What Is a Fraud Alert and When Should You Actually Use One?

If you have received a data breach notice, noticed something suspicious on your credit report, or had your wallet stolen, you have probably been told to place a fraud alert.

Most people do it without fully understanding what it actually does, or whether a credit freeze would serve them better.

Both are free. Both are worth knowing about. And they work in very different ways.

WHAT A FRAUD ALERT ACTUALLY DOES

A fraud alert is a notice added to your credit file that tells lenders to take extra steps to verify your identity before approving any new credit in your name. That typically means the lender contacts you directly before proceeding.

It does not block anyone from seeing your credit report. It does not stop new credit from being opened. It just adds a flag that says someone should check with you first.

Think of it as a speed bump, not a locked door.

You only need to contact one of the three credit bureaus to place it. By law, that bureau must notify the other two, so a single request covers all three automatically.

THE THREE TYPES OF FRAUD ALERT

Initial Fraud Alert

This is the standard option. It lasts one year, is free to place, and is available to anyone who suspects they may be a victim of identity theft or fraud. You do not need proof of anything. Suspicion is enough. When you place an initial fraud alert, you are also entitled to a free copy of your credit report from each of the three bureaus during that 12-month period.

Extended Fraud Alert

This is for confirmed victims of identity theft. It lasts seven years, requires a police report or an FTC Identity Theft Report as proof, and removes you from most pre-screened credit card and insurance offer mailing lists for five years. An extended alert requires the lender to contact you directly before issuing any new credit. It also entitles you to two free credit reports from each bureau within the first 12 months.

Active Duty Alert

Designed specifically for military personnel on active deployment. It lasts one year, is renewable for the duration of deployment, and removes you from pre-screened credit offers for two years. It works the same way as an initial fraud alert in terms of requiring identity verification before new credit is issued.

FRAUD ALERT VS. CREDIT FREEZE: WHICH ONE DO YOU ACTUALLY NEED?

A fraud alert asks lenders to verify your identity. A credit freeze prevents lenders from accessing your credit report in the first place. No access means no new account, regardless of whether someone is impersonating you.

The FTC is clear on this: a credit freeze is the stronger protection. The fraud alert still allows your credit report to be accessed. The freeze does not.

That said, a freeze requires you to temporarily lift it whenever you apply for credit yourself. A fraud alert does not. The right choice depends on your situation.

Use a fraud alert when:

You lost your wallet, received a suspicious breach notice, or want an added layer of caution without restricting your credit access. The initial one-year alert is quick to place and covers most everyday risk scenarios.

Use a credit freeze when:

Your Social Security number was exposed in a breach, you have confirmed identity theft, or you want the strongest possible barrier against new accounts being opened in your name. A freeze costs nothing and does not affect your credit score.

You can have both at the same time. They are not mutually exclusive.

HOW TO PLACE A FRAUD ALERT

Contact any one of the three major credit bureaus — Equifax, Experian, or TransUnion — online or by phone. The bureau you contact is required by law to notify the other two, so you only need to do this once.

For an extended fraud alert, have a police report or an FTC Identity Theft Report ready before you start. The FTC report can be completed online at no cost.

THE PART A FRAUD ALERT DOES NOT COVER

A fraud alert protects your credit file. It does nothing about the personal information already sitting on data broker and people-search sites, the information that made the fraud possible in the first place.

If a scammer had enough of your personal details to attempt fraud, that information came from somewhere. Often it is a combination of a data breach and publicly listed details on people-search sites: your address, phone number, relatives' names, employer. A fraud alert responds to that exposure. Removing the underlying information reduces the likelihood of it happening again.