Credit Freeze vs. Credit Lock: What to Do First When Your Identity Is Stolen

210 days. That’s how long it took one new H-1B arrival to notice two credit cards had been opened in her name. She never checked her credit report. She assumed a person with no credit history had nothing worth stealing. A credit freeze would have stopped it before it started.

That assumption is exactly backward. A credit freeze — not a credit lock — is the first fix. It needs to happen at three bureaus, not one.

Here’s the actual difference between a freeze and a lock. Here’s why a brand-new Social Security Number is oddly valuable to fraudsters. And here’s why recovery looks different depending on how long you’ve been building credit here.

Credit Freeze vs. Credit Lock: The Real Difference

A credit freeze and a credit lock sound like the same thing. They are not. The difference matters more than most people realize.

Crop anonymous male in casual clothes entering credit card details on smartphone on street in daylight

A credit freeze is a legal right. Federal law has required all three credit bureaus to offer it for free since September 2018. Once it’s in place, no lender can pull your credit report to open a new account. Not a landlord, or a credit card company. Not a fraudster holding your Social Security Number.

A credit lock is a private product each bureau sells, often bundled into a paid membership. It does something similar. It blocks most new access to your file. But it runs on the bureau’s own terms of service, not on federal consumer protection law. Read the fine print before you rely on one. Some lock agreements include arbitration clauses. Some carve out exceptions for the bureau’s own partners.

Locks are usually faster to toggle from an app, and that convenience is real. But convenience isn’t a legal guarantee. If a bureau’s system goes down, or a dispute drags on, a freeze gives you firmer ground. It beats a lock in that moment.

If your file is thin to begin with, start with a freeze. Add a lock later, only if the app convenience genuinely changes your behavior.

Why a Fresh SSN Is a Bigger Fraud Target Than You Think

Fraudsters have a specific reason to want a Social Security Number issued in the last year or two.

A brand-new SSN usually has no credit file attached, or a file with just one or two accounts. That’s a thin file. A thin file is easy to build a fake identity on top of. There’s no history around it to contradict a new, fraudulent account.

This pattern is called synthetic identity fraud. A scammer pairs a real SSN with a made-up name, birth date, or address. Often that SSN belongs to a child, or a recent immigrant. The first application on that combination usually gets rejected. The second, third, or tenth one, once the thin file starts to look established, often gets approved.

Say you arrived in the US in the past year or two. Say you just received your SSN. You fit this pattern closely. If you’re also working on building credit with a fresh SSN or ITIN, the same thin file cuts both ways. It’s harder for you to get approved. It’s easier for someone else to get approved using your number instead.

Most new arrivals also skip checking their credit report entirely. No credit history, they figure, means nothing to check. That logic is wrong. A report can show fraudulent new accounts even if you’ve never opened a real one yourself. Pull your free report at all three bureaus through AnnualCreditReport.com. Do it in your first year here, even if you’re sure there’s nothing on it.

How to Freeze Your Credit at All Three Bureaus

Freezing your credit isn’t one action. It’s three separate actions. Equifax, Experian, and TransUnion each keep their own file. Lenders don’t always check the same bureau.

A fraudster blocked at Equifax can often still open an account through a lender that only pulls TransUnion. Freezing one bureau and assuming you’re covered is one of the most common mistakes people make here.

Each bureau lets you place a freeze online, by phone, or by mail. Online and phone requests must be processed within one business day, by federal law. Mail requests must be processed within three business days. It costs nothing, no matter which method you use. Equifax, Experian, and TransUnion all confirm this on their own freeze pages.

You’ll need an account or PIN with each bureau to lift the freeze later. You might need it for a mortgage application, a new phone plan, or a new card. Save that login information somewhere you’ll actually find it again. Lifting a freeze for one lender, or for one specific window of time, takes minutes once you have it saved.

Set a reminder to freeze all three the same day. Doing one today and “the others sometime this week” leaves two open doors while you get around to it.

