An extended fraud alert lasts seven years from the day a credit bureau places it on your file.1Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts For that entire seven-year period, any business that pulls your credit report has to reach you at a phone number or other contact method you designate before it can open a new account, issue an additional card, or raise a credit limit in your name. You can remove the alert sooner if you want, and you can renew it for another seven years once it expires.
What the Seven Years Actually Give You
The core protection runs the full seven years: creditors that receive your credit file are prohibited from opening new credit in your name unless they first contact you at the number you designated and confirm the application is legitimate.1Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts A thief with your Social Security number and other personal details still cannot walk away with credit in your name, because the lender has to reach you first.
Two related benefits run on shorter clocks inside those seven years. Placing the alert removes you from prescreened credit and insurance offer lists for five years, cutting down on the “pre-approved” mailers a thief could intercept. And during the first 12 months after placement, you are entitled to two free copies of your credit report so you can review your file for fraudulent accounts or unfamiliar inquiries.1Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
The alert itself does not affect your credit score. It is a notation on your file, not a data point in the score calculation. What it can affect is timing: because creditors have to contact you before approving anything, legitimate applications take longer to process.
Removing the Alert Before Seven Years Are Up
You can cancel an extended fraud alert at any point in the seven-year window. Unlike placement, which you handle through a single bureau, removal has to be requested at each of the three major bureaus separately.2Experian. How to Remove a Fraud Alert from Credit Report Each bureau will verify your identity first so a thief cannot cancel the protection for you. Expect to provide a government-issued photo ID and proof of your current address, such as a utility bill or bank statement.
Renewing the Alert After Seven Years
When the seven years run out, the alert drops off. Renewal is not automatic. To put another seven-year alert in place, you resubmit an identity theft report — an FTC report filed at IdentityTheft.gov or a police report — to a credit bureau.3Federal Trade Commission. Credit Freezes and Fraud Alerts If you no longer have the original, you can file a fresh one. As with the first placement, contacting one bureau is enough; that bureau has to notify the other two.
How Seven Years Compares to the Other Options
Federal law creates three types of fraud alerts, and they last very different lengths of time:
- An initial fraud alert lasts one year and can be placed by anyone who suspects they are or may become a victim of identity theft. No police or FTC report is required.1Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
- An extended fraud alert lasts seven years but is available only to confirmed identity theft victims who submit an identity theft report.1Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
- An active duty alert lasts at least one year and is available to deployed service members.1Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
All three are free.1Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts
A security freeze is a different tool with a different clock. A freeze blocks access to your credit report entirely rather than requiring a verification call, and it stays in place indefinitely until you lift or remove it.3Federal Trade Commission. Credit Freezes and Fraud Alerts Anyone can place a freeze; you do not need to be an identity theft victim. Some victims run both at once, using the freeze as the hard block and lifting it only when they need to apply for credit while the seven-year alert continues to sit on the file.
Keeping the Alert Useful for the Full Seven Years
The alert only works if creditors can actually reach you at the number on file. If your phone number or other designated contact method changes during the seven years, update it with each bureau promptly. An outdated number can cause legitimate applications to stall or be denied because the creditor cannot complete the required verification.
If a business opens a new account without contacting you first, that is a violation of the Fair Credit Reporting Act. You can sue for willful noncompliance and recover either your actual damages or statutory damages between $100 and $1,000 per violation, plus any punitive damages a court awards, plus attorney’s fees and court costs.4Office of the Law Revision Counsel. 15 USC 1681n – Civil Liability for Willful Noncompliance If a fraudulent account slips through, dispute it with both the credit bureau and the creditor that opened it, file an updated report at IdentityTheft.gov, and consider filing a complaint with the Consumer Financial Protection Bureau.