There's a French expression my mother used for a certain kind of caution: fermer la porte à clé et perdre la clé — locking the door and losing the key. She said it about my grandfather, who froze his credit at all three bureaus in 2018, felt wonderful about it, and then could not buy a car eighteen months later because he'd written the PINs on an envelope that went out with the recycling.
The security freeze is the best tool in this whole business. I want to be clear about that before I spend the rest of this article on the ways it bites.
What it is
A freeze tells a consumer reporting agency not to release your file to anyone trying to open new credit in your name. Since 2018 it's a federal right: free to place, free to lift, free to remove, at every bureau. Placed online or by phone, it has to be in effect within one business day. Lifted online or by phone, it has to come off within an hour. If a bureau mishandles it, the Fair Credit Reporting Act is your remedy, not a customer-service script.
It's not a lock. A lock is a product, governed by terms of service. A freeze is a statute. When the two look the same in the app, choose the one you can sue over.
What it doesn't do
It doesn't touch anything already on your file. It doesn't stop your existing creditors from reporting, or reviewing accounts you already hold. It doesn't block a collector, a court, or a bureau processing your dispute. And a freeze at one company is a freeze at one company: the three bureaus, Innovis, LexisNexis and ChexSystems each need their own.
The week before
Here's where my grandfather comes in. A frozen file blocks the lender's pull too — and not just the tri-merge. Mortgage verification vendors read LexisNexis and sometimes Innovis, and a freeze there stops the identity check cold, which lands on your loan as a "condition" nobody can explain.
So, the week before you apply, ask the loan officer two things: which companies their vendors pull, and on what date. Then lift the freeze at each of those companies for a window — most let you set a start and end date — that covers the pull with a few days on either side. Keep the PINs somewhere that isn't the recycling. When the window closes, the freeze comes back on its own.
Freeze after the loan funds, not before the application. Freeze the small bureaus too, because they're the ones nobody thinks to lift and the ones most likely to hold a stray address.
Next in the series: the three big bureaus, one at a time. Starting with Experian, and the file most lenders read first.
Sources
- Fair Credit Reporting Act, 15 U.S.C. § 1681c-1 — security freezes — Free placement and removal; one business day to place electronically, one hour to lift
- CFPB — Your rights to request, dispute and freeze
- Experian Freeze Center
- Equifax credit freeze
- TransUnion credit freeze
- LexisNexis consumer security freeze
- Innovis security freeze
Every statutory citation in this article was checked against the source listed before publication. Nothing here is legal advice; if your situation has legal consequences, talk to a licensed attorney in your state.
