Questions: Identity Theft and Financial Security Protection

Question 1

A person has had no suspicious activity on their accounts and no known breaches. They're considering placing a credit freeze at all three bureaus. Which statement most accurately describes what a credit freeze does?

• A. It should be delayed until suspicious activity appears — a preemptive freeze is unnecessary
• B. It will lower their credit score by signaling financial distress to creditors
• C. It prevents new credit accounts from being opened in their name while leaving existing accounts and their credit score completely unaffected
• D. It only works if placed within 48 hours of a confirmed data breach

Answer: (C)

A credit freeze blocks new creditors from pulling your file, making new-account fraud impossible even with your full personal information. Critically, it does not affect your credit score or existing accounts, and it is free. The misconception that freezes 'hurt your credit' is simply false. Proactive freezing — before any breach is detected — is exactly the right strategy because identity theft often goes undetected for months.

Question 2

You receive a data breach notification stating your Social Security number was exposed. Which combination of protective actions addresses both new-account fraud and existing-account takeover?

• A. Change only the password for the breached company's site and monitor your email for alerts
• B. Place a credit freeze at all three bureaus and enable multi-factor authentication on financial accounts
• C. Check your credit report once in the next calendar year and file a police report
• D. Contact your bank to cancel all existing accounts and open new ones

Answer: (B)

Two distinct threats require two distinct defenses. A credit freeze stops new-account fraud by preventing anyone from opening credit in your name. MFA (plus strong unique passwords) stops existing-account takeover by requiring a second verification factor beyond stolen credentials. These address different attack surfaces — doing only one leaves you exposed on the other front.

Question 3

Most victims of identity theft do not notice the theft for months after it has occurred.

• T. True
• F. False

Answer: True

Identity theft is often described as a crime of patience and invisibility. Thieves may sit on stolen data for months or years before using it, or sell it to others who act later. This delay is why waiting for obvious signs before taking precautions is dangerous — the compromise may already have happened long before any damage becomes visible.

Question 4

Placing a credit freeze at one or more bureaus will lower your credit score because it signals financial distress to lenders.

• T. True
• F. False

Answer: False

This is one of the most persistent misconceptions about credit freezes. A freeze has absolutely no effect on your credit score — it simply prevents new inquiries from being processed. Existing creditors can still access your file, and your score is calculated the same way as before. Freezes are free, reversible, and do not appear on your credit report in any way that would concern a lender about your existing accounts.

Question 5

Why is a credit freeze considered the most powerful protection against new-account identity theft, and why is it underused despite being free?

Model answer: A credit freeze blocks any new creditor from pulling your credit file, so even a thief who has your full personal information cannot open new credit accounts in your name. It is free, does not affect existing accounts or your score, and can be temporarily lifted when you need to apply for credit. It is underused primarily because of the persistent (and false) misconception that freezes harm your credit score, and because many people don't take protective action until after fraud has already occurred rather than treating exposure as an assumption that justifies proactive defense.

The key insight is that a credit freeze does not 'fix' a breach — it doesn't recover stolen data. What it does is neutralize one of the main ways that stolen data is monetized: opening fraudulent new credit lines. Because the harm from identity theft is often delayed, proactive freezing is the correct posture even without specific evidence of compromise.