Three Names That Sound Interchangeable? Only One of Them Blocks a New Account

Three tools protect a credit file, their names sound almost interchangeable, and the differences between them are legal rather than cosmetic. One is free by law with defined obligations attached, one is a commercial product governed by terms that can be revised, and one is a flag rather than a barrier. People choose the wrong one routinely, usually because a company suggested it in a letter, and the wrong choice feels exactly like the right one until somebody opens an account.

Why the Letters Exist at All

Breach notification is a creation of state law rather than federal law, and it began roughly two decades ago when states started requiring organizations to tell individuals when certain categories of personal information had been exposed. Every state now has some version, which is why the letters exist, why they arrive in that stilted register, and why what a company must tell you varies depending on where you happen to live. They generally offer credit monitoring, because offering it is inexpensive and reads as a remedy, and monitoring tells you after an account has been opened rather than before.

The Security Freeze

A freeze restricts access to your credit report, and since lenders check that report before approving credit, a frozen file means almost nobody can open an account in your name, including you until it is lifted. It has to be placed with each of the nationwide credit reporting agencies separately, because they are separate companies holding separate files, and placing or lifting one is free and has to be done quickly when requested online or by phone.

A freeze does not affect existing accounts, does not affect a credit score, and does not stop you using credit you already hold. Lifting it temporarily for a mortgage application or a car purchase takes minutes, and you can lift it at one agency only if you know which one a particular lender uses. This is the tool that actually blocks the thing people are worried about, and it is a statutory right rather than a service, which is why the rules about how quickly an agency must act sit with the Consumer Financial Protection Bureau rather than inside a company's own terms.

The Credit Lock

A lock is a commercial product offered by the credit reporting agencies themselves, usually through an app and sometimes bundled into a paid subscription. Functionally it does something similar by restricting access to the file, and the difference is in what stands behind it, because a freeze is a statutory right with defined obligations while a lock is a contract governed by terms that company can change. Locks are marketed as more convenient on the grounds that they toggle instantly, and freezes have become nearly as fast, so for most households the freeze is the better default for the simple reason that it costs nothing and its terms cannot be rewritten.

The Fraud Alert

A fraud alert is a flag on the file asking creditors to take reasonable steps to verify identity before extending credit, and it blocks nothing at all. Three versions exist: an initial alert lasting a year, which is free and only has to be placed with one agency since that agency must notify the others; an extended alert lasting longer and requiring an identity theft report; and an active duty alert for service members deployed away from home. An alert is weaker than a freeze and easier to arrange, and it does not interfere with your own applications, which makes it a reasonable companion to a freeze rather than a substitute for one.

Which One to Use, Case by Case

If a Social Security number was exposed, freeze at all three agencies, because that is the situation the tool exists for. If a card number was exposed and nothing else, no freeze is needed, since the card gets reissued and liability for unauthorized charges on a credit card is limited by law. If you are unsure what was taken, place an initial fraud alert today, which is one phone call and five minutes, then read the letter properly and decide about a freeze afterward. If a mortgage application is a few weeks away, alert now and freeze after closing. And if there are children in the house, a minor's file can be frozen too, which matters because children are attractive targets precisely because nobody looks at their credit for eighteen years.

What a Freeze Does Not Cover, and Doing It Once Properly

Three gaps are worth knowing so nobody assumes more protection than they have. A freeze does not stop misuse of accounts you already hold, which is what statement review and account alerts are for. It does not stop tax related identity theft, where somebody files a return using your number, which is addressed by filing early and by requesting an identity protection number. And it does not touch medical or employment related misuse, which run through entirely different systems and are found by different means.

Set aside twenty minutes and do it once. Place the freeze at each of the three nationwide agencies, then save the confirmation and whatever identification number or account credentials each one issues, because you will need them to lift it later and they are genuinely difficult to recover afterward. Then once a year pull your free credit reports and actually read them, looking for accounts you do not recognize and addresses that were never yours. A freeze plus an annual read of the real report is a stronger arrangement than any paid monitoring service, and the entire thing costs nothing.