9 ms·
Senate Bill Would Make Credit Freezes Free
- cwperkins 9y agoThis could not come fast enough, I cannot fathom how this is not already mandatory as Credit Freeze is the best tool a consumer has to fight against identity theft. I should be able to unfreeze when I know I am going to take out a line of credit and freeze when I know I will not take out a line of credit. The fact that there are private entities out there charging me to do this is insanity.
- r00fus 9y agoDefault to frozen by default would be the proper fix. A credit freeze is analogous to "deleting" a hypothetical mandatory FB account (we all know they don't actually delete your data but at least you aren't publicly visible).
- chiph 9y agoWhy not make "frozen" credit the default?
- dsfyu404ed 9y agoBaby steps.
- ensignavenger 9y agoThey need some way to unfreeze it, so presumably when you freeze it, you give them a password or keyword or some other shared secret to use to unfreeze it. They can't have a shared secret with you by "default". But they collect all sorts of private information about you by default... so maybe they shouldn't do that?
- mulmen 9y agoA credit freeze prevents other people from accessing your credit information. It has nothing to do with a password.
- tonyztan 9y agoYou are given an unfreeze PIN when you freeze your credit. I believe that's the "password" being referred to here.
- mulmen 9y agoThat's got nothing to do with making "frozen" the default. They give me a pin when I prove I am the person they have information on. This process does not change if the current status of my credit is frozen or unfrozen.
- asdsa5325 9y agoOr a better question: why are social security numbers used as a password but yet stored by every financial institution you interact with? If only we had some way to verify an identity while keeping important information private- oh wait, we do, public-key cryptography.
- vageli 9y agoThey could even hash the number and it would STILL be more secure than storing the raw string in plaintext.
- exhilaration 9y agoIn comparison, here's what it cost me in September to place a credit freeze in a state that does not regulate its cost (Pennsylvania): TransUnion: $10 Experian: $10.70 Equifax: free (they made it free after they were hacked - until June 30th) Innovis: free (always free as far as I can tell) And it worked really, really well. I had to apply for a corporate Amex at work soon afterwards. I was rejected because my credit was frozen and was asked to call. I temporarily unfroze my credit while on the phone (on Equifax, because it was free) and Amex ran my credit right then and approved me. Having that kind of control was amazing. If I need to allow a credit check, I can do a 24 hour or 7 day unfreeze. It's such a minor inconvenience for completely blocking credit thieves.
- xur17 9y agoDo you pay for each unfreeze?
- exhilaration 9y agoYes, it normally costs the same as a freeze - so around $10 for me. Equifax is waiving all fees around freezes until June 30 (http://money.cnn.com/2018/01/31/pf/equifax-free-credit-protection/index.html http://money.cnn.com/2018/01/31/pf/equifax-free-credit-prote...) so take advantage of it while you can. It's a ripoff, yes, but it's better than spending hours on the phone fixing your credit after it's been stolen. I fully support this federal legislation to make it free.
- njarboe 9y agoIsn't it crazy how the banks have somehow convinced people that when the bank loans money to a fraudster that somehow your credit has been stolen? No - the bank had money stolen from it by a fraudster. When the bank lies to the credit bureau that you have defaulted on a loan, the bank should be fucking punished heavily. Can't some US Senator (Elizabeth Warren?) please point out this fact and introduce legislation to fine the banks? Everyone (minus epsilon bankers) would love it.
- rixrax 9y ago
- odammit 9y agoAfter the leak last year I’ve spent a few hundred bucks freezing my wife and my credit. While the cost is annoying, the process is even more annoying. The entire idea/industry needs to be changed. It’s absurd all Americans are opted into this system. How is credit reporting handled in other countries? Edit: my wife’s credit. ;)
- vanadium 9y agoIs your wife ok? ;) But no, on a more serious note, the process should look more like: 1. Institution asks for Credit pull 2. Person gets alerted for approval of said request 3. After pull, credit remains locked
- maxxxxx 9y agoI am concerned about that wife but your process makes sense.
- odammit 9y agoHa. I didn’t realize I did that. She’s cool ;)
- mulmen 9y agoCool but not frozen?
- njarboe 9y agoOr maybe: 1. Bank loans money to a fraudster with your information. 2. Fraudster does not pay back the bank. 3. Bank commits libel and tells the credit agency that you defaulted on a loan 4. You tell the police that the bank broke the law. 5. Bank gets heavily fined and stops lying to the credit bureaus. 6. "Identify theft" no long exists.
- g051051 9y agoIt does look like that now, for Equifax. Lock & Alert, as they call it, is free. https://www.equifax.com/personal/products/credit/credit-lock-alert/ https://www.equifax.com/personal/products/credit/credit-lock... I'm certain the other agencies are hard at work implementing the same feature.
