Active Incident? 24/7 Response →
SleuthX

For Individuals & Families

Freeze Your Credit and Lock Your SIM: Two Free Shields

Two of the strongest protections against identity theft and SIM-swap fraud are free and take minutes: a credit freeze and a carrier port-out PIN. Here is how to set both.

All articles·7 min read·June 29, 2026

Two free locks almost nobody sets

Two of the most effective protections against identity theft and phone-number hijacking are free, take about ten minutes total, and most people never turn them on: a credit freeze at the three bureaus, and a carrier port-out PINon your phone line. Between them they block the two main ways an attacker cashes in — opening new credit in your name, and stealing your number to intercept text codes. Here is how to set both.

Shield 1: Freeze your credit

A credit freeze restricts access to your credit file, so a thief cannot open new accounts in your name even if they have your details. It has been free at all three bureaus since 2018, and it does not affect your credit score or your existing accounts. The one thing to know: unlike a fraud alert, you must set a freeze at each bureau separately.

Do not confuse three similar tools. A freeze is the statutory, free, strongest option. A lock is a paid or app-based product some bureaus market that does something similar by contract. A fraud alert is a one-bureau, one-year flag that asks lenders to verify your identity but does not block new credit. For most people, the free freeze is the one to use.

Shield 2: Lock your phone number

The second shield stops a SIM swap— an attacker moving your number to their device to steal your text codes. Every major US carrier now offers a free account lock or port-out PIN, a code required before your number can be ported or moved to a new SIM. Note that this is separate from your regular account PIN.

If you want to understand the attack these locks defend against, see what a SIM swap is and how to spot one, and SIM-swap attack recovery if a number has already been hijacked.

Why these two, together

These shields cover the two big money vectors. The credit freeze stops new-credit fraud; the carrier lockstops the SIM swap that hijacks your SMS two-factor codes. Both are free, reversible, and take minutes — and they are most useful before anything goes wrong. If you are already dealing with theft, work through your first 48 hours after identity theft and consider a professional identity-theft investigation.

Your 10-minute setup checklist

  1. Freeze your credit at Equifax, Experian, and TransUnion (each separately).
  2. Turn on your carrier's account lock or port-out PIN.
  3. Move your most important accounts off SMS codes to an authenticator app or security key.
  4. Store every PIN and credential in a password manager so lifting a freeze later is painless.

Sources

  1. Federal Trade Commission, What To Know About Credit Freezes and Fraud Alerts. https://consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
  2. Federal Trade Commission, Free credit freezes and yearlong fraud alerts (press release). https://www.ftc.gov/news-events/news/press-releases/2018/09/starting-today-new-federal-law-allows-consumers-place-free-credit-freezes-yearlong-fraud-alerts
  3. Verizon, Protect against unauthorized port-outs (Number Lock). https://www.verizon.com/about/account-security/unauthorized-port-outs
  4. AT&T, AT&T Wireless Account Lock (newsroom). https://about.att.com/story/2025/wireless-account-lock.html
  5. T-Mobile, Account Takeover Protection. https://www.t-mobile.com/support/plans-features/account-takeover-protection/

Related services

Meet Your Practitioner

Quinnlan Varcoe

Founder & CEO

GIAC-certified · 15 industry certifications

With operational experience across Fortune 50 security programs and the defense industrial base, Quinnlan founded SleuthX in 2022 to provide clients with the caliber of expertise typically reserved for the largest enterprises. Her work in threat intelligence and digital forensics has earned the trust of 26,000+ cybersecurity professionals who follow her analysis.

“26,000 professionals follow my work because I say what others won't — and I can back it up technically.”

Fortune 50 BackgroundDefense IndustryThreat IntelligenceDigital PrivacyIncident Response
Quinnlan Varcoe, Founder & CEO

Two free shields: quick answers

Certified Expertise

GIAC · AWS · Splunk · CompTIA

Transparent pricing

Trusted by partners across the practice

DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management
DAS Health
Exhibit A Cyber
Ally Security
KIRO Group
Black Mirage
Kalles Group
Gridware
CQR
Archstone Security
Cyvergence
Sentinel Cyber
Cloud Underground
Seron Security
Hexen
Koru Risk Management