A comprehensive guide on fraud alerts: how they work and when to use them to keep your credit safe and secure.
Resumen de la guía
Una guía completa sobre alertas de fraude: cómo funcionan y cuándo usarlas para mantener su crédito seguro y protegido.
Marco
Análisis profundo
The Fair Credit Reporting Act establishes three types of fraud alerts: initial fraud alerts (1 year), extended fraud alerts (7 years), and active duty military alerts (1 year). Each type requires creditors to take reasonable steps to verify the applicant's identity before issuing new credit, though the specific verification requirements vary by alert type.
Initial fraud alerts can be placed by anyone and do not require proof of identity theft. You simply contact any one of the three bureaus, which is legally required to notify the other two within one business day. Extended fraud alerts require an Identity Theft Report filed with the FTC at IdentityTheft.gov and provide significantly stronger protections, including automatic removal from prescreened offer lists for five years.
Active duty military alerts are designed for service members deployed domestically or overseas. These alerts function similarly to initial fraud alerts but include automatic removal from prescreened offer lists. Service members can also designate a personal representative to manage their credit during deployment.
Contact any single bureau to place an initial fraud alert; the receiving bureau is legally required to propagate it to the other two. Equifax: call 888-298-0045 or visit equifax.com/personal/credit-report-services/credit-fraud-alerts. Experian: call 888-397-3742 or visit experian.com/fraud. TransUnion: call 888-909-8872 or visit transunion.com/fraud-alerts.
When placing the alert, you must provide a phone number where creditors can reach you for identity verification. Choose a number you consistently answer, as missed verification calls may result in denied credit applications. You can also provide an email address as a secondary contact method.
After placement, request your free credit report, which you are entitled to under FCRA Section 612(a) when placing a fraud alert. This is in addition to your annual free reports from AnnualCreditReport.com. Review the report immediately for any unauthorized accounts or inquiries that may have already occurred.
Under FCRA Section 605A, creditors must take 'reasonable steps' to verify the identity of any applicant whose credit file contains a fraud alert before opening a new account. For initial alerts, this typically means contacting the consumer at the phone number provided. For extended alerts, the verification requirements are more stringent.
The FTC and CFPB have noted that compliance with fraud alert verification varies among creditors. Some creditors have robust verification processes that include phone calls, additional documentation requests, and secondary identity questions. Others treat fraud alerts as informational rather than actionable, particularly for instant-approval products.
If a creditor opens an account without proper verification while a fraud alert is active, you have additional legal protections. Under FCRA Section 615(f), creditors who fail to verify identity in the presence of a fraud alert may be liable for damages. Document the timeline carefully if this occurs, as it strengthens your case in disputes and potential legal action.
Fraud alerts and credit freezes both protect against new-account fraud but work differently. A freeze blocks report access entirely; a fraud alert allows access but requires verification. The choice depends on your circumstances: freezes provide stronger protection but require active management, while alerts are easier to maintain but provide weaker barriers.
If you are actively applying for credit (mortgage shopping, auto loan, credit cards), a fraud alert is more practical than a freeze because you do not need to lift and reinstate it for each application. The verification call adds a step but does not block the application. For consumers not actively seeking credit, a freeze is the stronger option.
Security experts broadly recommend using both simultaneously. Place freezes at all three bureaus as the primary barrier and add a fraud alert as a secondary verification layer. If a freeze fails (due to an error or a temporary lift), the fraud alert provides a backup protection mechanism.
Initial fraud alerts expire automatically after one year. There is no automatic renewal notification from the bureaus. Set a calendar reminder to renew before expiration if you want continuous coverage. Renewal requires contacting a bureau again with the same process as initial placement.
Extended fraud alerts last seven years but can be removed early at your request. If the identity theft situation is resolved and you no longer need the alert, contact each bureau individually to request removal. Be aware that removing the alert also removes the prescreened offer opt-out that came with it.
You can upgrade from an initial fraud alert to an extended fraud alert at any time by filing an FTC Identity Theft Report and submitting it to a bureau. The extended alert replaces the initial alert and provides the additional protections, including seven-year duration, automatic prescreened offer removal, and two free reports per year from each bureau.
If a creditor opens an account without verifying your identity when a fraud alert is active, you have recourse under FCRA Section 615(f). Document the timeline: when the alert was placed, when the account was opened, and whether you received a verification call. This documentation is critical for dispute resolution and potential legal action.
File a complaint with the CFPB at consumerfinance.gov if a creditor ignores your fraud alert. The CFPB tracks complaints and uses aggregate data to identify systemic compliance issues. Individual complaints are forwarded to the company for response within 15 days. The CFPB has taken enforcement actions resulting in millions of dollars in penalties against creditors with poor fraud alert compliance.
You may also have a private right of action under the FCRA. Section 616 allows consumers to sue for willful noncompliance with fraud alert requirements, with potential statutory damages of $100 to $1,000 per violation, actual damages, punitive damages, and attorney's fees. Consult a consumer rights attorney if you believe a creditor systematically ignored fraud alert protections.
Resumen
Lista de verificación
Contact any one bureau to place a 1-year alert that automatically propagates to Equifax, Experian, and TransUnion.
Give a phone number you consistently answer for creditor verification calls required by the fraud alert.
Claim your additional free reports under FCRA Section 612(a) when placing the alert to check for existing fraud.
Calendar a reminder before the 1-year expiration date to renew the alert for continuous protection.
If identity theft has occurred, file an FTC report at IdentityTheft.gov to qualify for a 7-year extended alert.
Record dates and details if a creditor opens an account without verification to support CFPB complaints or legal action.
Preguntas frecuentes
No. Contact any single bureau, which is legally required to notify the other two within one business day. This is different from credit freezes, which must be placed individually at each bureau.
No. A fraud alert does not block credit access. It requires creditors to verify your identity, typically by calling the phone number you provided, before approving applications. Some creditors may delay approval until verification is complete.
Yes, and security experts recommend doing so. The freeze serves as the primary barrier blocking report access, while the fraud alert adds a secondary verification layer that activates if the freeze is temporarily lifted for a legitimate application.
When an initial fraud alert expires after one year, creditors are no longer required to verify your identity before issuing credit. The alert is silently removed with no notification. You must proactively renew it by contacting a bureau again.