Credit Freeze vs Identity Theft Protection: What to Do First

Identity theft protection is advertised as prevention. Almost all of it is detection and cleanup. That distinction matters, because there is a genuinely preventive measure available to everyone — and it is free.

What a credit freeze does

A credit freeze, also called a security freeze, blocks access to your credit report. Lenders check your report before opening an account, so if they cannot pull it, the application fails. That stops most new-account fraud at the point it would otherwise succeed.

It is free by law at each of the three major bureaus — Equifax, Experian and TransUnion — and you must place it with each separately, since freezing one does not freeze the others. You can lift it temporarily when you genuinely apply for something, usually within minutes online or by phone.

This is the key difference from monitoring: a freeze prevents the account from being opened. Monitoring tells you afterwards, once the damage has begun. If you do only one thing, do this one.

What a freeze does not cover

A freeze is not comprehensive, and it helps to know the gaps:

• Existing accounts. Someone using your current card or draining your bank account is unaffected by a freeze.
• Tax refund fraud and benefits fraud, which do not involve a credit check.
• Medical identity theft, where someone obtains treatment in your name.
• Criminal identity theft, where your details are given during an arrest.
• Employment and rental fraud in some cases, depending on what the checker accesses.

Those gaps are the honest argument for a paid service.

Freeze, lock or fraud alert?

Three similar-sounding things, worth separating.

A freeze is the statutory one: free, strong, and available at all three bureaus.

A lock is a bureau's own product doing broadly the same thing through an app, sometimes bundled into a paid subscription. It is governed by the bureau's terms rather than by statute. If the free freeze does the job, there is little reason to pay for the lock.

A fraud alert asks lenders to take extra steps to verify identity before opening an account. It is free, lasts a year, renewable, and — usefully — placing one with a single bureau requires that bureau to notify the other two. It is weaker than a freeze but less friction, and it is the standard first step after a breach.

Also worth knowing: you can freeze a child's credit file for free. Child identity theft goes undetected for years because nobody checks a seven-year-old's credit, and the damage surfaces when they apply for something at eighteen. If you have children, this is among the highest-value free actions available.

What a paid service genuinely adds

Having done the free things, a subscription buys three things worth pricing honestly.

Monitoring beyond credit. The scanning that distinguishes providers covers court and arrest records, payday loan applications, change-of-address filings, bank and card account takeover, and dark web appearances. Change-of-address monitoring in particular catches a classic technique — redirecting your post to intercept new cards and statements — which no freeze addresses.

Restoration labour. This is the part with the most real-world value and the least visibility in a comparison table. If your identity is stolen, the painful part is rarely the money — banks generally reimburse fraudulent card charges — it is the months of calls, affidavits, police reports and disputes. A good provider assigns a case manager who does that work, ideally under a limited power of attorney so they can act rather than coach you through it.

A single dashboard, which matters more than it sounds if you would otherwise not check three bureaus and several accounts regularly.

When comparing, check whether credit monitoring covers one bureau or all three, since a lender may report to only one — and note that three-bureau monitoring is frequently reserved for the higher tier.

Reading the insurance claim properly

Nearly every provider advertises identity theft insurance, commonly at $1 million or more. Two things to understand.

First, it generally covers expenses incurred in recovery — legal fees, lost wages, notary and postage costs, sometimes childcare during appointments — rather than reimbursing stolen funds. Money taken from a bank or card account is normally recovered under the bank's own fraud protections, not the policy.

Second, it is an insurance policy with a deductible, per-category sub-limits and exclusions. The headline is an aggregate maximum that almost nobody approaches.

It is a real benefit and a poor basis for choosing a provider. Compare the sub-limits, particularly for lost wages and legal fees, rather than the headline number.

A sensible order of operations

1. Freeze your credit at all three bureaus, and your children's if you have them. Free, and the highest-impact step.
2. Get your free credit reports and read them. Errors and unfamiliar accounts are more common than people expect.
3. Turn on alerts in your banking and card apps for transactions and profile changes. Free, and faster than most paid monitoring for existing-account fraud.
4. Secure your email, which is the master key for password resets on everything else.
5. Then consider a paid service for the gaps above — particularly if you have had a breach involving your identity documents, or you want the restoration support.

If it happens anyway

The sequence is broadly the same with or without a subscription: place a fraud alert or freeze, report at the official government identity theft reporting service, which generates a recovery plan and an affidavit, file a police report where a creditor requires one, then dispute fraudulent accounts in writing and keep records of everything.

A good provider does much of this with you and holds the case file. Knowing the steps exist independently of any subscription is worth something too.

If you are comparing providers, our ranked comparison of identity theft protection services covers how they differ on monitoring scope, restoration support and insurance terms, scored against the criteria in our rating methodology.

This is general information, not legal or financial advice. Freeze procedures, bureau contact details and provider terms change over time — confirm current details with the bureaus directly and with any provider before subscribing.