How To Protect My Credit From Identity Theft | Lock It Down

Freeze your credit, lock your accounts, and check your reports so crooks can’t open new debt in your name.

Identity theft is messy because credit damage shows up late. A thief can apply today, and you might not notice until a bill or a denial lands weeks later. The fix is to put friction in front of new credit, then tighten the few accounts that can be used to reset the whole thing.

This is a step-by-step playbook you can finish in one sitting. It leans on free tools, clear habits, and quick checks you can keep up with.

How Credit Theft Usually Starts

Most “new account” fraud happens after your personal data gets paired with one more piece of proof, like a password, a one-time code, or a stolen letter. Data leaks feed that pipeline. So do fake bank texts, stolen wallets, and mail theft.

Once the thief has enough, they try to open a credit card, a buy-now-pay-later account, or even a phone line. If it works, the first visible mark is often a hard inquiry, then a new account on your report.

How To Protect My Credit From Identity Theft With Free Tools

If you do one action, place a credit freeze. It stops most lenders from pulling your file, which blocks many new-account applications.

Freeze Your Credit At All Three Bureaus

You need a freeze with Equifax, Experian, and TransUnion. Each bureau holds its own file. Keep the freeze PINs in a secure place you can reach when you apply for credit.

When you need new credit, lift the freeze for a short window, finish the application, then re-freeze. That rhythm keeps your file shut most days.

Apply For Credit Without Leaving Your File Open

When you’re ready to apply for a card, loan, or apartment, ask which bureau the company will use. Lift the freeze only for that bureau and only for the dates you need. If the lender can’t pull the file, ask if they can re-run the check after you lift it instead of leaving the window wide open.

After approval or denial, re-freeze the same day. Put a note on your calendar so you don’t forget. This single habit turns a freeze from a one-time task into a lasting shield.

Check Your Reports Using The Official Portal

Your credit report is your early-warning system. You’re hunting for surprises: inquiries you don’t know, accounts you didn’t open, or a name variation you never use. Get your reports at Annual Credit Report, then save copies so you can compare later.

Turn On Alerts Where Money Moves

Bank and card apps can ping you for logins, purchases, new payees, and profile changes. Turn on the alerts that would ruin your day if you found them late. Use email and push alerts, and make sure the email tied to those alerts is locked down too.

Know The Difference Between A Freeze, An Alert, And A Lock

A freeze is a legal block that limits access to your report for new credit checks. A fraud alert adds a note that lenders should take extra steps to confirm identity, yet lenders can still pull your file. A credit lock is a bureau feature that works like a freeze in practice, but it runs under that bureau’s terms, not the freeze rules.

For most people, a freeze plus routine report checks is the cleanest setup. If you’re dealing with confirmed identity theft, an extended fraud alert can add an extra layer of friction during cleanup.

Lock Down The Accounts That Can Reset The Whole Thing

Credit freezes block new accounts, but thieves also go after your existing accounts. Email is the big one, because password resets flow through it.

Harden Your Email First

Use a long password that you don’t use anywhere else. Add multi-factor authentication. If your provider offers an authenticator app or a hardware token, pick that over text codes. Text codes can be stolen through SIM swap tricks.

Use Different Passwords Without Losing Your Mind

A password manager lets you use a different password for each site. That way, one breach doesn’t spill into your bank, your email, and your shopping accounts. Lock the manager with a device passcode that isn’t “1234” and don’t share it.

Add A Transfer PIN With Your Mobile Carrier

If a thief steals your phone number, they can catch text codes and reset logins. Many carriers let you set a transfer PIN (sometimes called a port-out PIN) that must be given before your number can move. Call your carrier or use the account app to add it.

Keep Your Personal Data From Piling Up In Public Places

You can’t stop each leak, but you can reduce what’s easy to grab and reuse.

Trim Old Accounts And Saved Payment Details

Old shopping accounts, unused apps, and dormant subscriptions can leak data. Close what you don’t use. Remove saved cards from sites you rarely visit. Fewer stored details means less to steal.

Handle Mail Like It Matters

Mail theft still fuels fraud. If you travel, pause mail or arrange secure pickup. When you move, update contact info directly with banks and lenders. A strange mailing detail on your credit report is often a clue that someone tried to redirect bills.

