My father is on the phone with an Experian rep, stuck at the security-question screen, unable to remember the color of a car he sold years ago. I'm in the next room mouthing "just hang up, we'll do it online" while he insists he's almost got it. He doesn't. The call ends with nothing frozen and both of us more frustrated than when we started, which is exactly the kind of thing that convinced me a credit freeze needed to become as automatic in my house as locking the front door.
Here's the myth worth killing first: a lot of people think you need to pay a monitoring company to actually lock down your credit. You don't. Monitoring and freezing solve two different problems: one watches for a fire that's already started, the other keeps the fire from being lit in the first place. Mixing them up is how families end up paying a monthly fee for something the federal government hands out for free.
That whole education started for me after my dad got taken by a phone scam, and a couple of months later my own card got cloned at a gas pump — I wrote separately about how to spot gas pump skimmers so you don't hand a stranger your card number without realizing it. Fraud prevention, in my house, stopped being theoretical right around then. Four years in, freezing credit is the one piece of advice I give first, before any app, any subscription, any monitoring dashboard.
The Myth That a Credit Freeze Costs Money
A credit freeze, under the Fair Credit Reporting Act, is free at all three bureaus — Equifax, Experian, and TransUnion — every single time, no matter how many times you freeze or lift it. By law, the bureaus have to apply it within one business day if you request it online or by phone, and lift it within an hour when you ask the same way. Mail requests take three business days on either end, which matters if you're the type who trusts a signed letter more than a login screen. None of that requires a subscription of any kind.
So why does it feel like you're being sold something? Because the second you go looking for the free freeze option, the bureaus put a paid "credit lock" product in front of you first, usually with a friendlier name and a monthly fee attached. A lock is a private product built on the bureau's own terms of service. A freeze is a federal right. They are not the same thing dressed differently, even though the sign-up screens want you to think so (funny how that works).
Why Freezing One Bureau Doesn't Cover You
A friend of mine — she volunteers Saturday mornings at Second Harvest Food Bank of Metrolina on Statesville Road, someone who has the rest of her life pretty buttoned up — assumed that freezing her credit with Equifax meant she was covered everywhere. She wasn't. A car dealership pulled her Experian file without a hitch, no freeze in sight, because lenders don't all check the same bureau. A credit card company might lean on TransUnion. A mortgage broker might pull all three. Freezing two out of three is like locking the front door and the back door and leaving the garage wide open.
Does a Credit Freeze Hurt Your Score?
No — and this is a smaller myth, but it stops people from doing the bigger one. A freeze doesn't touch anything already on your report, and it doesn't ding your score. What it does is block new lenders from pulling that report to approve an application in your name, which is the entire point. If a scammer tries to open a car loan or a credit card using your information, a freeze means there's simply nothing for them to look at. (If what you actually need is something lighter and temporary — say, right after your wallet stolen — a fraud alert is a different, narrower tool I've covered separately; it's not a substitute for the freeze itself.)
You Don't Need a Reason to Freeze Your Credit
A lot of people wait to freeze until something's already gone wrong, as if it's a punishment for having been careless. It isn't. Freezing before anything happens is like locking your door before a burglar tries the handle, not after. Every adult in my household has been frozen at all three bureaus for years now, and none of us had to be a fraud victim first to justify doing it — my dad's situation just made it obvious sooner than it might have otherwise.
What Actually Happens When You Sit Down to Do It
In practice, all three bureaus make you create an account, verify your identity with a handful of questions about your own history — old addresses, old loans, the color of a car you may not remember (mine didn't, obviously) — and then flip a toggle. Equifax's version is the cleanest of the three these days. Experian buries the actual freeze option behind several screens offering you a paid "boost" or "premium" product first, so you click past those to get to the real thing. TransUnion's site looks like it hasn't been redesigned since around 2015, but it works. None of the three should take more than about ten minutes once you know where to look, and saving or printing the confirmation number from each one is worth the extra thirty seconds — you'll want proof if a dispute ever comes up later.
The Trade-Off Nobody Puts in the Brochure
Nobody selling you a monitoring subscription wants to mention this part: a freeze is genuinely inconvenient if you're actively applying for credit. Buying a car, refinancing a mortgage, opening a new phone plan — all of it requires you to log back into each portal and lift the freeze first, sometimes with a countdown timer before it locks again automatically (set it further out than you think you'll need, trust me). That friction is the cost of the free version of security. I'd rather deal with ten extra minutes at a dealership than another stretch of months untangling fraud on somebody's account.
Lock the Report, Then Keep the Key Somewhere You'll Find It
The night I finally had confirmation numbers for all three freezes on both my account and my dad's, I sat up later than I meant to, laptop glow the only light against the bedroom wall, working through the rest of the list I'd built since the whole gas-pump mess. A Norton 360 scan finished clean around the same time — zero dark web hits under the new email address I'd switched to after everything happened — which is a strangely satisfying kind of nothing to see.
If you're dealing with fraud that's already happened rather than trying to prevent the next one, that's a different first move — file with the FTC at IdentityTheft.gov before you spend a cent on anything else. And if you're trying to figure out which paid monitoring service is actually worth the money once the free freeze is in place, I've laid out the best identity theft protection for families elsewhere on this site. This piece is only about the free thing everyone should do first. It takes about half an hour, it costs nothing, and unlike almost everything else marketed to scared, tired parents, it actually does what it says.