You Can Freeze a Credit File That Doesn’t Exist Yet

Here’s the part almost nobody tells new arrivals: you don’t need an existing credit file to place a freeze.

Say you just got your SSN. Say you’ve never opened a US account. All three bureaus will still accept a freeze request. They create a placeholder file specifically to hold it. If someone tries to open credit using your number first, the attempt gets blocked on arrival.

This matters because thin-file fraud often happens in exactly this gap. It sits between the day a number is issued and the day its owner opens a first account. If nothing exists yet to protect, most people never think to protect it.

Parents already do this for children’s SSNs. Kids have no file and no reason to check one for years. The same logic applies to any newly issued number. That includes one issued to a new immigrant on a work visa or a fresh green card. It also matters if you’re still renting your first apartment with no credit history. Landlords read a blank file as risk. Fraudsters read the same blank file as opportunity.

Freeze it before you open your first credit card, not after.

When a Credit Lock Actually Helps

None of this makes locks useless. A lock has one clear advantage: speed, through an app you already use.

Say you travel often. Say you apply for new credit several times a year. Toggling a lock on and off beats logging into three separate bureau accounts every time.

Use a lock as a layer on top of a freeze, not a substitute for one. Keep the freeze as your legal backstop. Turn a lock on for the bureau you check most, if the convenience genuinely changes your habits. That means you’ll actually use it, instead of leaving your file open by default because switching it off felt easier.

If a bureau ever pitches a lock as your only protection, that’s a sales pitch, not neutral advice.

Recovery Looks Different at 8 Months Than at 20 Years

How you recover from identity theft depends heavily on your credit history length. It matters more than whether fraud happened at all.

Say you’ve been in the US for eight months. Your file probably has one or two accounts, maybe a secured card, maybe a store card. When a fraudulent account shows up, it’s obvious. It’s the only other line on an otherwise empty file. Disputing it usually means contacting one creditor and one collections agency, not a dozen.

Now say you’ve been building credit for twenty years. Your file has a mortgage, three or four cards, an auto loan, maybe a closed account from a decade ago. A fraudulent account can hide in that noise for months. That’s especially true if it’s a small credit line that never triggers a balance alert.

Both cases start the same way. File a report at IdentityTheft.gov. Get your personal recovery plan. Use the official Identity Theft Report to dispute each fraudulent account with the creditor and with all three bureaus.

The eight-month file usually clears faster, because there’s less to untangle. The twenty-year file often needs the extended fraud alert instead. That’s the seven-year version, not the standard one-year alert, because there’s more surface area for a second attempt.

Either way, the freeze goes on first. The paperwork comes after that.

Questions Worth Asking

Does a Credit Freeze Hurt My Score?

No. A freeze blocks new lenders from viewing your file. It doesn’t change your score. It doesn’t touch any account you already have open. You can still use existing cards, pay bills, and check your own report while frozen.

How Long Does a Credit Freeze Last?

Indefinitely, until you lift it yourself. There’s no expiration date and no fee for keeping it in place for years. Lift it only when a new lender needs to check your file, then freeze it again once that application closes.

Can I Still Apply for a New Card While Frozen?

Yes. Lift the freeze at the specific bureau your lender uses. Apply, then freeze it again once the new account gets approved. Most bureaus let you do this online in a few minutes.


Quick Summary

  • A credit freeze is free and legally required. A credit lock is a paid convenience feature layered on top — not a replacement.
  • Freeze all three bureaus separately. Equifax, Experian, and TransUnion don’t share freeze requests, and a fraudster only needs one open door.
  • A newly issued SSN with a thin credit file is a preferred target for synthetic identity fraud. You can freeze it before you ever open an account.
  • Recovery differs by how much history you have. Thinner files usually clear faster, but longer files may need the extended seven-year fraud alert.

Treat this as a starting point, not a final answer. Credit reporting rules change, and your specific facts matter — confirm anything important with a qualified professional before acting on it.