Updated. After the Equifax hack and many subsequent hacks that affected so many Americans, there is renewed interest in the various ways you can monitor and/or protect your credit report. Below is a summary of the options available.
Free credit reports. Everyone should take advantage of the free copy of their credit reports (Equifax, Experian, TransUnion) and their bank report (ChexSystems, TeleCheck) available every 12 months. I would also add LexisNexis to the ones I personally check. This free access is mandated by the government. Here again is my Big List of Free Consumer Reports.
Free credit monitoring. There are many offers nowadays for free credit scores and partial snapshots of your credit report. These are provided by private services, either in partnership with or as a subsidiary of the major credit bureaus. In addition, some offer credit monitoring, where they will e-mail or text you when a significant change occurs (new accounts, etc). I choose to take advantage of this, knowing it is in exchange for some ads. Here’s a recipe for credit monitoring coverage across all three major bureaus:
- TransUnion: CreditKarma.com or CreditSesame.com
- Equifax: CreditKarma.com
- Experian: FreeCreditScore.com
Free credit locks. The credit bureaus now have a feature that allows you to instantly “lock” and “unlock” the credit report of a specific credit bureau and thus prevent access. These are nice because you can unlock it for a day or so when you need, but otherwise keep it locked. Again, if they are free, they are probably supported by ads and/or upgrades (which is fine by me, I just decline the occasional upsell and it stays free).
- TransUnion: TrueIdentity (free ongoing)
- Equifax: Equifax Lock & Alert (free ongoing)
- Experian: Experian IdentityWorks Plus (30-day free trial then $9.99/month).
Free Fraud Alerts. If you are concerned that your personal information is compromised (you should be!), you can contact any one of the three major credit bureaus and ask for a “Fraud Alert” to be placed on your credit report. This supposedly lets all potential creditors know that you are at high risk and that they need to do extra identity verification. Be sure that they have your current contact information as they will call you every time someone tries to check your credit report.
(Update: I’ve had a Fraud Alert on my account for over 12 months now, and I have not seen any special precautions taken despite applying for multiple credit cards during that time. No verification phone calls, no snail mail letters, etc. I wouldn’t depend on a Fraud Alert to stop any criminal activities.)
This is free of charge. It will expire automatically after 1 year but you can call in and renew by submitting a new request within 30 days of your current alert expiring. If you are a documented victim of identity theft, you can ask for an Extended Fraud Alert of up to 7 years. By law, you should only need to contact one of them, and they are supposed to contact the other two companies and thus have the Fraud Alert active on all three accounts. Taken from FTC.gov:
- TransUnion Fraud Alert: 1-800-680-7289
- Equifax Fraud Alert: 1-888-397-3742
- Experian Fraud Alert: 1-888-766-0008
Credit Freezes. This is the most comprehensive measure to take. Once you initiate a credit freeze, it will stay on there permanently in most states (or at least 7 years in others). In order for a business to check your credit report, you must manually “unfreeze” your credit temporarily. As of 9/21/18, this should be free by law at all three credit bureaus. You must contact each credit bureau separately.
- TransUnion Freeze: 1-888-909-8872
- Equifax Freeze: 1-800-349-9960
- Experian Freeze: 1-888-397-3742
In addition, the same law requires that free credit freezes also be made available for children under 16 years old. (I would warn folks that you have to send in multiple sensitive personal documents like birth certificate and possibly notarized forms to verify your kids’ identities. Makes sense but a lot of work.)
I decided to initiate a free 90-Day Fraud Alert to try it out (through Equifax since they should do the extra work).
I already access my credit reports/ChexSystems/LexisNexis every 12 months, and I continuously monitor my own credit using the services listed above. Here’s a sample free alert I got from CreditKarma:
I then cross-referenced with a similar free credit monitoring alert from CreditSesame (TransUnion) that included more info like date and card issuer:
Bottom line. That’s the menu; I would start at the top and pick what works for you. I tend to open a relatively high number of credit and bank accounts throughout the year, often for a time-senstive promotion, so I choose to decline the extra hassle and cost that comes with a credit freeze. I use the free monitoring services listed above instead to get an e-mail whenever a new credit check occurs or a new line of credit is reported. If you rarely get new accounts or simply feel otherwise, go more extreme.
The Best Credit Card Bonus Offers – October 2024
Big List of Free Stocks from Brokerage Apps
Best Interest Rates on Cash - October 2024
Free Credit Scores x 3 + Free Credit Monitoring
Best No Fee 0% APR Balance Transfer Offers
Little-Known Cellular Data Plans That Can Save Big Money
How To Haggle Your Cable or Direct TV Bill
Big List of Free Consumer Data Reports (Credit, Rent, Work)
i’m with you on credit freezes, we need more regulation on who gets to keep all your personal info, whether it’s equifax or beenverified and a dozen of such copy cats.
I recently learned that my credit union provides ongoing free fraud alerts. So in addition to signing up with the Equifax’s 90 day (which supposedly contacts the other 2) I now I have a buffer with a 3rd party to avoid having to sign up again when my 90 days expire. Since I open accounts regularly for promos, freezing is not a viable option for me. Thus, in addition to monitoring my open card accounts, I have gone to credit card websites and placed fraud alerts on each card.
I recently learned that if fraud does happen the consumer is only obligated if at all for a minimal amount. The key is to look over statements and check for small amounts posted. Since this breach is so large , banks and credit card companies systems are geared to trigger major purchases. However if a thieve places 1 million small purchases he /she can slip by and become a wealthy thieve!!!
