data breach for the full picture.

It's also free, by federal law, for anyone — not just confirmed fraud victims — to place, lift, or remove at any of the three bureaus, per the Consumer Financial Protection Bureau.

The Actual Steps — Equifax, Experian, TransUnion

You have to do this separately at all three. A freeze at Equifax does not carry over to Experian or TransUnion — they're competing companies that happen to all hold a file on you, not one shared system.

1. Equifax — online, or call 1-800-685-1111. You'll set up an account and can request a PIN or one-time code by text to manage the freeze later.

2. Experian — online, or call 1-888-397-3742. Experian issues a PIN specifically for lifting or removing the freeze — save it somewhere you'll actually find it again, not a sticky note on the monitor.

3. TransUnion — online, or call 1-888-909-8872. Same setup: account or PIN, whichever they offer at the time.

Each one asks you to verify your identity — Social Security number, date of birth, current address, sometimes an old address or account number from your file. That's normal; it's the same information a lender would need to pull your report in the first place, which is the whole point.

Once it's on, it stays on until you lift it. No expiration date, no annual renewal, nothing to remember to redo.

One thing to watch for once you've done this: scammers know credit freezes are now common advice, and they've built phishing around it. A text or email claiming your "credit freeze needs verification" or that a "new account was opened despite your freeze" is a common lure specifically designed to get you to click a fake link and hand over the SSN you just tried to protect — Equifax's own scam-warning page covers what these bogus freeze-related messages look like. Your real freeze doesn't send you urgent texts. It just sits there working.

Freeze vs. Lock vs. Fraud Alert — Pick the Right One

These three get mixed up constantly, and the differences matter:

A credit freeze is your federal right under the Fair Credit Reporting Act. Free, no exceptions, and the bureau has to comply with hard time limits — more on that below.

A credit lock does something similar — block new inquiries — but it's a bureau-run product governed by that bureau's own terms of service, not federal law. Sometimes it's free, sometimes it's bundled into a paid monitoring plan, and the bureau can change the rules on its own. If you're offered a "lock" as an upsell instead of the free freeze you asked for, know that you're being sold a different product with fewer guarantees.

A fraud alert doesn't block anything. It flags your file so a lender has to verify your identity — a phone call, extra questions — before approving something new. An initial fraud alert is free, lasts one year, and anyone can place one just out of caution. It's a lighter touch than a freeze: your file stays visible, lenders just have to check first, per the FTC's breakdown of freezes and fraud alerts.

For most people reacting to a breach or a lost wallet, the freeze is the stronger move. A fraud alert is worth adding on top if you specifically expect to be applying for something and don't want a full freeze in the way.

The Step Everyone With Kids Skips

If your child has never had a credit inquiry run in their name, they very likely don't have a credit file at all — which is exactly what makes a kid's Social Security number so valuable to identity thieves. A clean number that nobody checks for a decade is close to ideal for building fraudulent accounts undetected.

You can freeze a minor's credit at all three bureaus until they turn 16, at which point they gain the right to manage their own freeze. The catch: most bureaus require this by mail, with copies of your ID, the child's birth certificate, and proof of your relationship, since there's no existing file to verify identity against electronically — Experian's process for minor freezes lays out exactly what's needed. It takes longer than your own freeze, but it's still free, and it's one of the only forms of identity theft you can genuinely prevent before it happens rather than clean up after.

If You've Already Filed an Identity Theft Report

A regular fraud alert lasts a year. If you've actually confirmed fraud — you've filed a report at identitytheft.gov or with local police — you qualify for an extended fraud alert instead: seven years, free, and it also gets you removed from prescreened credit and insurance offer lists for five years. It's a heavier version of the same tool, meant for people who've already been targeted rather than people acting preventively. You can layer it with a freeze; they're not mutually exclusive.

When You Actually Need to Lift It (and How Fast That Happens)

Eventually you'll apply for a real loan, a new credit card, or an apartment that runs a hard credit check, and you'll need to temporarily lift the freeze at whichever bureau that lender uses — sometimes just one, sometimes all three, depending on who they check.

The good news: federal rules require the bureau to lift a freeze within one hour of a request made online or by phone. A request sent by mail can take up to three business days. Doing it through the bureau's website, same as placing it, is the fastest path — set it, use it, and if you want, re-freeze it again immediately after.

There's no penalty for freezing and unfreezing repeatedly. It costs nothing and takes minutes each time, so there's no real reason to leave your file unfrozen "just in case" between applications.

---

None of this requires you to have already been scammed. That's the part worth sitting with: a credit freeze is one of the only genuinely free, permanent, zero-downside moves available to you, and most people never get around to it until after something's gone wrong. Do it tonight instead of after.

If you want to know whether your information is already floating around from a breach you don't know about yet, Cautellus's breach checker will tell you — and if you're setting this up for an aging parent or managing it after helping someone in your life who's already been targeted, the freeze steps above are exactly the same regardless of whose name is on the file. For the fuller first-24-hours checklist beyond just the freeze — password changes, phishing watch periods, and more — see what to do after a data breach. If the exposure involved a Social Security number specifically, it's also worth reading how synthetic identity theft works, and why identity fraud is now the most-reported scam category — a frozen file is the single best defense against both.

A freeze doesn't undo a breach that already happened. It just makes sure nobody gets to cash in on it.

---

Sources: Consumer Financial Protection Bureau — What is a credit freeze?, FTC — Credit Freezes and Fraud Alerts, Experian — Requesting a Security Freeze for a Minor Child's Credit Report, USA.gov — How to Place or Lift a Security Freeze