If you receive a credit inquiry while you believe your credit reports are frozen, treat it as an urgent signal. A properly placed security freeze should block new-credit hard inquiries. Seeing an unexpected pull can mean one of three things: the inquiry was a permitted soft check, your freeze wasn’t active everywhere or was temporarily lifted, or someone is attempting new-credit fraud. This step-by-step guide explains how to verify your freezes, tell soft vs. hard inquiries, stop further damage, and dispute what doesn’t belong.
First, confirm what type of inquiry it is
Not all inquiries are the same. Identifying the type quickly determines your next steps.
- Soft inquiry: Does not require thawing a freeze, does not affect your credit score, and is often used for preapproved offers, existing-account reviews, identity verification, employment or insurance checks, or when you view your own report. A soft inquiry can still appear even with a freeze in place.
- Hard inquiry: Typically requires an unfrozen file and is used when you apply for new credit (credit cards, loans, financing, some utilities or mobile plans). A security freeze should block hard inquiries unless you lifted or unlocked the freeze. If a new hard inquiry appears while frozen, investigate immediately.
Check all three bureaus for accuracy right now
A freeze must be active separately at each nationwide credit bureau: Equifax, Experian, and TransUnion. Log in to each bureau’s online portal (or call if necessary) to confirm:
- Your freeze status is active
- There are no scheduled or recent temporary lifts you forgot about
- Your contact information (email, phone, mailing address) is correct
While you are logged in, download or view your latest report details and write down the date, time, and confirmation numbers showing your freeze is active. Take screenshots or save PDFs for your records.
Match the inquiry to any application you made
Think through the last 60–90 days. Did you apply for a new card, auto loan, buy-now-pay-later, utility service, wireless plan, or store financing? If yes, the pull may be legitimate. If not, or the lender name is unfamiliar, assume the inquiry is unauthorized until proven otherwise.
If the inquiry is a soft pull, document and monitor
If you confirm it’s a soft inquiry, note the company and date, then monitor for any follow-up letters or accounts you did not open. A soft pull alone is not a freeze failure or a credit score hit. Continue to keep your freeze in place and consider opting out of prescreened offers if the soft pull was for marketing purposes.
If the inquiry is a hard pull and you did not apply, act immediately
When a hard inquiry appears despite an active freeze, treat it like possible identity theft or a process error at the lender. Move fast through the following steps.
- Contact the lender that pulled your credit. Use the phone number on the inquiry or their official website. State that your credit file is frozen and you did not authorize an application. Ask them to:
- Close or cancel any associated application immediately
- Provide the application details (application method, date, address used, phone, email, IP if available, store location if in person)
- Confirm in writing that the application is canceled for suspected fraud
- Re-verify your freezes at all three bureaus. Ensure they are still locked. If any bureau shows a temporary lift, end it now or re-freeze.
- Place or renew a fraud alert. A one-year fraud alert is free and requires creditors to take extra steps to verify identity before opening new accounts. Adding it at one bureau places it at all three.
- Request a security freeze PIN or account reset if needed. If you suspect your freeze controls (PIN, password, or portal access) were compromised, reset credentials and enable MFA.
- File identity theft reports if you see additional red flags. If the lender confirms someone applied in your name or if accounts have been opened, file an FTC identity theft report (IdentityTheft.gov) and consider a police report. Keep copies for disputes.
- Dispute the hard inquiry with the credit bureaus. Submit disputes to the bureau(s) that show the inquiry. Provide:
- Statement that your file was frozen on the date of the inquiry
- Proof of active freeze (screenshots or confirmations)
- Any lender correspondence confirming fraud or canceled application
- A copy of your FTC identity theft report or police report, if filed
Ask for removal of the unauthorized inquiry and for any fraudulent accounts to be blocked.
Know the legitimate exceptions and where errors happen
Understanding how a freeze interacts with different checks will reduce confusion and help you argue your case accurately.
- Soft inquiries continue under a freeze: Preapproved offers, account reviews by your existing lenders, employment/insurance checks, and you viewing your report are often unaffected by a freeze and will still appear.
- Existing relationships can still review your account: Lenders with whom you already have accounts can conduct periodic soft reviews even when you are frozen.
- Application routing quirks: Some lenders use multiple bureaus or identity vendors. If a temporary lift was set at one bureau but not others—or lifted for a broader date range—an unexpected hard pull could result.
