Credit Freeze vs. Credit Lock vs. Fraud Alert (and Freezing a Credit Card)

A credit freeze is a free federal right that blocks new lenders from pulling your credit report, which stops most new-account fraud. A credit lock does something similar but is a private product offered by the credit bureaus, not a legal right. A fraud alert does not block anything; it just tells lenders to verify your identity before opening an account. And "freezing a credit card" is a totally separate thing: it temporarily disables one existing card. None of these lowers your credit score.

These four tools get mixed up constantly because the words overlap, but they protect you in different ways and are governed by different rules. Here is the plain-English breakdown, what the law actually guarantees, and how to set each one up.

Credit freeze: the strongest free tool

A credit freeze (sometimes called a "security freeze") restricts access to your credit report. When your file is frozen, a lender, credit card company, or other creditor usually cannot pull your report to approve a new application. Because most companies will not open an account without checking your credit, a freeze stops the most common form of identity theft: someone opening loans or cards in your name.

Under the federal Fair Credit Reporting Act (FCRA), as amended by the 2018 Economic Growth, Regulatory Relief, and Consumer Protection Act, you have the right to place and lift a credit freeze for free at each nationwide credit bureau. The Consumer Financial Protection Bureau (CFPB) and the Federal Trade Commission (FTC) oversee these rights. There is no charge to freeze, to temporarily lift, or to permanently remove a freeze, and this applies in every state.

Key things to know about a federal freeze:

• It does not affect your credit score. A freeze controls who can see your report; it does not change what is in it.
• You can still use your existing accounts. A freeze does not block your current cards, loans, or your own ability to check your credit.
• You must freeze at each bureau separately. There are three nationwide bureaus, and a freeze at one does not freeze the others.
• You get a PIN or password. Keep it somewhere safe; you may need it to lift the freeze later.
• Lifting is fast. When you request a temporary lift online or by phone, the bureaus are generally required to act within roughly one hour for electronic requests under the federal rule.
• Children's credit can be frozen too. Federal law lets a parent or guardian freeze the file of a child under 16 for free, which matters because child identity theft often goes unnoticed for years.

To set one up, contact each of the three nationwide credit bureaus directly, by their official website or phone line. Be ready to verify your identity with your Social Security number, date of birth, address history, and sometimes documents like a government ID or utility bill. Place the freeze, then store each PIN or login. When you actually want to apply for credit, you temporarily lift the freeze, ideally only at the specific bureau the lender will use, then it re-freezes automatically or you re-enable it.

Credit lock: a convenience product, not a legal right

A credit lock does roughly the same job as a freeze, blocking access to your report, but it is a private service the bureaus sell or bundle, often through an app with a quick on/off toggle. The appeal is convenience: you can lock and unlock instantly from your phone without a PIN.

The important difference is legal. A freeze is backed by the FCRA, so your rights, the free pricing, and the response times are set by law. A lock is governed by the contract you agree to when you sign up, not by statute. That means:

• Some locks are free, but others come bundled with a paid credit-monitoring subscription, so read the terms.
• The company can change the lock's terms, since you are bound by its user agreement rather than federal law.
• The legal protections and guarantees of a statutory freeze may not all apply to a lock.

For most people who want the strongest, no-strings protection, the free federal freeze is the safer default. A lock can be a reasonable choice if you value the instant toggle and you have read and accepted the terms. Like a freeze, a lock does not lower your credit score.

Fraud alert: a flag, not a wall

A fraud alert is different in nature. It does not block access to your report. Instead, it places a notice on your file asking creditors to take reasonable steps to verify your identity before extending new credit. It is a speed bump, not a barrier, useful when you are worried but do not want the extra steps of freezing and lifting.

The FCRA gives you the right to fraud alerts for free, and a major convenience: you only have to contact one of the three bureaus, and that bureau must tell the other two. The main types are:

• Initial fraud alert: Available to anyone who suspects they may be a victim or is at risk. Under current federal rules it lasts one year and is renewable.
• Extended fraud alert: For confirmed identity-theft victims who file an identity theft report (typically an FTC IdentityTheft.gov report or a police report). It lasts longer, up to seven years under federal law, and includes extra protections.
• Active-duty alert: For service members deployed away from home, which helps protect their credit while they are on duty.

A fraud alert is weaker than a freeze because it depends on lenders actually following through on verification. If you want certainty that no new account can be opened, choose a freeze. If you want a lighter touch, an alert may be enough.

Freezing a credit card: a separate, smaller action

"Freeze my credit card" usually means something completely unrelated to your credit report. Most card issuers now offer a feature, often labeled "lock," "freeze," or "pause," inside their app or website that temporarily disables one specific card. When the card is locked, new purchases, cash advances, and sometimes new balance transfers are declined, but recurring charges you authorized and existing payments may still go through, depending on the issuer.

This is handy when you misplace a card and are not sure if it is lost or stolen. You lock it instantly, and if you find it, you unlock it with a tap, no need to cancel and wait for a replacement. It only affects that one card account. It does not touch your credit report, your score, or your other accounts, and it is not the same as a credit freeze.

Card protections like fraud liability are shaped by the Truth in Lending Act (TILA) and its Regulation Z, enforced by the CFPB. For credit cards, your liability for unauthorized charges is capped at a low federal maximum, and many issuers offer zero-liability policies that go further. If you see charges you did not make, report them to your issuer promptly; locking the card is a fast first step, but you still need to formally dispute the fraudulent charges.

Which one should you use?

• You want maximum, free protection against new-account fraud: Place a credit freeze at all three bureaus.
• You want instant on/off convenience and accept the terms: Consider a credit lock, watching for bundled fees.
• You are worried but want a lighter touch, or are an active victim: Add a fraud alert; victims should use the extended alert with an identity theft report.
• You lost a specific card or saw a suspicious charge: Lock that card in the issuer's app, then dispute any bad charges.

Many people who have been victimized use several at once: a freeze at each bureau, an extended fraud alert, and card locks as needed. They work together.

If you think you are already a victim

Move quickly and keep records. Practical steps:

• Document everything. Save dates, names, confirmation numbers, and copies of letters and emails. A simple timeline helps if you have to dispute fraudulent accounts later.
• Report identity theft to the FTC. Filing at IdentityTheft.gov generates an official identity theft report and a recovery plan, and it unlocks the extended fraud alert and other rights under the FCRA.
• Place a freeze at all three bureaus to stop further new accounts.
• Dispute fraudulent items in writing. Under the FCRA you have the right to dispute inaccurate or fraudulent information on your credit report, and the bureau generally must investigate, typically within about 30 days under federal rules.
• Consider a police report if a creditor or the situation requires one; some institutions ask for it to clear fraud.
• Contact your state Attorney General if a bureau or creditor will not cooperate. Many states add stronger consumer protections on top of the federal floor, though the specifics vary by state.

Federal law sets the baseline: free freezes, free fraud alerts, the right to dispute errors, and capped card liability. State law often adds more, but the protections and exact figures vary by state, so check your own state's rules. This is general information to help you understand your options, not legal advice for your specific situation.

Know the law

Federal law limits your liability and gives you tools — fraud alerts, freezes, and an official FTC recovery plan at IdentityTheft.gov.

Key federal laws:

• Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq.

Where to get help or file a complaint:

• IdentityTheft.gov — official FTC recovery plan

Your state matters too. Federal law is the floor — your state sets the statute of limitations on debt, garnishment and exemption limits, payday and repossession rules, and has its own Attorney General and consumer-protection laws. Always check your state’s rules. This is general legal information, not legal advice.