Three. That's how many major credit bureaus exist in the United States, and most of the free monitoring people lean on after a scare only watches one of them. I found that out the expensive way, and it's the reason LifeLock still sits on my monthly bill years after my family's identity theft mess started.
This site runs on affiliate links, and I want that said plainly before we go any further: if you sign up for LifeLock through a link here, I earn a small commission at no extra cost to you. I only point people toward services I've actually paid for and used across my own household and my parents' accounts (not just skimmed a press release about).
My dad lost almost five thousand dollars in gift cards to a fake IRS caller a few years back, and the cards themselves should have tipped him off — the scratch panel on the back had that faint give to it, like someone had already peeled it and pressed it flat again. Two months later my own card was cloned at a gas pump and used for over a thousand dollars in furniture I never ordered. Neither of those things happened because we were careless. They happened because we were busy, and busy is exactly the state scammers are counting on.
The Three-Bureau Blind Spot
Freezing your credit is the advice everyone gives, and it's good advice — I've done it, and I've walked coworkers through the steps to freeze your credit at all three bureaus for free. A freeze stops a stranger from opening a new loan or credit card in your name. It does nothing for an existing card that's already been cloned, and it does nothing to stop someone from filing a fake tax return with your Social Security number — that risk lives separately from your credit file entirely, tied to a number you can't exactly freeze or replace.
There's also a real difference between a fraud alert and a freeze, and the two get confused constantly — an alert just asks lenders to verify your identity before opening anything new, while a freeze blocks new applications outright until you lift it yourself. Neither one watches your existing accounts for a stranger swiping a cloned card at the pump. My neighbor Rochelle hasn't swiped a debit card at a pump in years — ever since she spotted a skimmer clamped onto a card reader, she's paid cash or tapped at the register inside instead, and checking for a loose or crooked reader before you swipe takes about five seconds.
Monitoring Catches Fraud. It Doesn't Prevent It.
Monitoring is the part people misunderstand most, so it's worth saying plainly: nothing on this list stops a scammer from tricking someone. What it does is shorten the gap between the bad thing happening and you finding out about it, which is a different kind of value — closer to a smoke detector than a fireproof safe (it warns you, it doesn't stop the fire). Reimbursement coverage, credit monitoring, and restoration help are three separate features bundled under the same personal security subscription, and it's worth knowing which one actually matters for your situation before you assume a plan covers you.
This is where Norton 360 with LifeLock earned its keep for me. It scans the dark web for your information showing up where it shouldn't, which caught old passwords from retail sites I'd forgotten I ever used. That kind of scan tells you your data is already out there — it can't put it back, and it won't stop the next breach from adding to the pile. Two other habits matter just as much and get talked about far less: treating your email password like the master key it actually is, since most account recovery flows run through it, and locking down your mobile carrier account so nobody can hijack your phone number and reroute your text codes to themselves.
What Recovery Looks Like When You Don't Have Four Free Hours
No company sells total prevention, whatever the homepage claims — a human being can still be talked out of a code over the phone, which is exactly what happened to my dad. Where a paid plan actually earns its cost is cleanup. I've laid out more of that process in best identity theft protection for families after dealing with fraud, and the short version is that a restoration specialist who does this daily moves faster through a bank's fraud department than I ever could on a lunch break.
Filing the report yourself still matters, even with a specialist helping — IdentityTheft.gov generates the exact forms banks and creditors expect to see, and skipping that step is a common reason a dispute drags on. The clearest proof I have that real-time alerts are worth paying for is boring: I was sitting in my car outside Costco with the engine running when a LifeLock alert told me someone had tried opening a new account in my name, before my own bank noticed a thing. A neighbor from our local Facebook group, Gretchen Aldous, messages me every time one of these breakdowns runs, because she's been walking her own dad through a scam targeting his Social Security benefits and wants to know what actually works before she recommends it to him.
Picking a LifeLock Tier Without Overpaying
LifeLock itself isn't one plan, and that's the part that tripped me up. I paid for a month of the entry-level Standard tier before I realized the coverage my dad actually needed — real reimbursement, monitoring on the accounts a scammer would actually target — sat on a much higher tier, priced nothing like what the homepage led with. I broke down the actual differences in comparing LifeLock Standard vs Advantage plans, and the short rule I use now is this: if you're covering a parent whose accounts you don't fully control, buy one tier higher than feels necessary, because the gap between tiers is usually bigger than it looks on the pricing page.
LifeLock vs Norton 360 vs McAfee+: Which One Fits Which Household
Budget matters, and McAfee+ is usually the cheaper entry point of the three, especially if the feature you actually want is protecting your Social Security number with McAfee Plus after a breach. Its Personal Data Cleanup tool goes further than most people expect — it found my home address sitting on people-search sites I'd never heard of and requested removal on my behalf, which is the kind of unglamorous, ongoing task nobody has time to do by hand every few months.
For readers outside the US, the calculus changes, since SSN-specific monitoring simply doesn't apply — I point overseas colleagues toward Norton 360 (UK & Europe) instead, since it's built around local banking systems rather than a US credit file. Back home, McAfee+ still runs on my dad's phone specifically because it blocks malicious links before he can tap them, which matters more than any monitoring feature when the actual threat is him picking up the phone in the first place. One newer scam worth knowing about: fraudsters can now clone a family member's voice well enough to fool you on a callback, so if a distressed call ever asks for money or gift cards, hang up and call that person back on a number you already have saved — never one they just gave you.
Is Identity Theft Protection Worth It for Busy People?
The honest answer is that it depends on how much your time is worth to you, and for most people juggling a job, a family's safety, and aging parents, the math isn't close. A stolen identity doesn't just cost money; it costs the hours spent proving you're who you say you are, usually during a week you didn't have hours to spare. Paying a specialist to handle that recovery, and getting an alert fast enough to stop most of the damage before it spreads, is worth more to me than the bill that shows up every month.
If you're deciding where to start, checking out LifeLock is the move I'd make first — not because it's flawless, but because real-time alerts plus documented recovery help are the two things that actually mattered when my family needed them. It won't make you untouchable. It will mean you're not fighting a fraud case alone at eleven at night after the kids are in bed. And for what it's worth: the IRS will never ask you to pay a bill with a Target gift card. If anyone tells you otherwise on the phone, hang up.