Immediately after an AI scam steals your identity, your top priority is not just reporting it. You need to stop new accounts from being opened in your name. A credit freeze is the strongest free tool. It blocks lenders from seeing your credit file. That means most new credit applications fail automatically. If you have not already read about the immediate steps after a scam, start with our guide on what to do if you were scammed by AI. Then come back here to lock things down.
A freeze and a fraud alert work differently. A freeze seals your credit report. A fraud alert tells lenders to verify your identity before granting credit. You can place both. That layered approach reduces risk while you recover. Online freeze requests must be processed within one business day. Phone requests get three business days. The initial fraud alert lasts one year. These deadlines are free and set by federal rules.
After placing a freeze, you still need to file reports, dispute accounts, and monitor for months. Identity theft from AI scams can involve voice cloning, fake emails, or deepfake videos. Scammers may use stolen data again later. The freeze does not erase what already happened. It stops new credit. Your recovery also includes money recovery and emotional care. Read our emotional recovery guide to protect your mental health while you work through the list.
What You’ll Need
- Computer or smartphone with secure internet access
- Government-issued photo ID
- Proof of address such as a utility bill or bank statement
- List of recent fraud evidence including screenshots and dates
- FTC Identity Theft Report and police report
- Secure place to store freeze PINs and passwords
How Do You Best Credit Freeze and Fraud Alert Steps After Identity Theft?
- Confirm the identity theft and collect your evidence
Before you place a freeze, pause and confirm what happened. Check bank and credit card statements for charges you did not make. Look for new account alerts, address changes, or hard inquiries you do not recognize. Write down dates, amounts, and any phone numbers or email addresses involved. If the scam used AI voice cloning or a fake message, save the audio or screenshot. Do not delete anything yet. Our guide on what to do if you were scammed by AI walks through the first-hour checklist. Gather documents that prove your identity and address. A driver’s license, passport, utility bill, or bank statement works. You will need these to verify yourself with the credit bureaus. If the scammer changed your mailing address, use a secure device and a password manager with strong, unique passwords for every bureau account. Avoid public Wi-Fi when you submit this information. A common mistake is waiting until you feel calm to collect evidence. Scammers may delete emails or block access to accounts fast. Start a folder now, even if it is messy. Label screenshots with the time and app or website where you saw them. This evidence supports your fraud alert, your police report, and any dispute you file later. Once you have basic records, move straight to the credit freeze. You do not need a police report to freeze.
- Place a free credit freeze at all three major bureaus
A credit freeze stops new creditors from accessing your credit report. Most lenders will not approve new credit without that report. The freeze is free, and you can place it online at Equifax, Experian, and TransUnion. You must request it at each bureau separately. There is no single central freeze. Online requests must be completed within one business day. Phone requests can take up to three business days. This timeline matters because scammers move fast after a data breach. Each bureau has an online freeze page. You will create an account or verify identity with personal questions. Some questions may be hard because scammers already altered your file. If you cannot verify online, call the bureau using the number listed on its official site. Write down every PIN or password the bureau gives you. The PIN is the key to lift or remove the freeze later. Do not store it in a plain text file on your phone. A common error is freezing only one bureau. Lenders do not always check all three, but many do. An attacker only needs one unprotected bureau to open a credit card. A second mistake is paying for a credit lock product. Credit bureaus sell paid monitoring and lock services, but a security freeze is legally free. Skip upsells. You can always add monitoring later if you want. After all three freezes are active, move to a fraud alert. The freeze blocks credit pulls, but it does not require lenders to call you for existing accounts.
- Add an initial fraud alert at one credit bureau
A fraud alert does not block credit reports. Instead, it tells lenders to verify your identity before issuing credit. An initial fraud alert lasts one year and is free. The key detail is you only contact one bureau. That bureau must notify the other two. The alert usually appears within minutes to a few hours. Lenders then see a flag and must take reasonable steps to confirm the person applying is you. Placing the alert is simple. Go to any of the three bureau official sites or call their fraud line. You will provide your name, address, date of birth, and Social Security number. The bureau may ask for a phone number you can be reached at. That phone number goes on the alert so lenders can call you. Use a number that is not compromised. If the scammer controls your phone account, secure that first. For more on how the scam reporting process fits, see our guide on how to report an AI scam. Do not treat the fraud alert as a substitute for a freeze. The alert only warns lenders. It does not prevent them from accessing your report. Some lenders may still issue credit if their identity checks pass. A freeze is stronger. Keep both in place. The fraud alert also expires after one year unless you renew or upgrade. Set a calendar reminder for 11 months from today. In the next step, you can file an identity theft report to get a seven-year extended alert.
- File an identity theft report with the FTC and police
The FTC Identity Theft Report is the official document that unlocks stronger protections. You can create one at the FTC website. The report includes your personal information, details about the theft, and a checklist of recovery steps. It becomes your sworn statement. You can print it or save it as a PDF. This report is often required for an extended fraud alert and for disputing fraudulent debts. A police report adds another layer. Call your local police non-emergency number or visit in person. Bring a copy of your FTC Identity Theft Report, your photo ID, and proof of address. Some departments allow online filing for identity theft. Ask for the police report number. If an officer says they cannot take a report because the scam occurred online, explain that identity theft is a crime in your jurisdiction and ask to file a report. You may need to speak with a fraud or financial crimes unit. The main mistake victims make is filing only the FTC report and skipping police. Some creditors and debt collectors will not accept an FTC report alone. They want a police report number. The combination of both reports also helps you later if a fraudulent account goes to collections. Keep both reports in a safe place. You will send copies to the credit bureaus in the next step to request an extended fraud alert.
