Credit Monitoring and Freezes: What Is Worth Paying For

Freeze first

A security freeze blocks lenders from pulling your report, which stops almost all new-account identity fraud. It is free to place, free to lift temporarily, and free to remove, at each of Equifax, Experian and TransUnion.

Lifting takes minutes online when you need to apply for credit. Freeze children's files too where the bureaus allow it — child identity theft often goes undetected for years.

What monitoring is actually good for

Monitoring catches what a freeze cannot: fraud on existing accounts, address changes, hard inquiries where a freeze was lifted or a lender bypassed it, and public record entries.

Free monitoring from your bank, card issuer or a free consumer service covers most of that. Paid tiers add dark-web scanning of dubious value, identity theft insurance that reimburses costs rather than losses, and resolution assistance that can genuinely help after a serious incident.

Responding to a breach

Notification letters arrive routinely, and the correct response is the same each time.

• Freeze all three credit reports if they are not frozen already.
• Change the password on the breached service and anywhere you reused it.
• Turn on multi-factor authentication, preferably an app rather than SMS.
• Accept the free monitoring offered, but do not treat it as sufficient on its own.
• Check your reports at all three bureaus over the following months.

If your identity is already stolen

File a report at IdentityTheft.gov to generate an FTC identity theft report and a recovery plan. That document unlocks stronger rights: blocking fraudulent entries on your credit reports, extended fraud alerts, and obliging businesses to give you records of the fraudulent transactions.

Then place an extended fraud alert, dispute every fraudulent account with the bureaus and furnishers, and file a police report where a creditor requires one. Keep a dated log of every call and letter; recovery is administrative work, and the record is what shortens it.