A fraud alert is free and expires on its own after a year — a credit freeze is also free under federal law, but it stays locked until you personally lift it, and mixing the two up is how people end up thinking their financial safety is handled when it actually isn't.
That difference matters most in the hour after a wallet disappears, when instinct says protect everything and energy says pick three things. Identity theft recovery, at its core, is just deciding what's actually at risk before you start making calls — a personal security question as much as a financial one. Cash matters, but a wallet usually carries a driver's license and insurance cards too, sometimes even a Social Security card nobody should be carrying around in the first place. I wrote separately about how to spot gas pump skimmers and protect your credit card info after my own card got cloned, and it taught me the same lesson a stolen wallet does: speed matters less than picking the right tool for what actually happened.
A Fraud Alert and a Credit Freeze Are Not the Same Tool
A fraud alert tells lenders to slow down and verify your identity before opening anything new in your name. Think of it as a note taped to the file, not a lock on the door, real but easy to miss if nobody's paying close attention. Filing an alert notifies one credit bureau, and the report to the Federal Trade Commission (FTC) at IdentityTheft.gov is a separate step that still has to happen the same day, because the alert and the official report do two different jobs.
The first time I dealt with this, I called Equifax, requested the alert, and assumed, because of how the rep explained it, that Equifax would pass the request along to Experian and TransUnion automatically. It doesn't work that way. Weeks later I found out the other two bureaus had no record of anything, because the law leans on the first bureau to notify the other two, and "supposed to" and "actually does" are not the same sentence when you're the one holding the phone. The hold music looped, thin and a little warped through the speaker, while I waited for someone to just confirm the alert had gone through at all.
So Which One Do You Reach For When the Wallet Goes Missing?
If the wallet turns up in a coat pocket the next day, nothing charged, nothing opened, a fraud alert is plenty. It's a seatbelt, not a safe room. But if cards were actually used, or the wallet was taken rather than misplaced, a freeze is the stronger move, because it blocks new accounts outright instead of just flagging them for a second look.
I ended up working through that math on a walk around Freedom Park, waiting for confirmation emails from three separate bureau sites to land one after another. My father's information had already been exposed, so a freeze across all three bureaus turned into the one thing on the list I didn't have to keep checking on. There's a particular relief in pulling up his report every so often and watching it stay exactly the same. By the six-month mark with nothing new showing up on it, I finally let my shoulders come down from somewhere near my ears.
A neighbor of mine spends every Saturday at the pickleball courts in Squirrel Lake Park and asked me once why I'd bothered freezing my own credit when nothing had actually happened to me. Fair question. The honest answer is that a freeze is cheap insurance against an expensive maybe, the same logic as carrying flood insurance on a house that's never flooded yet.
The Personal Security Risks Beyond Your Cards
Cash and cards get all the attention, but a wallet usually holds quieter risks too. A spare house key tucked behind a license means a thief now knows your address and has a way in, and that's a locksmith call before it's anything else. Old accounts and public records carry pieces of your identity too, which is the whole argument for data-broker cleanup services. I reviewed one directly, McAfee Plus personal data cleanup for families, because pulling your name off those lists shrinks the pool a scammer can pull details from before they even try anything.
Health insurance cards carry a Social Security number more often than people expect, and once those nine digits are loose, they don't expire the way a card number does. They just sit there as a standing risk until something uses them. Your email inbox deserves the same attention, since it's usually the recovery address for the bank, the insurance portal, and the bureau login all at once. Whoever controls that inbox controls the reset button for almost everything else. A phone bill stub or an old SIM card left in a wallet is enough for a number-takeover attempt with your carrier too, which is its own separate headache to sort out. And after my dad's scam, I'll say this plainly: if anyone calls claiming to be a bank, the IRS, or even a relative in trouble, hang up and call back on a number you already had saved. A voice that sounds like someone you know isn't proof of anything anymore.
Loop In the Credit Bureaus Before You Loop In a Monitoring Service
Actually freezing your credit means contacting Equifax, Experian, and TransUnion directly, and it's tedious in a specific way: old addresses, old loan amounts, security questions about a mortgage you paid off a decade ago. I won't walk through the click-by-click steps here since that's covered in more detail elsewhere; what matters for triage is that a freeze under the Fair Credit Reporting Act costs nothing at any of the three bureaus, and any site trying to upsell you to a paid version of the same protection is selling you something the law already gives away.
This is also where a monitoring service earns its keep or doesn't. Dark web monitoring, the kind Norton bundles into its higher tiers, watches for your information turning up in breach dumps: a genuinely different function from a freeze, since a freeze stops new credit and monitoring just tells you when old data resurfaces somewhere you can't control. Neither one is the same as identity theft insurance or restoration help if things go sideways: three separate categories of service that don't do each other's job, no matter how the marketing blurs them together. A VPN, for what it's worth, protects none of this. It encrypts your Wi-Fi traffic, which has nothing to do with a wallet sitting in a thief's pocket. I've written before about why busy professionals still need LifeLock identity protection in 2026, and my take on it hasn't changed: it's a reasonable backup alarm for someone with no bandwidth to check three credit reports a week, not a replacement for the freeze itself.
Choose the Alert When It's Minor, the Freeze When It's Not
Four years into doing this for my own household and my parents', the rule of thumb hasn't gotten more complicated, just more automatic. Choose the fraud alert when the wallet is misplaced rather than stolen, when nothing has actually been charged, and when you still want to apply for credit yourself without extra hoops. Choose the freeze when you know it was taken, when a card has already been used, or when the person at risk, a parent, in my case, isn't going to remember to renew a one-year alert on their own.
The freeze takes more paperwork up front and costs exactly the same as the alert, which is nothing, so "which one is cheaper" isn't actually the right question. What costs you is guessing wrong about how bad the situation is and reaching for the lighter tool on a heavier problem. Start with triage: lock the cards, file the police report, get the FTC report on record, and let what actually happened decide which of the two protections comes next.