A fraud alert is a flag that a person can place on their own credit report, through a credit bureau, requiring any lender that checks the file before extending credit to take extra steps to verify the applicant's identity. It is a protective tool most often used by someone who suspects they have been, or are at risk of becoming, a victim of identity theft, since it makes it harder for a fraudster using stolen personal information to successfully open new accounts in that person's name.
In the United States, a fraud alert requested with one of the three nationwide credit bureaus must generally be shared with the other two, so a consumer does not need to separately contact every bureau to have the alert apply broadly across their credit file. An initial fraud alert typically lasts about a year and can be renewed, while an extended fraud alert, available to confirmed identity theft victims who provide a supporting police report or similar documentation, can last significantly longer.
Fraud alert in plain terms
A fraud alert works like a note attached to a person's credit file that says, in effect, "before you approve any new credit in this name, call and confirm it's really them." It does not block new credit outright, the way a credit freeze generally does, but it adds a verification step that a legitimate lender is expected to follow and that a fraudster, who typically cannot answer a verification call as the real person, is far less likely to pass.
Fraud alert versus credit freeze
A fraud alert and a credit freeze serve a similar protective purpose but work differently. A credit freeze blocks lenders from accessing the credit file at all unless the consumer temporarily lifts it, offering stronger protection but requiring the consumer to actively manage lifting and reapplying the freeze whenever they genuinely want new credit. A fraud alert is generally lighter-touch, allowing lenders to still access the file and extend credit, but obligating them to verify identity more carefully first, which makes it a faster, lower-friction option for someone who still expects to apply for credit themselves in the near term.
When to place a fraud alert
- After a data breach notification naming the consumer's personal information as compromised.
- After noticing unfamiliar accounts, inquiries, or activity on a credit report.
- After a lost or stolen wallet, purse, or device containing sensitive personal or financial information.
- As a precaution for someone, such as an older adult, who may be at heightened risk of being targeted for identity theft.
Limitations of a fraud alert
A fraud alert relies on lenders actually following the verification instruction attached to the file, and while most mainstream lenders comply, it is not an absolute legal guarantee against new fraudulent accounts being opened. Consumers who want the strongest available protection, at the cost of some inconvenience when applying for legitimate new credit themselves, generally choose a credit freeze instead of, or in addition to, a fraud alert.
Requesting a fraud alert
A fraud alert can generally be requested online, by phone, or by mail directly with one of the major credit bureaus, and is typically free of charge, reflecting its status as a basic consumer protection tool rather than a paid service. Once an alert is active, a consumer applying for new credit themselves should expect lenders to contact them directly, often by phone, to confirm the application is genuine before it is approved, which can slightly slow down the approval process for the consumer's own legitimate applications during the period the alert is active.
Fraud alerts and ongoing monitoring
A fraud alert is often used alongside, rather than instead of, regularly reviewing one's own credit report and credit score for unfamiliar accounts or inquiries, since the alert reduces but does not eliminate the chance that a determined fraudster manages to open an account despite the extra verification step. Many identity theft recovery guides recommend placing a fraud alert as an immediate first response to a suspected compromise, while pursuing longer-term steps such as reviewing and disputing any fraudulent accounts that have already appeared.