We spend a lot of time talking with clients about firewalls, backups, and phishing training. All of it matters. But if you asked us to name the single most effective thing a person can do to protect themselves from identity theft, it would not be any of those. It would be a credit freeze. It takes about fifteen minutes, it works, and almost nobody does it.
Here is the part that makes it strange. It is free. Not free trial free. Not free with a monitoring subscription. Free by federal law, at all three major credit bureaus, forever. And yet most people we talk to, including business owners who take security seriously at the office, have never placed one. Let us fix that.
What a Credit Freeze Actually Does
The Federal Trade Commission puts it about as plainly as it can be put: while a freeze is in place, nobody can open a new credit account in your name. That is the whole idea. Lenders check your credit report before approving new accounts. If the report is frozen, they cannot pull it, so the application dies right there.
This matters because of how identity theft usually works. The thief does not need to break into your bank account. They need your name, date of birth, and Social Security number, all of which have been exposed in breaches many times over. Then they apply for credit as you. A freeze breaks that chain at the one point where every version of the scam has to pass.
Two things it does not do, so nobody is surprised later. The FTC notes a freeze is free to place or lift and does not affect your credit score. And it does not stop fraud on accounts you already have, so you still need to read your statements.
Freeze, Fraud Alert, and Credit Monitoring Are Not the Same Thing
These three get used interchangeably in conversation and they should not be. The differences are real:
- A credit freeze blocks. Nobody opens new credit in your name until you lift it. It stays in place until you say otherwise. This is the strong option.
- A fraud alert asks. It tells businesses to check with you before opening a new credit account. It is a request for extra verification, not a wall. Federal law extended the standard initial fraud alert from 90 days to one year, and you only need to contact one bureau because that bureau notifies the other two. There is also an extended fraud alert that lasts seven years, which requires an identity theft report or police report and removes you from marketing lists for unsolicited credit and insurance offers for five years. Servicemembers can place a free active duty alert that lasts one year.
- Credit monitoring watches. The FTC describes monitoring as helping detect problems that might be the result of identity theft. Detect, after the fact. Monitoring tells you the house was robbed. A freeze locks the door.
Here is our slightly contrarian take. Plenty of people pay monthly for credit monitoring and have never placed the free freeze that would have prevented the thing the monitoring is watching for. If you only do one, do the freeze.
How to Do It at Equifax, Experian, and TransUnion
The freeze is per bureau, so you have to do it three times. The FTC is explicit that you contact all three: Equifax, Experian, and TransUnion. Doing two out of three leaves an open door, because a lender may pull from whichever one you skipped.
- Go to each bureau’s website directly. Look for “security freeze” or “credit freeze.” The FTC links to all three from its credit freeze guidance page, which is a good way to be sure you are on the real site and not a lookalike.
- Create an account and verify your identity. Expect questions about past addresses, loans, or car payments. Have your Social Security number handy.
- Save the PIN or login credentials. Put them in your password manager, not a sticky note. You will need them to lift the freeze later, and hunting for a lost PIN at a car dealership is a bad afternoon.
- Repeat twice more. Same steps, other two bureaus.
The law sets real deadlines here. When you request a freeze online or by phone, the credit bureau must put it in place within one business day. And when you ask to lift it, the bureaus must take that action within one hour. That last number is the one people do not believe.
Which brings up the objection we hear most: “But I might need credit.” You will, and it is fine. When you apply for something, ask the lender which bureau they pull from. The FTC points out that you only need to contact the bureau a lender will use. Lift it, apply, put it back. Minutes, not days.
Freeze Your Kids’ Credit While You Are At It
Child identity theft is ugly precisely because nobody notices. A kid has no reason to check a credit report, so the fraud can run for years and surface when they apply for a student loan or first apartment.
The same federal law lets parents freeze the credit of children under 16 for free, and lets guardians, conservators, and those with a valid power of attorney get a free freeze for their dependents. The FTC notes the freeze stays in place until you tell the bureaus to remove it, and that the process for a minor is different from the adult process, so follow each bureau’s specific instructions. It usually means mailing documentation rather than clicking through a web form. Set aside an evening and do all three.
Why Business Owners Should Care More Than Most
If you own a small or mid-sized business, your personal credit and your company are usually tangled together whether you like it or not. Business credit cards, equipment financing, lines of credit, commercial leases, and SBA loans routinely involve a personal guarantee or a personal credit check on the owner. Your personal credit file is quietly load bearing for the company.
So identity theft against you personally is not just a personal problem. If someone opens fraudulent accounts in your name in March, the damage can show up when you go to finance a truck in June. Freezing your personal credit is one of the cheapest pieces of business continuity planning available, and it costs nothing but the fifteen minutes.
Owners are also targeted more deliberately. Your name, title, and email are public, which is exactly what makes owners and executives such frequent targets in the phishing campaigns we wrote about in the surge in phishing attacks. Assume your personal details are already out there and act accordingly.
The Bottom Line
A credit freeze is the rare security control that is free, fast, effective, and permanent until you change it. There is no monthly fee, no vendor, no software to install, and no downside beyond a few minutes of friction the next time you apply for credit. We cannot think of another security recommendation with that ratio.
Block off fifteen minutes this week. Freeze your credit at all three bureaus, freeze your spouse’s, freeze your kids’. Save the credentials in your password manager. Then go back to arguing about backups and firewalls, which also matter, and which we covered in Why Cybersecurity Is No Longer Optional.
If you want the same practical, no-nonsense approach applied to your company’s technology instead of just your credit file, that is what we do for businesses across Denton County. Contact us today.
Sources:
- Federal Trade Commission, Credit Freezes and Fraud Alerts
- Federal Trade Commission, Get a credit freeze to stop identity thieves
- Federal Trade Commission, New Federal Law Allows Consumers to Place Free Credit Freezes and Yearlong Fraud Alerts
Comments are closed