Be Choosy With Your Social Security Number

Don’t carry your Social Security card. When a form asks for your SSN, ask if another identifier works. When you must share it, note who asked and the date, so you’re not guessing later.

Table: Credit Protection Moves And What Each One Stops

Use this table to match each action to the kind of fraud you want to prevent or catch. A freeze blocks many new accounts. Alerts and login hardening cut down takeovers.

Action	What it blocks or catches	Good habit to pair with it
Credit freeze (all three bureaus)	Many new credit accounts	Lift only for short windows, then re-freeze
Routine credit report checks	New inquiries, new accounts, odd names	Save report PDFs so changes stand out
Bank and card alerts	Unusual spending, new payees, profile edits	Use push plus email alerts for the same event
Email multi-factor authentication	Password resets hijacked through inbox access	Prefer authenticator app or hardware token over text codes
Password manager	Reuse-driven account takeovers	One different password per site, auto-filled
Mobile carrier transfer PIN	SIM swaps that steal text codes	Store the PIN off your phone in case it’s lost
Shredding sensitive paperwork	Dumpster and mail theft	Shred anything with account numbers or SSN
IRS IP PIN	Tax return fraud using your SSN	Keep the IP PIN in the same secure place as your freeze PINs

Set A Routine You’ll Stick With

Security routines fail when they feel like a second job. Keep yours small, then keep it steady.

Weekly: Five-Minute Money Sweep

Pick one day a week. Scan your bank and card transactions. If you see a tiny “test” charge, treat it as a warning shot and call the issuer.

Monthly: Credit Report Spot Check

Once a month, scan your reports for new inquiries and unfamiliar accounts. If you keep a freeze active, a new inquiry can be a red flag worth checking right away.

Anytime: Don’t Let A Text Drive Your Clicks

Scam messages try to rush you. If a text says it’s from your bank, don’t use the link inside the message. Open your bank app or type the known site URL yourself. The extra 10 seconds saves hours later.

If you ever need an official, step-by-step cleanup flow after identity theft, IdentityTheft.gov gives a report process and an action list you can print and follow.

Fix Report Errors Fast When Something Isn’t Yours

When your report shows an account you didn’t open, speed helps. Start by stopping fresh damage, then build a clean paper trail.

Contact The Lender First, Then Dispute

Call the lender tied to the account and say it’s fraud. Ask what they need to close it and what documents they can share, such as the application details. Then file disputes with the credit bureaus and with the company that reported the account. Keep copies of letters, emails, and reference numbers.

Know Your Rights Around Credit Reports

The rules around report accuracy, access, and disputes can help you get bad data removed. The CFPB credit reports and scores pages lay out how disputes work and what to expect while the bureaus verify information.

Table: If Something Looks Off, Do These Steps In Order

This checklist starts with actions that shut the door on new damage, then moves into cleanup.

Step	What to do	What to write down
1	Freeze credit at Equifax, Experian, TransUnion	Freeze PINs, date, and confirmation details
2	Change passwords for email and financial logins	Which accounts you changed and when
3	Pull your credit reports	Inquiry dates, lender names, account numbers shown
4	Call the lender tied to the suspicious account	Agent name, case number, next steps promised
5	File an identity theft report at IdentityTheft.gov	Report number and the action plan items
6	Send disputes to bureaus and the reporting company	Copies sent, mail tracking, and deadlines
7	Re-check reports after 30 and 60 days	What changed, what didn’t, and who you contacted

Add Extra Protection If A Breach Included Your SSN

If a breach exposed your Social Security number, thieves can try tax fraud in your name. The IRS Identity Protection PIN adds a check so a return can’t be filed without that PIN. The rules and signup steps are on the IRS IP PIN page.

Checklist To Keep Your Credit Safer Year-Round

Use this as your ongoing baseline. It stays short on purpose.

• Keep a credit freeze active at all three bureaus.
• Pull credit reports on a schedule and save copies.
• Turn on login and spending alerts on bank and card apps.
• Use multi-factor authentication on email and financial logins.
• Use a password manager for different passwords per site.
• Add a transfer PIN with your mobile carrier.
• Shred paperwork that shows account numbers or SSN.

Done right, these steps make new-account fraud far harder and shrink the time it takes you to spot trouble, which keeps cleanup smaller.