What to do if…
your credit file is suddenly frozen or locked and you did not request it
Short answer
Assume identity theft until proven otherwise: get your credit reports from AnnualCreditReport.com, confirm whether there’s a security freeze or credit lock with the bureaus, and file an IdentityTheft.gov report if anything looks unauthorized.
Do not do these things
- Don’t “unfreeze” using links from unexpected emails/texts — go directly to official bureau pages.
- Don’t keep submitting new credit applications to “see if it works.”
- Don’t give your Social Security number or document images to anyone who contacted you first.
- Don’t pay “credit repair” or “freeze removal” services for urgent steps you can do yourself for free.
What to do now
-
Write down what happened and who told you it was frozen/locked.
Note the date/time and whether it was a bank, lender, landlord, employer screening, or your own credit app. If it’s blocking an application, ask which bureau they used so you can focus your calls. -
Get your credit reports from the official site and scan for red flags.
Use AnnualCreditReport.com to pull reports and look for:- accounts you don’t recognize
- hard inquiries you didn’t authorize
- new addresses/phone numbers/employers you didn’t add
-
Confirm what’s on your file: a security freeze or a credit lock (and when it was placed).
Contact the three nationwide credit bureaus and ask:- Is there a security freeze on my file? (A freeze is a legal right and is free to place/lift.)
- Is there a credit lock on my file? (A lock is typically a product feature and may involve an online account.) If you didn’t place it, follow the bureau’s identity verification/account recovery steps so you regain control.
-
If anything on your reports is unauthorized, create an IdentityTheft.gov report and save it.
The report/plan helps you document what happened and is often accepted by creditors and bureaus when fixing identity-theft issues. -
Place a fraud alert to add an extra verification layer.
You can place an initial (or extended) fraud alert by contacting one of the three bureaus; the bureau you contact must notify the other two. Fraud alerts are free and tell lenders to take extra steps to verify it’s really you. -
Contact the fraud departments of any companies showing unauthorized accounts or applications.
Ask them to stop processing, close/flag the account as identity theft, and tell you exactly what they need from you. Keep a log (date/time/person/summary). -
If you’re worried about bank-account fraud too, check specialty reporting.
Consider requesting and/or freezing your ChexSystems consumer file (separate from credit reports). Some people also freeze with Innovis as an extra layer.
What can wait
- You don’t need to buy monitoring today to handle an unexpected freeze/lock.
- You don’t need to “fix your score” right now — stopping misuse and correcting records comes first.
- You can wait to decide about filing a local police report unless a creditor/bureau specifically requires it for your case.
Important reassurance
Finding a freeze/lock you didn’t request is unsettling, but it also gives you a clear next move: verify what’s on your reports and regain control of the freeze/lock accounts. Once you know whether there are unauthorized accounts or inquiries, the path forward gets much clearer.
Scope note
This is a first-step stabilization guide. Cleaning up fraudulent accounts and disputes can take follow-up with each bureau and each creditor that reported the information.
Important note
This guide is general information, not legal advice. Processes vary by state and by company. If you can only do two things right now, do these: pull your reports from AnnualCreditReport.com, and contact the bureaus directly to confirm (and regain control of) any freeze/lock.
Additional Resources
- https://consumer.ftc.gov/articles/credit-freezes-and-fraud-alerts
- https://www.identitytheft.gov/Steps?scroll=true
- https://www.annualcreditreport.com/index.action
- https://www.annualcreditreport.com/protectYourIdentity.action
- https://www.usa.gov/identity-theft
- https://www.chexsystems.com/security-freeze/place-freeze
- https://www.innovis.com/personal/securityFreeze