What Is a Fraud Alert and How Does It Protect You?

July 2026

Home › Credit Building & Protection › Credit Monitoring & Protection › What Is a Fraud Alert and How Does It Protect You?

A fraud alert is one of the most underused free tools in personal finance — and one of the most misunderstood. Most people learn about it after something has already gone wrong, when they should have had one in place weeks earlier. Others place one assuming it will stop identity theft, without realizing there's a critical limitation buried in how the tool actually works: a fraud alert asks lenders to verify your identity before approving new credit. It does not require them to.

That single distinction — asks versus requires — determines when a fraud alert is the right choice and when a credit freeze is the only adequate protection. Understanding how a fraud alert credit protection tool actually functions, what it stops, what it doesn't, and how to choose among the three available alert types is what this guide is designed to provide. The goal is not just to explain what a fraud alert is — it's to give you a clear decision framework for whether it's the right tool for your specific situation right now.

What a Fraud Alert Actually Does — and Doesn't Do

A fraud alert is a notation placed on your credit file at the three major bureaus — Equifax, Experian, and TransUnion — that signals to lenders reviewing your file that your personal information may be compromised. When a lender pulls your credit report and sees a fraud alert, they are instructed to take reasonable steps to verify that the person applying for credit is actually you before proceeding.

In practice, "reasonable steps" typically means a phone call. The lender calls the number you provided when placing the alert and asks you to confirm you're applying for credit. If you answer and confirm, the application proceeds normally. If you don't answer — or if the lender decides the alert verification step is too operationally burdensome — the process varies. Some lenders take the alert seriously and halt the application. Others treat it as a soft flag and proceed anyway.

This is the honest limitation that almost every article on fraud alerts underemphasizes. Unlike a credit freeze — which legally prevents lenders from accessing your file at all — a fraud alert has no hard enforcement mechanism. It is a request, not a restriction. The FCRA requires lenders to use "reasonable policies and procedures" when a fraud alert is in place, but what constitutes "reasonable" is not tightly defined, and compliance varies across lenders. For proactive protection against new account fraud — the most common form of credit-based identity theft — a freeze provides a legally enforced block. A fraud alert provides a procedural speed bump.

What a fraud alert does reliably well: it slows down fraudulent applications that rely on instant approval processes, flags your file to conscientious lenders, entitles you to a free credit report from each bureau upon placement, and in the extended version, provides a seven-year documented record that you were a confirmed identity theft victim. For many situations, that level of protection is adequate. The question is whether your situation is one of them.

The Three Types of Fraud Alerts: A Decision Framework

The FCRA provides three distinct fraud alert types, each designed for a different situation. Choosing the right one is not complicated once you understand what each is for — the structure maps directly to your circumstances.

Initial Fraud Alert — For Anyone at Elevated Risk

An initial fraud alert lasts one year, is available to anyone, requires no documentation beyond identity verification, and can be renewed indefinitely at no cost. It is the appropriate choice when you have reason to believe your personal information may have been compromised — a data breach notification, a suspicious transaction, a piece of mail that suggests someone may be using your address — but you have not confirmed active identity theft and you still need normal access to credit during the alert period.

The initial alert is also the right starting point if you've never had a fraud alert before and you're placing one proactively after a breach notification. It entitles you to a free copy of your credit report from each of the three bureaus within the 12-month alert period — a meaningful added benefit that makes it worth placing even in lower-risk situations where you want a record of your protective action and an additional free report pull.

Extended Fraud Alert — For Confirmed Identity Theft Victims

An extended fraud alert lasts seven years and is available only to people who have been confirmed victims of identity theft. To place an extended alert, you need to provide an identity theft report — either an FTC identity theft report from IdentityTheft.gov or a police report documenting the theft. The extended alert entitles you to two free credit reports per year from each bureau during the seven-year period and requires lenders to contact you using the specific contact information you provide before approving any new credit.

The extended alert also triggers two additional FCRA protections: businesses must remove your name from prescreened credit and insurance offers for five years, and the seven-year duration creates a long-term documented record on your credit file that you were a victim, which provides context for lenders reviewing your history during that period. If you've experienced confirmed identity theft, the extended alert is the appropriate choice — not because it's stronger than a freeze in terms of blocking access, but because it provides the documented record, the enhanced free report access, and the duration that your situation requires.

Active Duty Alert — For Military Members on Deployment

An active duty alert lasts one year and is available to active duty military members during periods of deployment. It functions similarly to an initial fraud alert — lenders are instructed to verify identity before approving credit — with the added benefit that your name is removed from prescreened credit and insurance offer lists for two years. This is particularly valuable for service members who cannot easily respond to lender verification calls from overseas deployment and who face elevated identity theft risk due to well-documented patterns of fraud targeting military personnel during active duty periods.