- Upgrade to an extended fraud alert with your report
An extended fraud alert lasts seven years. It requires an identity theft report, which you just created. The law requires credit bureaus to exclude you from prescreened credit and insurance offers for five years after you place it. This reduces junk mail that scammers could intercept. More importantly, lenders must call you at a number you provide before issuing credit. That extra call can stop a scammer who already passed other checks. To place the extended alert, contact each credit bureau. You can send a secure message through your online account or mail a copy of your FTC Identity Theft Report and police report. Include your full name, address, and a daytime phone number. The bureau must place the alert within one business day of receiving your request. You do not need to pay anything. For a broader recovery plan, see our guide on best identity protection after an AI scam. A common mistake is assuming the extended alert replaces the credit freeze. It does not. The freeze still blocks access to your report. The extended alert requires verification if a lender does access it. Keep both. Another mistake is forgetting to update your phone number if it changes. The alert’s value depends on the number being correct. If you move or change carriers, update the alert with each bureau immediately. After the alert is in place, start reviewing your credit reports for damage.
- Check credit reports and dispute fraudulent accounts
After your freeze and alerts are active, get free copies of your credit reports. You can request them weekly from AnnualCreditReport.com. Review every line. Look for new accounts, hard inquiries, addresses, or names you do not recognize. Highlight anything suspicious. If a scammer opened a payday loan or credit card, it may already be on your report. The earlier you dispute, the easier it is to remove. Each fraud item needs a dispute with the credit bureau that shows the account. You can file disputes online, by phone, or by mail. Include your FTC Identity Theft Report, police report, and any evidence. The credit bureau must investigate within 30 days under federal law. The creditor must also investigate if you send them a dispute. If a bureau or creditor refuses to fix an error, file a complaint with the Consumer Financial Protection Bureau. That agency can pressure financial companies to respond. Do not pay any debt that is fraud. Paying does not make it go away and might signal you accept the account. Instead, send a written identity theft dispute with proof. Keep copies of everything. If a debt collector contacts you, request validation of the debt in writing. Then explain it is identity theft. You may need to involve a lawyer if a creditor sues, but early dispute often prevents that. Continue to the final step to set up ongoing monitoring.
- Set up ongoing monitoring and recovery support
A credit freeze is not a one-time fix. Keep it in place until you are certain no new fraud attempts are happening. You can check your reports weekly for free. You can also set up free account alerts at your bank and credit cards for any transaction over a small amount. If the AI scam involved voice cloning or phone impersonation, review our guide on voice cloning scam recovery for audio-specific steps. For technical readers, you can build your own alert dashboard. The n8n documentation describes a free community edition that supports unlimited self-hosted workflows. You could connect email alerts from your bank and credit monitoring services into one secure inbox. This is not required, but it helps if you manage multiple accounts. Keep your automation credentials in a password manager, not in plain text. Recovery also means money and emotions. You may still need to ask for refunds or chargebacks. Our guide on how to get money back after an AI scam explains where to start. Do not blame yourself. Scammers use sophisticated AI tools. The fact that you froze your credit immediately is a strong recovery move. Lock down, document, and take one step at a time.
Red Flags & Warnings
- 🚨 Never pay for a credit freeze. Any site charging a fee is selling a paid product, not the legal free freeze.
- 🚨 Do not confuse a fraud alert with a full freeze. Fraud alerts expire and do not stop all credit pulls.
- 🚨 Keep your freeze PINs private. Scammers may call pretending to be a bureau and ask for the PIN to verify you.
- 🚨 Beware of credit repair companies that promise instant fixes. The free dispute process takes up to 30 days, but you can do it yourself.
- 🚨 Do not lift a freeze just because a lender emails you. Verify the application is yours and the request is real.
- 🚨 Avoid clicking links in text messages that claim to be from Equifax, Experian, or TransUnion. Log in directly through the official site.
Frequently Asked Questions
Is a credit freeze the same as a fraud alert?
No. A credit freeze blocks new creditors from accessing your credit report. A fraud alert requires lenders to verify identity before extending credit. Freezes last until you lift them; initial alerts last one year.
How much do credit freezes cost?
Credit freezes are free by federal law. You can place, lift, or remove them at all three major bureaus without charge. Avoid paid credit lock products that offer similar features.
How quickly will a freeze take effect?
Online freeze requests must be honored within one business day. Phone requests must be processed within three business days. After that, creditors generally cannot pull your report.
What is an extended fraud alert?
An extended fraud alert lasts seven years. It requires you to provide an identity theft report. It also removes you from prescreened credit offers for five years.
Do I need to contact all three bureaus for a fraud alert?
No. You only need to place an initial fraud alert with one bureau. That bureau must notify the other two.
Can I keep a freeze while applying for new credit?
Yes. You can temporarily lift the freeze using your PIN. A lift can be scheduled for a specific creditor or a set period, then it returns.
What Should You Remember?
- Freeze first: Place free freezes at Equifax, Experian, and TransUnion online within one business day.
- Alert adds a layer: Add a one-year initial fraud alert at one bureau; it notifies the other two.
- Report for extended: File an FTC Identity Theft Report and police report to unlock a seven-year extended alert.
- Keep PINs safe: Store each bureau’s freeze PIN in a secure place; losing it delays lifting.
- Dispute quickly: Review all three credit reports and dispute fraud within 30 days to limit damage.
- Monitor for months: Check reports and accounts monthly because scam rings may return with new data.
This article is for general information only and does not constitute legal, financial, or mental-health advice. Scam tactics evolve quickly. Always report fraud to official authorities such as the FTC, FBI IC3, and your bank, and consult a qualified professional for legal or recovery decisions.
