Equifax: fraud or scam
For identity theft, place a free fraud alert (one bureau tells the other two) and a free security freeze at each bureau.
What does this mean?
Grade A (high: almost everything comes from official pages read directly). 100% of 46 sources are the organization's own pages or government sites.
Collect
- FTC Identity Theft Report or police report (for an extended alert)
- copy of government ID
- proof of address
Steps
Place an initial fraud alert online, by phone or by mail. Equifax sends the request to Experian and TransUnion.
Place a security freeze with Equifax. Repeat at Experian and TransUnion, because a freeze is per bureau.
For a 7-year extended alert, send the Extended Fraud Alert Request Form with a police report or FTC Identity Theft Report.
MailInitial fraud alert or active duty alert by mail Equifax Information Services LLC, P.O. Box 105069, Atlanta, GA 30348-5069Dispute accounts you did not open.
More contacts for this issue
Facts you can cite
- Limit
An initial fraud alert or active duty alert lasts one year; identity theft victims with a police or FTC identity theft report can request a seven-year extended fraud alert.
Source: equifax.com, verified 2026-10-12
- Process
When you place an initial alert with one bureau, that bureau sends a request to the other two bureaus to do the same.
Source: equifax.com, verified 2026-10-12
- Deadline
A bureau must place a freeze within one business day of a phone or online request and lift it within one hour; for a mailed request it has up to three business days.
Source: consumerfinance.gov, verified 2026-10-12
- Fee
Placing, temporarily lifting, or removing a security freeze with Equifax is free.
Source: equifax.com, verified 2026-10-12
- Fee
Fraud alerts, extended fraud alerts and active duty alerts with Equifax are free.
Source: equifax.com, verified 2026-10-12
If that fails, escalate
Go up one step at a time. Keep the reference numbers and dates from each contact.
Written complaint
Or dispute by mail (dispute-mail). Also dispute with the company that supplied the data.
Federal regulator
State agency
Your state’s attorney general. Find it in the list of state agencies (also as JSON:
states/<code>.json, for example states/ny.json).Small claims court
Watch out
- Online disputes, freezes and fraud alerts need a myEquifax account (age 18 or older), which the account holder must create and sign in to.
- Disputes may need uploaded identity or address documents, such as a driver's license or utility bill.
- The freeze phone line asks the caller to verify identity, so the account holder must call.
- A fraud alert needs an active Equifax credit file.
Let your AI agent handle this
Escalate Anything is a free, open-source MCP server for Claude, Cursor, VS Code, Gemini CLI, Codex and other AI apps. Your agent gets this playbook, keeps a case log with reference numbers and follow-up dates, and drafts each message for you to approve.
1. Set it up (needs uv):
uvx escalate-anything setup2. Ask your agent:
I lost [amount] to a scam through Equifax on [date]. Use Escalate Anything to try to get it back.Source code, other install options and the Claude Code plugin