Active duty alerts can be renewed annually throughout the deployment period. Military members who want stronger protection — particularly if they will have limited phone access during deployment — should consider a credit freeze rather than relying solely on an alert whose verification mechanism depends on phone accessibility.

Fraud Alert vs. Credit Freeze: Choosing the Right Tool

The fraud alert versus credit freeze decision is the one that matters most in practice, and most articles treat it too briefly. Here is the complete comparison so you can make the right choice for your situation.

How they differ mechanically: A fraud alert is a flag that asks lenders to verify your identity — lenders can still access your credit file and, with sufficient verification, approve new credit. A credit freeze blocks lender access to your credit file entirely — no lender can pull your report for a new account application unless you first lift the freeze. The freeze is a hard restriction. The fraud alert is a soft request.

How they differ operationally: A fraud alert requires contacting only one bureau — that bureau notifies the other two. A credit freeze requires contacting all three bureaus separately. Both are free. The fraud alert is faster to place (one contact) but weaker in protection. The freeze takes longer to set up (three contacts) but is legally enforced and provides complete protection.

How they differ in impact on credit access: A fraud alert does not prevent you from applying for credit — it adds a verification step that most lenders handle within a few minutes. A credit freeze prevents new credit applications until you lift the freeze, which requires logging into each bureau portal and takes effect within minutes online. For someone who applies for credit regularly or needs frictionless access, a fraud alert is less disruptive. For someone in a stable maintenance mode who rarely applies for new credit, the freeze's minimal friction makes it the clearly stronger choice.

The detailed comparison of how a credit freeze works — including the step-by-step placement process at all three bureaus, how to lift it for applications, and what it doesn't protect against — is covered in full in that dedicated guide. The short version: if preventing new account fraud is your goal and you don't need regular credit access, the freeze is the right tool. If you need active credit access and want a layer of protection, the fraud alert is appropriate — ideally alongside a monitoring system, not as a standalone measure.

How to Place a Fraud Alert: Step by Step

Placing a fraud alert is one of the simplest protective actions in personal finance. Unlike a freeze, you only need to contact one bureau. That bureau is legally required to notify the other two. The entire process takes approximately five minutes online.

Online — the Fastest Method

Contact any one of the three bureaus through their fraud alert portal. All three offer online placement. Equifax: equifax.com/personal/credit-report-services/credit-fraud-alerts. Experian: experian.com/fraud/center.do. TransUnion: transunion.com/fraud-alerts. Create or log into your account, navigate to the fraud alert section, verify your identity, and submit the request. You will be asked for a phone number — this is the number lenders will use to contact you for verification when the alert is triggered. Use a number you reliably answer. The bureau confirms placement by email and notifies the other two bureaus, which add the alert to their files automatically.

By Phone

Equifax: (888) 298-0045. Experian: (888) 397-3742. TransUnion: (800) 680-7289. Phone placement is slower but useful if you prefer not to create online accounts or if the online portal is unavailable.

By Mail

Send a written request to any one bureau including your full name, address, Social Security number, date of birth, and a copy of a government-issued ID. Include the phone number you want used for lender verification. Allow up to three business days for processing. The CFPB resource linked in the government resources section below includes mailing addresses for each bureau's fraud alert department.

For Extended Alerts

Extended fraud alerts require an identity theft report — either an FTC report generated at IdentityTheft.gov (free, takes ten minutes) or a police report. Include a copy of the report with your request. Extended alerts can be placed by mail or online at bureaus that accept supporting documentation through their portal. The FTC recommends starting with IdentityTheft.gov, which also generates a personalized recovery plan that walks through every step of the identity theft resolution process beyond just the alert placement.

What Happens After You Place a Fraud Alert

Once your fraud alert is active, you receive a free credit report from each of the three bureaus. Pull all three immediately and review them for any accounts, inquiries, or personal information that shouldn't be there. This review is not optional — it's the point of the alert placement. You've flagged your file as potentially compromised; the next step is confirming what, if anything, is already wrong.

Knowing exactly what to look for during that post-alert review — and having a structured process for catching errors across all three bureau files — makes the difference between a review that surfaces problems and one that misses them. The full line-by-line framework for how to do a credit checkup and fix report errors covers what each section of a credit report should show, what unexpected entries indicate, and how to document anything that needs to be disputed.