Of course Jonathan is always much too gentle and forgiving when it comes to dealing with a menace to society like Equifax. How about putting your energy into demanding that the corporate charter of Equifax be revoked and dismantle the corporation all together. Only the State Attorney General of Georgia can do that. His name is Christopher Carr. His number is 404-656-3300. Unlike the Dept. of Anything_But_Justice in DC an actual person will pick up the phone.
I’ve signed up for TransUnion’s TrueIdentity, which offers their Credit Lock service. I’m wondering if it’s different than a credit freeze. Here’s what TransUnion says about Credit Lock:
Creditors, lenders (when you apply for a loan), landlords and employers can request and view your credit report.
Locking your TransUnion Credit Report blocks others from looking at it, which may serve as a critical step in preventing an identity thief from applying for credit in your name.
So my question is: Is this the same as a credit freeze, or different?
I would refer you to Brian Krebs’ reporting on this issue (Krebs is essential reading if you are at all interested and/or concerned about cybercrime, which everyone should be these days):
https://krebsonsecurity.com/2017/09/the-equifax-breach-what-you-should-know/
Q: I see that Trans Union has a free offering. And it looks like they offer another free service called a credit lock. Why shouldn’t I just use that?
A: I haven’t used that monitoring service, but it looks comparable to others. However, I take strong exception to the credit bureaus’ increasing use of the term “credit lock” to steer people away from securing a freeze on their file. I notice that Trans Union currently does this when consumers attempt to file a freeze. Your mileage may vary, but their motives for saddling consumers with even more confusing terminology are suspect. I would not count on a credit lock to take the place of a credit freeze, regardless of what these companies claim (consider the source).
The initial fraud alert can be renewed after 90 days. Can you continually renew it, or is it a one-time thing? I’m not able to find any documentation on that.
Yes, you can keep renewing it as often as you’d like.
Under the new law, fraud alerts will last one year. If a person is a victim of identity theft, they will still be able to extend it for 7 years. So was written by the personal finance columnist in the Oregonian newspaper yesterday.
Thanks, I think I read that as well. However, I’ve had a fraud alert on my accounts for a full year now and have never had anybody question any of my multiple new credit card applications. Makes me question the value of a Fraud Alert.
The new Experian Identity Works service at $9.95 or $19.95 per month will allow you to lock your Experian report.
Thanks for the tip, I have added Experian IdentityWorks to the list.
Jonathan, long time reader, first time poster! Would be curious to hear more about what some of the possible negative effects are for individuals due to a breach like what happened with Equifax. It may be “obvious” but I rarely see hard reporting on what can happen to you. So now someone has my social security number, so what? They have my last seven years of addresses… ok? Even my drivers’ license… maybe they will go pay my annual car registration or speeding tickets?! What can someone with bad intentions realistically do with this information or combinations of this information? Appreciate your insight!
That’s a good question. Some quick thoughts – They could basically impersonate you and do anything you might do. For example, (1) file a false tax return early and get the IRS refund sent to them, (2) file for Social Security or other governmental benefits and get that money sent to them, (3) borrow some money in your name and get the money sent to them. When applying for these things, they may ask ID verification questions online or by phone. If they know your old addresses and SSN, they can pass the ID checks. Now, you may not be liable for any or all of these things, but it could still be big hassle to unwind.
Very helpful post, thank you. I am still trying to sort out my strategy. I started filling out the free Transunion TrueIdentity and when it asked me for my cell phone number, I balked. Not in a mood to give another credit agency more personal info right now…
First of all, TransUnion probably already has it. As one of the Big 3… that’s why we’re in this mess! Second of all, you don’t have to give your primary cell number to them. I don’t think they’ll need to call you. There are also ways to get a free alternate number, including Google Voice.
Try giving a fake number or leaving it blank. I don’t think it matters for the process.
For people really interested in taking action you may want to consider:
https://www.legalist.com/equifax/
A solution to identity theft is to change authentication procedures so that our personal data is useless to criminals. Companies need to assume that our SSN, birthday, address, phone number, etc. is public info. Even if that means going back to paper and ink signatures.
How do you feel about identity theft insurance that you pay a monthly or yearly cost for?
I’m personally not a big fan of paying money for identity theft insurance. I can do most everything the firms can do myself with the free services listed above (by the way, Credit Sesame also offers free ID theft insurance).
I did a quick internet search and didn’t see this anywhere. Might be worth an article…
It seems like you can get a free credit report from each company every 3 months, 9 a year! How? Put a fraud alert on your account. The confirmation from Experian says …
“You can request a free copy of your credit report…utilizing the report number contained on this letter. If you extend your alert for additional periods of time, the report number…will be reactivated to allow you to access an additional free report.”
I’m surprised this is more widely posted.
Here is an additional way your privacy IS compromised via https://medium.com/@philipn/want-to-see-something-crazy-open-this-link-on-your-phone-with-wifi-turned-off-9e0adb00d024
AT&T, Verizon and other cell carriers are selling your demographics and your movements (literally) “US telcos appear to be selling direct, non-anonymized, real-time access to consumer telephone data to third party services?—?not just federal law enforcement officials?—?who are then selling access to that data.”
Users “report that AT&T’s opt-out process doesn’t do anything here. Verizon’s “opt-out” pages also may not do anything to prevent this, either .”
“…these telco partner services?—?and/or customers of those services?—?may be able to track and/or profile using just a phone number and the authentication bits (e.g. ZIP code).”
I disagree with your bottom line comment. The bottom line is: that these thugs and parasites who have have endangered half of the country FOREVER have not been prosecuted, meaningfully fined, had their corporate charters revoked for being a menace to society or anything else. As always the criminal elite and their lapdogs at all levels of government are above the law.
I think that overall, both individuals and the government need to start protecting personal data more seriously. Personal data is pretty much the most valuable thing that most of us give away without a thought all the time.