The freeze she forgot

The people in these case histories are composites, built from real patterns. Names and details are invented; the dates and the sequence are how it actually goes.

In September 2024 Renata Oyelaran's employer was breached, and she did what the letter told her: froze her credit everywhere she could find a freeze button. Five companies. She wrote the PINs on an index card and put it in a drawer.

The timeline

2 April 2026. Pre-approval in San Antonio. The loan officer orders the tri-merge and gets three frozen files. Renata lifts them online in an hour. Good.

6 April. The lender's identity-verification step fails. No reason given beyond "unable to verify." The loan officer assumes a typo and resubmits. Fails again.

9 April. Renata calls me. I ask what she froze in 2024. She reads the index card: Experian, Equifax, TransUnion, Innovis, LexisNexis. Two of those are the vendor's identity sources, and neither had been lifted, because nothing on the tri-merge told her they existed in that step.

9 April, afternoon. Temporary lifts at LexisNexis and Innovis, dated to cover the following week.

10 April. Verification clears. The lock, which had eight days left, holds.

14 April. Freezes back on at all five, automatically, when the windows closed.

What the loan officer saw

A borrower whose file said frozen, then not frozen, then a verification failure that looked like fraud. He'd never been told which companies his own vendor read. Tess wrote him the list, more or less, this April.

What couldn't be fixed

Eight days of an eleven-day lock. It held. It was closer than anyone liked.

The morning after

Renata rewrote the index card as a table: company, PIN, lift URL, and a column headed before any application. She laminated it. My grandmother would have approved of the lamination and questioned the drawer.