Short answer: In the United States, Equifax, Experian and TransUnion must provide the security freeze required by federal law free of charge. A paid credit-lock or monitoring package is a different product. A charge or refused request may warrant investigation, but it does not automatically establish a right to compensation.
This is general information about US federal law, not legal advice. State protections and court procedures can differ. Reviewed 29 October 2026.
What exactly has the company offered?
A checkout page offering identity monitoring can make a simple freeze request look like a subscription purchase. The important question is whether the payment is for an optional service or is being required to obtain the statutory security freeze.
The Consumer Financial Protection Bureau explains that security freezes are free, while companies also market credit locks, sometimes bundled with paid services. The existence of a paid package alone does not show that the company has unlawfully charged for a freeze.
A useful evidence file separates the two: the page describing the product, its terms, any receipt, and the wording of the actual freeze request. A subscription payment should not simply be labelled a “freeze fee” without checking what was purchased.
Which requests must be free, and how quickly?
Under 15 USC §1681c-1(i), a nationwide credit reporting agency receiving a direct consumer request and proper identification must place a security freeze without charge. The statute also requires free removal and temporary lifting.
USAGov summarises the deadlines:
- Placement by telephone or secure electronic means: within one business day of receipt.
- Placement by mail: within three business days of receipt.
- Lifting by telephone or secure electronic means: within one hour of receipt.
- Lifting by mail: within three business days of receipt.
The identification requirement matters. An unfinished online form or an unresolved request for identification should not automatically be treated as a completed request that the bureau ignored. Keep the submission confirmation and any subsequent correspondence.
Each of the three nationwide bureaus needs a separate request. Freezing a file at one does not freeze the others. USAGov links to their freeze services.
Does every credit check during a freeze break the law?
No. A freeze restricts access, but it is not an absolute barrier. Federal exceptions include existing-account review or collection and certain government uses. Insurance underwriting and employment, tenant or background screening are also exceptions under the federal provision. Consumers can still obtain their own reports. These limits appear in §1681c-1(i)(4).
That makes the purpose of a particular inquiry important. The CFPB also warns that a freeze can interfere with legitimate applications for new credit. A delayed application by itself does not prove wrongdoing by a lender or bureau.
Could a consumer bring a lawsuit?
Potentially, if the facts establish an enforceable Fair Credit Reporting Act violation. The general civil-liability provisions distinguish negligent from willful noncompliance:
- Section 1681o provides for actual damages caused by negligent noncompliance, with costs and reasonable attorney fees in a successful action.
- Section 1681n provides for actual damages or statutory damages of $100–$1,000 for qualifying willful noncompliance, possible punitive damages, and costs and reasonable attorney fees in a successful action.
Those amounts are not an automatic payment for each frustrating interaction. The applicable duty, evidence, causation and legal standard all matter. Federal court also requires concrete injury for a damages claim; a statutory violation alone is insufficient. The Supreme Court explained that principle in TransUnion LLC v. Ramirez (2021), which concerned different FCRA allegations, not a credit-freeze fee.
Section 1681p generally sets the filing deadline at the earlier of two years after discovery of the violation or five years after it occurred. A qualified consumer-law attorney can assess the deadline, forum and any applicable state-law issues before a claim is filed.
What information helps resolve the problem?
- The bureau involved, request method, submission date and confirmation number.
- Whether the service was called a security freeze, credit lock or monitoring subscription.
- The identification requested and the bureau’s response.
- Receipts, screenshots and records of any loss attributed to the problem.
The CFPB complaint service is one possible route for unresolved financial-product problems. Follow its current eligibility instructions. Where the issue includes inaccurate or incomplete report information, its credit-reporting notice requires a direct bureau dispute first and asks whether it was submitted more than 45 days ago or is no longer pending. That process should not be assumed to extend a court filing deadline.
This article does not determine whether any particular company violated the law and does not create an attorney-client relationship. Individual legal advice requires a qualified attorney familiar with the facts and jurisdiction.
Featured photograph: Scott Graham / Unsplash, used under the Unsplash License. Illustrative image.
