Credit Freeze Australia: How to Lock Your Credit File (2026)

Quick Answer: Australia does not have a formal "credit freeze" system identical to the US model, but all three credit bureaus — Equifax, Experian, and illion — offer credit file suppression or alert services that restrict access to your file and flag unauthorised enquiries. Under the Privacy Act 1988, you also have the right to request a ban on unsolicited credit offers. If you've been a victim of identity theft or suspect your details have been compromised, you can request a credit alert be placed on your file at each bureau, and you can dispute fraudulent enquiries and accounts for removal. Australian Credit Solutions helps identity theft victims clean fraudulent listings from their credit file under the Privacy Act 1988.

Identity theft is one of the fastest-growing financial crimes in Australia. The Australian Bureau of Statistics estimates hundreds of thousands of Australians are affected each year — and credit file fraud is one of the most damaging forms, because it can result in loans, credit cards, and phone plans being opened in your name without your knowledge.

The good news: there are steps you can take right now to restrict access to your credit file, flag suspicious activity, and clean up any damage already done. This guide covers all of them.

Does Australia Have a Credit Freeze System?

Unlike the United States, Australia does not have a legislated "security freeze" that completely locks all access to your credit file. However, each of the three major credit bureaus offers protective measures that serve a similar purpose — and your rights under the Privacy Act 1988 provide additional protection.

The key options available to Australians are:

Credit alerts — A notation placed on your file that flags your file as potentially at risk. Lenders who access your file during a credit check should see this alert and take additional steps to verify identity before approving credit.

Suppression — In cases of confirmed identity theft, bureaus can suppress your file so that it cannot be accessed for lending decisions while an investigation is underway.

Opt-out from prescreening — Under the Privacy Act 1988, you can request that your credit file not be used for prescreened credit offers (unsolicited pre-approved credit marketing).

Fraud dispute removal — Any fraudulent enquiries, accounts, or listings created through identity theft can be disputed and removed from your credit file.

How to Place a Credit Alert With Each Bureau

This is the most immediate protective step if you suspect your identity has been compromised. Here's how to contact each bureau:

When you contact each bureau, explain that you believe your personal information may have been compromised and request a fraud alert be placed on your file. You will need to verify your identity, typically with your driver's licence or passport details.

Do this with all three bureaus — lenders may access any one of the three, so protection at one bureau only doesn't cover you fully.

Step-by-Step: Protecting Your Credit File After a Data Breach or Identity Theft

Step 1: Get all three credit reports immediately

Request your free credit file from Equifax, Experian, and illion. Review every listing carefully — look for credit enquiries you didn't authorise, accounts you didn't open, and addresses or employers you don't recognise on your personal information section.

Step 2: Document everything suspicious

List every enquiry and account you don't recognise. Note the dates, creditors, and amounts. This documentation will be essential for your disputes.

Step 3: Report to the police

If you find evidence that accounts have been opened in your name without your consent, lodge a report with the Australian Federal Police or your state police. You'll receive a report number that you'll need when disputing fraudulent listings.

Step 4: Place fraud alerts with all three bureaus

Contact Equifax, Experian, and illion and request fraud alerts. Provide your police report number as supporting evidence. This prompts the bureaus to flag your file and alerts potential lenders to take extra verification steps.

Step 5: Dispute all fraudulent enquiries and listings

Lodge formal disputes with each bureau for every enquiry or account you didn't authorise. Under the Privacy Act 1988, bureaus must investigate and respond within 30 days. Fraudulent listings — those created through identity theft — should be removed once fraud is established.

Step 6: Contact the creditors directly

Contact each lender or creditor whose name appears on fraudulent accounts. Report the fraud, provide your police report number, and request they close the account and remove any associated listings. Most creditors have dedicated fraud teams.

Step 7: Report to IDCARE

IDCARE is Australia's national identity and cyber support service (idcare.org.au | 1800 595 160). It's free, and their specialists can guide you through the full recovery process and help coordinate with bureaus and creditors on your behalf.

What the Privacy Act 1988 Lets You Do

The Privacy Act 1988 gives Australian consumers specific rights regarding their credit file that provide meaningful protection against identity misuse:

Right to request a ban on direct marketing uses of your credit file — Under the Act, you can opt out of having your credit file used for prescreened direct marketing offers. This is separate from identity theft protection but limits unnecessary exposure of your file.

Right to access your file — You are entitled to a free copy of your credit file from each bureau every three months, with no credit card required and no impact on your credit score.

Right to dispute inaccurate information — Including fraudulent accounts and enquiries. Bureaus must investigate and correct inaccurate information, and fraudulent entries created through identity theft qualify as inaccurate under the Act.

Right to know who has accessed your file — Your credit file includes a list of every entity that has made an enquiry against your file. If you see enquiries from lenders you've never contacted, that's a warning sign to investigate.

