Bottom line: A credit freeze is free, can be placed in minutes at all three bureaus, and is the single most effective identity theft prevention measure. It prevents anyone from opening new credit accounts in your name — including you, until you temporarily lift it. Combine it with monitoring and you have covered the highest-risk scenarios.
Identity theft in the U.S. is common enough that it should be treated as a question of when, not if your information will be exposed. Over 15 million Americans have information stolen each year. The damage ranges from a few unauthorized charges that resolve quickly to multi-year battles to clear fraudulent accounts and tax filings.
Most protective measures cost nothing and take under an hour to set up.
The Most Effective Protection: Credit Freeze
A credit freeze (also called a security freeze) instructs the three credit bureaus — Experian, Equifax, and TransUnion — to block access to your credit report. Because lenders check credit reports before opening new accounts, a freeze prevents new accounts from being opened in your name even if someone has your Social Security number.
Freezes are:
- Free to place and lift (mandated by federal law since 2018)
- Instant or near-instant online
- Indefinite — they stay until you remove them
- Your control — you can temporarily lift a freeze when applying for credit
How to freeze your credit:
- Go to each bureau's website directly:
- Experian: experian.com/freeze
- Equifax: equifax.com/personal/credit-report-services
- TransUnion: transunion.com/credit-freeze
- Create an account and verify your identity
- Request the freeze — it activates immediately online
- Save the PIN or account access for each bureau (needed to lift the freeze later)
Freeze all three bureaus. A freeze at one does not protect you if a lender pulls from a different bureau.
Credit Monitoring
Monitoring alerts you when changes occur to your credit file — new accounts, inquiries, address changes. It does not prevent fraud but catches it early.
Free monitoring:
- AnnualCreditReport.com: Free weekly credit reports from all three bureaus
- Credit Karma and Credit Sesame: Free TransUnion and Equifax monitoring with alerts
- Many credit card issuers include free monitoring as a benefit
Paid monitoring (identity theft insurance, dark web monitoring, restoration services) adds value primarily in post-theft recovery. The credit freeze does more to prevent theft than any monitoring service.
- Freeze your children's credit too. Children are actually higher-value targets for identity thieves because the theft goes undetected for years — until the child applies for their first credit card or student loan at 18 and discovers fraudulent accounts. Place a freeze on any child's credit at all three bureaus — it is free and takes 15 minutes.
- The IRS Identity Protection PIN (IP PIN) is a 6-digit code that prevents someone from filing a fraudulent tax return in your name. You can opt in at IRS.gov whether or not you have been victimized. Once enrolled, you must use the PIN every year when filing — but it effectively blocks tax identity theft.
- Phishing — deceptive emails, texts, or calls impersonating legitimate institutions — is the most common way thieves obtain information. Never click links in unexpected financial messages; go directly to the institution's website. Legitimate banks and the IRS do not demand immediate action via text.
Other Protective Measures
Strong, unique passwords and a password manager. Data breaches expose credentials. Using the same password across sites means one breach compromises all accounts. A password manager (1Password, Bitwarden, Dashlane) generates and stores unique passwords for every account. Combine with two-factor authentication (2FA) for critical accounts.
Two-factor authentication (2FA). Enable 2FA on email, banking, investment, and social media accounts. Prefer an authenticator app (Google Authenticator, Authy) over SMS-based 2FA, which can be intercepted via SIM swap.
Mail security. Mail theft is a persistent identity theft vector. Consider a USPS Informed Delivery account (photos of incoming mail), a PO Box for sensitive mail, or regular mailbox pickups. Shred financial documents before discarding — a cross-cut shredder is worth the investment.
Review financial statements regularly. Check bank and credit card statements monthly for unauthorized charges. Enroll in transaction alerts from all financial institutions — instant notifications for any charge over $1 let you catch fraud immediately.
If Your Identity Is Stolen
- Place a credit freeze (if not already done) at all three bureaus immediately
- File a report at IdentityTheft.gov — the FTC's official identity theft reporting portal. It creates a personalized recovery plan and produces an Identity Theft Report accepted by creditors.
- File a police report — some creditors require it; useful documentation for disputes
- Contact each affected institution directly — banks, credit card companies, lenders — to report fraud and dispute accounts
- Check your credit reports for accounts you do not recognize
- File an IRS identity theft affidavit (Form 14039) if your tax return is affected
Recovery takes time — months, sometimes longer. The FTC's IdentityTheft.gov provides step-by-step guidance and templates for dispute letters.
Federal laws governing credit freezes, monitoring rights, and identity theft protections are subject to change. For the most current guidance, visit FTC.gov/IdentityTheft.
Frequently Asked Questions
What should I do after reading How to Protect Yourself from Identity Theft?
Can Money Map help with general decisions like this?
Are the products mentioned in this article paid placements?
How often is this article reviewed?
Answer a few questions about your situation and goals. Money Map points you to the highest-value next step across savings, mortgage, cards, and debt.
Editorial review
What changed since the last update
Was this guide helpful?