- Identity-verification vendors: Occasionally, a lender’s third-party system may mis-handle freeze signals. That is why documenting your freeze status is crucial for disputes.
Document everything for a clear paper trail
Keep meticulous records to speed disputes and protect your rights.
- Freeze confirmations, dates, and any temporary lifts
- Screenshots or PDFs of bureau portals showing active freeze at the time of inquiry
- Lender call logs, names, reference numbers, and written confirmations
- Copies of disputes, FTC reports, and any police report numbers
How to dispute an unauthorized hard inquiry effectively
Each bureau has an online dispute process and accepts mail. Mail can be slower but allows you to include complete documentation. In your dispute letter or submission:
- State you had an active security freeze on the inquiry date
- Identify the specific inquiry and bureau file
- Request deletion of the inquiry as unauthorized or resulting from a frozen file
- Attach proof of the freeze and any fraud documentation
- Ask for written results and an updated copy of your credit report
Monitor for the bureau’s response window (typically up to 30 days). If the bureau or lender fails to correct an error, you can escalate with additional documentation and consider filing a complaint with the CFPB.
Extra protection steps if fraud is likely
- Strengthen account security: Enable multi-factor authentication on your bureau logins, bank, email, and mobile accounts. Change passwords that may overlap with old breaches.
- Watch your mail and email: Letters about new accounts you didn’t open, cards arriving unexpectedly, or adverse action notices are warning signs. Save the envelopes and contents.
- Review your existing accounts frequently: Look for new-payee setups, address changes, or unusual charges. Freeze new-payee transfers at banks when possible.
- Consider an extended fraud alert (seven years): If you have an identity theft report on file, you may qualify for a longer alert that requires creditors to contact you directly before opening new credit.
- Opt out of prescreened offers: Reduces opportunistic applications in your name and cuts down on mail exposure.
Understanding what a freeze can—and cannot—do
A security freeze is powerful, but it has limits. It is designed to restrict new-credit access, not to manage your current accounts or marketing pulls.
- A freeze blocks most new-credit hard inquiries unless you thaw it with your credentials or approve a lender-specific lift.
- A freeze does not stop soft inquiries such as account reviews, identity checks, or you accessing your own credit.
- A freeze does not prevent misuse of existing accounts or internal account changes by criminals who already have access to those accounts.
Two related questions many people have are whether a freeze protects existing accounts and whether you can still use your cards while frozen. Explore those topics to set the right expectations and strengthen your defenses:
- Does a Credit Freeze Stop Fraud on Accounts You Already Have?
- Can You Still Use Your Credit Cards While Your Credit Is Frozen?
Set up ongoing monitoring and alerts
Even with freezes in place, early detection matters. Consider tools that monitor your credit files, scores, and identity-related changes, so you get notified quickly if something shifts—such as a new inquiry, a change of address, or a public-record alert. After you’ve handled the immediate issue, you may want to evaluate dedicated credit and identity monitoring solutions as an optional next step. One option to consider is SmartCredit, which provides consolidated monitoring and alerts to help you spot and react to changes faster.
Prevent repeat incidents when you need to apply for credit
If you will be applying for legitimate credit soon, plan the freeze lift carefully:
- Ask the lender which bureau(s) they will use and lift only for that bureau
- Use a tight date window and reinstate the freeze the moment your application is complete
- Save the lift confirmation and set a reminder to re-lock on schedule
Quick checklist if this just happened
- Identify whether the inquiry is soft or hard
- Confirm your freeze status at Equifax, Experian, and TransUnion
- Call the lender who pulled your credit; cancel any fraudulent application
- Place or renew a fraud alert and reset bureau login security
- Dispute the unauthorized inquiry with documentation
- Escalate with an identity theft report if accounts were opened or attempts continue
- Enable ongoing monitoring and review your existing accounts
Conclusion
An unexpected credit inquiry during an active freeze needs immediate attention, but you can contain the risk by verifying the type of inquiry, confirming your freezes at all three bureaus, stopping any fraudulent application with the lender, and filing targeted disputes with clear documentation. Strengthen your logins, add fraud alerts, and keep monitoring so you’ll catch the next sign early—if there is one. With a disciplined response and better visibility going forward, a single suspicious inquiry does not have to become a larger identity problem.
Good to Know
A true security freeze blocks new-credit hard pulls, but it does not stop soft inquiries or activity on accounts you already have; some pulls may still appear as soft checks and do not affect your score.