After the initial review, establish the monitoring cadence that matches your current risk level. A fraud alert signals elevated risk — meaning your review frequency should reflect that. The situation-based schedule in the article on how often you should check your credit report maps the post-breach and elevated-risk cadence: weekly reviews for the first 90 days, then monthly, then a return to quarterly once the risk window closes.

Building the Complete Protection Layer

A fraud alert is most effective as one layer of a coordinated protection system — not as a standalone measure. The complete defensive layer for most consumers combines: a fraud alert or credit freeze at all three bureaus (depending on access needs), continuous credit monitoring for real-time change alerts, a regular review schedule for full report inspection, and a clear process for acting on anything unusual.

On the monitoring side, the decision between free and paid tools is worth evaluating clearly once a fraud alert is in place. The comparison in free vs paid credit monitoring covers what each tier provides — particularly the tri-bureau coverage and identity theft insurance that paid services add, which become more relevant in elevated-risk situations like those that typically prompt fraud alert placement in the first place.

For the continuous monitoring component of the system, the detailed evaluation of whether Credit Karma is worth using for credit monitoring covers where its two-bureau alert coverage is adequate for ongoing detection and where the gaps are — relevant for anyone building their monitoring stack in parallel with fraud alert placement.

When the review process uncovers something that needs to be corrected — an unauthorized account, an error introduced during the period your information was compromised, or an item that doesn't match your records — the step-by-step guide on how to dispute a credit report error with the bureaus covers the furnisher-and-bureau simultaneous dispute strategy that resolves errors more reliably than bureau-only submissions.

Frequently Asked Questions

Does a fraud alert hurt your credit score?

No. A fraud alert has zero impact on your credit score in either direction. It is a notation on your credit file that is visible to lenders when they pull your report, but it is not factored into any credit scoring model. It does not reduce your score, does not affect your existing accounts, and does not prevent current creditors from accessing your file for account management purposes. The only operational change is the added verification step for new credit applications — which may slow instant-approval processes but does not damage your credit profile.

Do I need to contact all three bureaus to place a fraud alert?

No — this is the key operational advantage of a fraud alert over a credit freeze. You contact only one bureau. That bureau is legally required under the FCRA to notify the other two, which then place the alert on their files automatically. You can choose any of the three bureaus as your first contact. Most people choose whichever bureau they already have an online account with, since the online placement process is fastest. The other two bureaus will confirm the alert placement through their own notification processes within a day or two.

How is a fraud alert different from a credit freeze?

The fundamental difference is asks versus requires. A fraud alert asks lenders to verify your identity before approving new credit — lenders can still access your file and, with sufficient verification, proceed with an application. A credit freeze restricts access to your file entirely — lenders cannot pull your report for a new account application until you lift the freeze. A fraud alert requires contacting one bureau. A freeze requires contacting all three separately. A fraud alert is less disruptive to the credit application process. A freeze provides legally enforced protection. For proactive prevention when you don't need regular credit access, the freeze is the stronger tool. For elevated-risk periods where you still need credit flexibility, the fraud alert is more appropriate.

Can I have both a fraud alert and a credit freeze at the same time?

Yes. A fraud alert and a credit freeze operate at different levels and do not conflict. A freeze blocks file access entirely. A fraud alert flags the file for additional verification if the freeze is lifted and a lender accesses the report. Having both in place means that if you lift the freeze temporarily for an application, the fraud alert provides an additional verification layer during that window. For people in active identity theft recovery, running both simultaneously is a reasonable approach — the freeze as the primary block and the alert as the secondary protection during any necessary periods when the freeze is lifted.

What should I do immediately after placing a fraud alert?

Pull your free credit reports from all three bureaus immediately — you're entitled to them upon alert placement. Review each report for accounts you don't recognize, hard inquiries you didn't authorize, balances that don't match your records, and personal information that doesn't reflect your history. Document any irregularities. If you find unauthorized accounts or inquiries, initiate disputes with both the bureau and the data furnisher simultaneously. If the unauthorized activity is confirmed as identity theft, file a report at IdentityTheft.gov to generate an official identity theft report and to upgrade your fraud alert from initial to extended — which provides seven years of protection instead of one.

Can I remove a fraud alert before it expires?

Yes. Fraud alerts can be removed at any time by contacting the bureau that placed it — the same bureau you originally contacted. Initial fraud alerts last one year but can be removed earlier if your risk level changes or if you've moved to a credit freeze instead. Extended fraud alerts last seven years but can also be removed earlier upon request with identity verification. There is no penalty for early removal and no impact on your credit from either placing or removing a fraud alert at any point.