What Happens to Your Credit Score During Identity Theft

Identity theft that results in credit file activity can cause significant credit score damage through several mechanisms:

The good news is that fraudulent listings are legally removable. Once identity theft is confirmed and documented, every fraudulent entry — enquiries, accounts, late payments, and defaults — can be disputed and removed under the Privacy Act 1988. Your score should recover substantially once fraudulent listings are gone.

Case Study: Identity Fraud on a Credit File — Fixed in 44 Days

Nathan, a 28-year-old IT professional from Canberra, discovered four credit enquiries and two personal loan applications on his Equifax file that he hadn't made. His score had dropped from 712 to 541 over three months. He had no idea the accounts existed until he was knocked back for a car loan.

Nathan lodged a police report and contacted ACS for help. We identified all fraudulent entries, lodged formal disputes with the relevant bureaus and creditors, and had all four enquiries and both fraudulent loan applications removed within 44 days. His score returned to 694.

The Privacy Act 1988 provides clear grounds for removal of identity fraud listings. Having legal expertise behind those disputes — rather than standard consumer dispute forms — gets results that general DIY attempts often don't achieve on first submission.

Get a free assessment from Australian Credit Solutions →

Ongoing Protection: How to Keep Monitoring Your Credit File

Once you've addressed an identity theft incident — or if you want to proactively protect your file — these are the ongoing steps worth taking:

Monitor your file regularly. You're entitled to a free credit report from each bureau every three months. Space them out — check Equifax in January, Experian in April, illion in July, then rotate. This way you have near-continuous visibility across the year without paying anything.

Use free credit monitoring apps. ClearScore (Equifax data), Credit Savvy (Experian data), and illion's consumer portal all offer free credit score monitoring with alerts when changes occur. These don't replace full file checks but provide a useful early-warning layer.

Be cautious with your personal information. Your credit file is only accessible to entities with a legitimate purpose — lenders, landlords, employers in regulated industries. If you receive unexpected calls or emails asking you to verify financial details, treat them as potential phishing.

Check your mail and bank statements regularly. Unexplained accounts appearing on bank statements, or new cards or letters arriving that you didn't request, are early warning signs of identity fraud before it appears on your credit file.

Frequently Asked Questions

Can I freeze my credit file completely in Australia? Australia doesn't have a legislated full credit freeze system like the US, but you can request a fraud alert or suppression from each bureau — Equifax, Experian, and illion — which restricts access and flags your file to lenders. In confirmed identity theft cases, bureaus can suppress your file entirely during investigation. Contact each bureau directly to request appropriate protections.

How do I remove a fraudulent account from my credit file? Lodge a formal dispute with the relevant credit bureau, providing your police report number as evidence of the fraud. Under the Privacy Act 1988, the bureau must investigate and respond within 30 days. Simultaneously contact the creditor to report the fraud and request account closure. If the bureau upholds the listing, escalate to AFCA for external review.

Does checking my credit file protect me from identity theft? Checking your file doesn't prevent fraud, but it's your best early detection tool. By checking all three bureaus every three months (free under the Privacy Act 1988), you can identify fraudulent enquiries and accounts before they cause serious damage. Earlier detection means faster resolution and less credit score damage.

Who should I contact first if I discover identity theft on my credit file? Contact the police first to lodge a report and get a report number — you'll need this for all subsequent disputes. Then contact IDCARE (1800 595 160), which is Australia's free identity theft recovery service. Simultaneously contact each bureau (Equifax, Experian, illion) to request fraud alerts. If professional help is needed to remove fraudulent listings from your credit file, Australian Credit Solutions can assist under the Privacy Act 1988.

How long does it take to clean up a credit file after identity theft? With proper documentation (police report, correspondence with creditors) and formal disputes lodged correctly, most fraudulent listings can be removed within 30 to 60 days. The Privacy Act 1988 requires bureaus to respond to disputes within 30 days. Complex cases with multiple fraudulent accounts across several bureaus may take longer, particularly if creditors require additional investigation.

Will identity theft affect my credit score permanently? No. Once fraudulent listings — enquiries, accounts, late payments, and defaults — are removed from your credit file, the associated score damage is reversed. Your score should recover substantially after removal, though the exact recovery depends on what else is on your file. The key is acting quickly to minimise the period these fraudulent listings are active.

Australian Credit Solutions specialises in removing fraudulent credit file listings for identity theft victims under the Privacy Act 1988. Our lawyer-led team operates on a No Win No Fee basis — you only pay if we successfully remove listings — and has a 98% success rate on accepted cases.

Get My Free Assessment → 📞 0489 265 737 🛡️ ASIC Licensed ACL 532003 | ⭐ 4.9/5 from 976+ Reviews | 🏆 Award Winner 2022–2024

Australian Credit Solutions Pty Ltd holds Australian Credit Licence ACL 532003. Credit repair services are subject to individual assessment. Results may vary. This article provides general information only and does not constitute legal or financial advice.

Related reading: Credit Repair After Identity Theft → | Privacy Act Credit Rights Australia → | How to Check Your Credit Score Free →