Last year, after reading about yet another massive data breach, I finally did what everyone recommends. I froze my credit at Equifax, Experian, and TransUnion. Took about 15 minutes. Felt responsible. Went on with my life assuming I was protected.
Three months later, someone filed a tax return in my name and collected my refund. A credit freeze did nothing to stop it.
That experience sent me down a rabbit hole of everything a credit freeze doesn’t cover. Turns out, while freezing your credit is genuinely important, it only blocks one specific type of fraud. There are at least a half dozen others that sail right past it.
What a Credit Freeze Actually Does (And Doesn’t Do)
A credit freeze prevents lenders from accessing your credit report. Since most lenders won’t approve a new account without pulling your report first, this effectively blocks someone from opening credit cards, loans, or lines of credit in your name.
That’s valuable. New account fraud is a major category of identity theft, and a credit freeze is the best defense against it.
But that’s all it does. A credit freeze doesn’t protect your existing accounts. It doesn’t stop tax fraud. It doesn’t prevent medical identity theft. It doesn’t block someone from draining your bank account if they have your login credentials.
Think of it like locking your front door but leaving every window open.
The Tax Return Problem
This one hit me personally, so let me explain exactly how it works. A thief obtains your name and Social Security number (not hard given the billions of records leaked in recent breaches). Early in tax season, they file a fake return using your information and claim a refund. The IRS sends the money, usually to a prepaid debit card.
When you file your legitimate return weeks or months later, it gets rejected because “you already filed.”
Credit freezes don’t touch this. The IRS doesn’t pull your credit report when processing a tax return. The only thing that prevents this is an IRS Identity Protection PIN, a six-digit code that the IRS assigns to you and requires on every return filed with your SSN.
You can request one at irs.gov/ippin. It takes about 15 minutes to set up, and you’ll get a new PIN each year. Without this, your credit freeze leaves your tax refund completely exposed.
Your Existing Accounts Are Still Vulnerable
A credit freeze stops new accounts from being opened. But your current bank accounts, credit cards, investment accounts, and insurance policies? Completely unaffected by a freeze.
If a thief gets your login credentials (through a phishing email, a data breach, or malware), they can access and drain existing accounts regardless of your credit freeze status. They can change your passwords, transfer funds, and request new cards sent to a different address.
Protecting existing accounts requires different tools. Strong, unique passwords for every financial account. Two-factor authentication using an authenticator app instead of SMS. Regular monitoring of transactions and account activity.
One step that most people skip: set up transaction alerts for every financial account you have. Most banks and credit card companies let you get instant notifications for any charge over $0. That means you find out about fraudulent transactions within seconds, not when your monthly statement arrives.
Medical Identity Theft Doesn’t Care About Your Credit
Someone walks into a clinic with your insurance information and gets treated. The bill goes to your insurance. Their medical records get mixed with yours. And none of this has anything to do with your credit report.
Medical identity theft can be financially devastating since fraudulent claims can hit your coverage limits and leave you paying out of pocket for your own care. But the scarier risk is clinical. If a thief’s blood type, allergies, or medical conditions end up in your health record, it could affect treatment decisions if you end up in an emergency room.
Request an accounting of disclosures from your health insurer at least once a year. Review every Explanation of Benefits statement they send. If you see providers or procedures you don’t recognize, report it immediately.
Your Phone Number Is an Open Door
Even with your credit frozen, a thief who takes over your phone number through a SIM swap can bypass two-factor authentication on your existing accounts, intercept verification codes, and reset passwords across your financial life.
Call your mobile carrier and set up a PIN or account passcode that must be provided before any changes can be made to your account. Every major carrier offers this. AT&T calls it an “extra security” passcode. Verizon has an account PIN. T-Mobile uses a customer care password.
This takes five minutes and closes one of the most exploited back doors in personal security.
Government Benefits and Employment Fraud
Someone can use your Social Security number to get a job, and the income they earn gets reported to the IRS under your SSN. You find out when you owe taxes on income you never made, or when your actual employer’s W-2 doesn’t match IRS records.
Similarly, someone can claim unemployment benefits or Social Security benefits using your identity. A credit freeze does nothing to stop either scenario.
Create an account at SSA.gov and check your earnings record annually. If you see income from an employer you don’t recognize, contact the SSA and the IRS immediately.
The Full Protection Checklist
A credit freeze is step one. Here’s the complete list:
Freeze your credit at all three bureaus. (You’ve done this already. Good.)
Get an IRS Identity Protection PIN at irs.gov/ippin.
Set a carrier PIN with your mobile provider.
Enable authenticator-based 2FA on all financial and email accounts.
Set up instant transaction alerts on every bank account and credit card.
Review your medical EOB statements every time one arrives.
Check your Social Security earnings record at SSA.gov once a year.
Monitor your credit reports at AnnualCreditReport.com regularly, even with a freeze in place, since existing creditors can still report activity.
None of these steps cost anything, and the whole list takes under an hour to complete. A credit freeze was a great start. But if that’s where you stopped, you’ve left some significant gaps. Close them today.