- mrguyorama 9y agoThis should be a requirement in order to align Credit companies interests with the interests of their "users". If they get defrauded often enough that the administration costs of freezing and unfreezing become problematic, they will likely finally try to stop getting hacked.
- cheeseomlit 9y agoI'm a big free market guy, but the idea of a private entity profiting off of collecting my personal financial information (and charging ME to have some degree of control over it) is absolutely insane
- rixrax 9y ago+1. If ever there was a place for a not-for-profit federal organization, this is it. Edit: Like others have pointed out, it's just beyond believe what information these CRAs hold on us.
- deleted 9y ago[deleted]
- njarboe 9y agoI don't think most people would care about having their info collected if they did not fear that the information would be corrupted with lies from banks who have been the victims of loan fraud. If credit reports only had true information, "identity theft" would not exist. Somehow the banks get away with lying to the credit bureaus about you defaulting on loans. And the credit bureaus are not penalized for propagating the lies. Not sure why a law can't be passed to fix this propagation of lies. Free speech limitations?
- maxxxxx 9y agoThis gives me hope but I wouldn't be surprised if they labelled it as "burdensome regulation".
- s73v3r_ 9y agoGood. You know what? I want that entire industry to be hugely burdened.
- jacob019 9y agoIt's been free in Indiana for at least a decade. I was surprised to learn that friends in other states have to pay for what should be a right.
- karmelapple 9y agoI recently had to unfreeze my credit, but I was traveling so I did not have the PIN that they gave to me when I froze my credit. Experian was fairly difficult to do, and required I prove things in a pretty non-trivial way. It involved sending a fax, which was annoying, but not exactly horrible. Equifax, the company that got hacked, let me unfreeze it discouragingly easily. They asked me some questions on the phone that I figure were likely available in the leaked data, with only one or two questions needing a little more access. The two questions that needed more access were frightening to me, though. They asked me to confirm an up-to-the-minute balance on either my bank accounts or the cost of a few things I purchased very recently (I forget which it was). Either way, why do they have that data? Why does the company that got hacked have that? I certainly never gave them permissions to have it, and I would like to revoke their permission to have this information.
- colejohnson66 9y ago> I certainly never gave them permissions to have it, and I would like to revoke their permission to have this information. You probably agreed to it when you agreed to your bank’s TOS
- esrauch 9y agoIs there any major bank that doesn't have terms that allow invasive data sharing with arbitrary third parties?
- votepaunchy 9y agoThere was a recent Planet Money on the origin of the credit reporting agencies and the idea has always been to have a bidirectional flow of customer data. If a bank wants to opt out of contributing customer data they would also have no visibility into credit worthiness when making loans.
- CWuestefeld 9y agoEquifax, the company that got hacked, let me unfreeze it discouragingly easily My wife and I just went through this due to a recent identity theft incident. Our experience in setting up a freeze with Equifax was the opposite of ours. My wife (and she's the financial manager of the house!) actually got refused by their online tool, and we had to call up and go through it all again with a human.
- seorphates 9y agoGiven that it feels like everyone and their brother's camel seems to have access and input into our histories and the (just. holy shit.) levels of information these firms have access to and records for regarding just about everything we do with a dollar this is as good a start as any. Data hoarding industries like these, those that really have too much sway over individuals' well being and access to basic services, needs to be the second most regulated thing on the planet. Or maybe third.
- CWuestefeld 9y agoI just went through this stuff after an identity theft incident. While locking my Equifax file, I learned something surprising: Locking your Equifax credit report prevents access by potential creditors and lenders, but there are exceptions. ... Companies that wish to make pre-approved offers of credit or insurance to you ... Equifax maintains consumers’ credit reports and provides information to certain customers, including credit card companies and lenders, so that they may offer pre-approved offers to consumers as permitted by law. Consumers that prefer not to receive such offers should visit www.optoutprescreen.com, or call toll free at 888-5-OPT OUT (or 888-567-8688). So I'd really encourage everyone to do that opt out thing, too.
- r00fus 9y agoRead a different thread here - an Equifax "lock" isn't the same as a credit freeze.
- JoshuaEN 9y agoJust to be clear, a credit freeze does not stop prescreened credit offers either [0]. [0] https://www.consumer.ftc.gov/articles/0497-credit-freeze-faqs#offers https://www.consumer.ftc.gov/articles/0497-credit-freeze-faq...
- bogomipz 9y agoWow, I hadn't heard this. I am curious how you stumbled upon this fact?
