A credit freeze after identity theft is one of the highest-leverage moves you can make once someone has used—or tried to use—your personal data to open credit. A freeze, also called a security freeze, restricts access to your credit file so most new creditors cannot review it without your PIN or password, which blocks many fraudulent applications. Freezes are free under federal rules at the nationwide consumer reporting agencies, and you can lift them temporarily when you legitimately need credit. They do not fix every identity crime—tax, medical, or existing-account fraud need other steps—but they stop a common path attackers take next.
Work the sequence below as a recovery checklist: document the theft, freeze all three major bureaus (plus specialty files when relevant), alert banks and the IRS as needed, and keep monitoring. Official instructions live at IdentityTheft.gov and broader consumer guidance at the FTC’s consumer site. If strange phone numbers or names keep appearing in the aftermath, tools such as reverse phone lookup and people search can help you organize leads for law enforcement—not confrontations.
Why a freeze beats hoping fraud alerts alone will hold
Fraud alerts tell creditors to take extra verification steps; freezes go further by limiting file access itself. After identity theft, many people place both: an initial fraud alert while they set freezes, then maintain freezes as the long-term control. Freezes do not lower your credit score, and they do not stop charges on accounts you already opened. They also do not prevent someone who already has account credentials from abusing those logins—so password resets and multifactor authentication still matter.
| Action | What it does | Cost | When to use after theft |
|---|---|---|---|
| Security freeze | Blocks most new-credit pulls without your thaw | Free | Immediately at all nationwide bureaus |
| Fraud alert | Flags file for extra ID checks | Free | Same day; one bureau notifies others for initial alerts |
| Identity theft report | Creates FTC recovery plan and affidavit support | Free | As soon as you confirm misuse |
| Police report | Local record for banks and disputes | Varies | When creditors or facts require it |
| Credit monitoring | Alerts on file changes | Free or paid | Alongside freezes, not instead of them |
Confirm the theft and start an IdentityTheft.gov report
Gather dates, account numbers, letters from creditors, and screenshots of suspicious applications. At IdentityTheft.gov, answer the guided questions so the site builds a personalized recovery plan and an identity theft report you can use with businesses. That federal report is the backbone of many dispute letters. If only a data breach exposed your Social Security number and you see no misuse yet, you may still freeze proactively; if accounts already opened in your name, treat it as active theft and move faster on freezes and account freezes with each issuer.
Place a security freeze at Equifax, Experian, and TransUnion
Visit each nationwide credit bureau’s freeze page or call their freeze line and request a security freeze on your file. You will provide identifying information and receive a PIN, password, or account credentials to thaw later—store those offline in a safe place. Freeze all three; criminals often try whichever bureau a particular lender checks. If you have a thin file or recent name/address changes, allow extra time and keep confirmation emails. A complete credit freeze after identity theft means three confirmations in hand, not one bureau and a hope the others “got the memo.”
Freeze or lock related files that still issue credit-like products
Some lenders and specialty products look beyond the big three. Consider freezes or locks where available at specialty consumer reporting agencies relevant to your risk—for example, those used for certain banking, telecom, or tenant screening products—using the FTC’s lists and your recovery plan as a guide. Place freezes for minor children if you have reason to believe their Social Security numbers were exposed; child identity theft often stays hidden for years. Use official bureau channels only; ignore cold callers who offer to “set freezes for a fee.”
Alert banks, cards, and other existing account issuers
Call numbers on the back of cards or from official apps—not numbers from surprise texts. Close or freeze compromised accounts, request new account numbers, and enable multifactor authentication. Review direct deposit and beneficiary details on bank and brokerage accounts. If a spouse, partner, or household member misused your identity, document what was authorized versus forged; joint accounts and authorized-user status are not the same as someone opening credit solely in your name. Ask each issuer what documentation they need from your FTC report or police report to finalize fraud claims.
Protect tax and government identity channels
Tax-related identity theft can produce rejected electronic returns or notices about wages you never earned. Follow IRS identity theft guidance at irs.gov identity theft resources, respond to CP2000 or similar notices carefully, and ask about an Identity Protection PIN if you qualify. Review Social Security and benefits accounts for unfamiliar activity. Freezing credit does not stop a fraudulent tax return by itself, which is why tax steps sit beside—not under—your bureau freezes.
File disputes, police reports, and creditor letters as needed
Pull free weekly credit reports through the official AnnualCreditReport process and dispute fraudulent accounts and inquiries in writing. Attach your identity theft report. When a creditor or collector demands a police report, file one with local law enforcement and keep the case number. Send letters by methods that give you proof of delivery when amounts are large. Keep a simple spreadsheet of contacts, dates, and outcomes so nothing falls through while you juggle freezes and thaws for legitimate applications.
Decide how long to keep freezes and how you will thaw safely
There is no universal “unfreeze after ninety days” rule for victims. Many people keep a credit freeze after identity theft in place indefinitely and lift it only for a named creditor or a short window when applying for a car loan, apartment, or utility. Use each bureau’s process to thaw temporarily, then re-freeze when the pull is done. If you still feel exposed—ongoing phishing, a compromised mailbox, or a controlling partner with access to your documents—leave freezes up and tighten physical and digital security before any long thaw. Monitoring alerts can watch the file while it stays frozen.
What a freeze does not stop
Freezes do not block misuse of existing cards, check fraud on open bank accounts, medical billing under your identity, or wage reporting fraud. They do not prevent all non-credit onboarding that skips bureau pulls. Stay skeptical of anyone demanding remote access software, gift cards, or wire payments to “release” your freeze—that is a secondary scam. For broader fraud patterns and reporting options, the FBI scams and safety pages complement FTC recovery steps.
Frequently Asked Questions
How to freeze credit after identity theft?
File at IdentityTheft.gov, then place a free security freeze with Equifax, Experian, and TransUnion online or by phone. Save every PIN or password. Contact banks and card issuers to secure open accounts, review credit reports for fraud, and dispute errors with your identity theft report attached. Add tax and specialty-file steps if those channels look exposed.
How long should I freeze my credit after identity theft?
Keep freezes as long as your risk remains elevated—often indefinitely—with temporary lifts only when you apply for credit. Duration depends on whether the thief still has your data, whether disputes are open, and whether household access to your documents is secure. Revisit the decision when recovery tasks are finished and phishing pressure drops, not on an arbitrary calendar date.
How long should you freeze your credit after identity theft?
Think in years, not days, if your Social Security number circulated widely. You can maintain freezes for life at no cost and thaw for specific applications. If you prefer convenience over maximum friction, some people switch to strong fraud alerts plus monitoring after a quiet period—but many victims keep freezes because the cost is zero and the control is higher.
Can you still face identity theft after you freeze credit files?
Yes. Freezes mainly hinder new credit opened through bureau checks. Criminals may still abuse existing accounts, file fraudulent taxes, submit medical claims, or socially engineer companies that do not pull credit. Combine freezes with account security, tax protections, mail security, and careful sharing of personal data so one control is not your only defense.
Do I need a freeze at every bureau?
Yes for practical protection. Lenders may check different bureaus, and a freeze at only one leaves gaps. Plan on Equifax, Experian, and TransUnion every time you respond to identity theft with freezes. Confirm success with each confirmation page or letter, and store thaw credentials where a thief who already hit your email cannot instantly find them.