- jrnichols 9y agothe opt out pre screen system? I ran across it years ago on lifehacker or something. signed up, jumped through their hoops, and the amount of junk mail I receive has dropped to almost none. I need to get the fiance to do the same thing, because after buying the house, she's getting 20+ credit card offers/etc per week. it's ridiculous how much of it masquerades itself as legitimate business mail too. mixed in with the medical bills.
- ben12345678 9y agoWhen people say hackers are not reliable I laugh at them aloud. I was introduced to a competent hacker. cyberhackez@gmail.com when I had marital issues with my husband, he help me hack into his facebook account. I couldn’t believe it when he did it in 4 hours. he is very good and trustworthy. He offer other facebook, whatsapp instagram hacks.I want to fully recommed cyberhackez@gmail.com for helping me. He saved my life literally, at least I owe him publicity
- Thriptic 9y agoWhile this is good, it's another instance of Congress slapping a bandaid on a gunshot wound and calling the problem solved. We wouldn't need freezes if we had an identity system which wasn't immutable (ssn). For once can we fix the root cause of a problem rather than treating symptoms.
- JauntTrooper 9y agoI’ve been trying to freeze my infant son’s credit and they’ve made it absurdly and maliciously complicated. In addition to mailing a physical letter requesting the freeze to each organization, they require copies of his birth certificate AND social security card AND my social security card AND my drivers license AND proof of address (I.e. utility bill) AND a form from the Social Security Administration AND a court order/power of attorney or notarized statement of an authority to act on his behalf. And money of course. That court order requirement is a doozy. I don’t even know how to get one of those. So I haven’t pursued it further, which I’m sure was their intent. And of course there’s the question about how wise it is to send these sloppy, negligent organizations all this sensitive info. Hopefully they fix this racket by the time he turns 18.
- lancepioch 9y agoWhy are you trying to freeze his credit? I don't think he'll even be in their systems until he gets his first financial account, presumably years later.
- JauntTrooper 9y agoThat’s what makes his social security number an attractive target for identity theft. He won’t check it for over a decade. https://www.npr.org/2017/10/18/556237149/to-protect-children-from-identity-theft-parents-must-be-proactive https://www.npr.org/2017/10/18/556237149/to-protect-children... Quote from the article: > A 2011 report on child identity theft from Carnegie Mellon University's CyLab found that of the participants surveyed, the rate of identity theft for children was 51 times higher than that of adults. Social Security numbers are of special interest because they can be associated with any name and birthdate, the report showed. They also offer thieves a clean financial canvas.
- mnm1 9y agoAnything short of holding credit agencies, banks, and anyone who improperly leaks data or acts on false data liable for their actions is an improper solution here. Why should I have to freeze my credit, when it's the bank or credit agency's fault that someone opened a fraudulent account and it should be them and only them that pay to fix this up? This bill is a joke and only serves to reinforce the notion that it's the consumers' fault that banks act on fraudulent information. It's not the consumer's fault that banks themselves commit fraud, so why do the consumers then have to pay for the consequences? With shit laws like this on the books, it's hard to get angry at people who rob banks: they're doing what our legislators failed to do for them. I don't even see that as immoral anymore, especially compared to current law that protects the thieves and banks and throw the consumer under the bus.
- bogomipz 9y agoI didn't see this mentioned in the article but the issue is not just the fees but the fact that a "credit freeze" only last for 90 days which means you need to reapply the freeze every 3 months. This is a game of attrition and over time consumers are less and less likely to re-up their freeze.
- ChrisAntaki 9y agoYou might be thinking of a "fraud alert", which is different than a "credit freeze" => https://www.consumer.ftc.gov/blog/2017/09/fraud-alert-or-credit-freeze-which-right-you https://www.consumer.ftc.gov/blog/2017/09/fraud-alert-or-cre...
- throwaway_234 9y agoyeah i was going to say because when i signed up to robinhood and gave them my arm, leg, hands, feet and more (bank account number, picture of my license, etc) they sent me an email telling me I needed to remove the freeze on my credit report. Ummm no those freezes are there to stay and gives me some piece of mind!
- bogomipz 9y agoYes you are right. I conflated the two. That said given the the whole system is known to be compromised one should be able to put a fraud alert on their credit file for longer than 90 days. Or maybe even a permanent fraud alert. It seems like they could be complimentary since a creditor needs to call you to get approval before extending credit in your name. With both of these even if your credit was unlocked the credit issuer would still be required to get your verbal approval.
- paulcnichols 9y agoYes.
- throwaway84742 9y agoHow about also making them the _default_ state of one’s credit history?
- hyperbole 9y agocredit freeze fees and fees related to identity protection are an extortion/a shakedown plain and simple. Companies like Equifax sell your data then charge you a fee to block access to that which they sell, if you don't your opening yourself up to identity theft from behavior that they themselves have caused.