How to Check Your Credit Reports for Free (and Why You Should)

About one in five credit reports contains an error, and the FTC's research found that roughly one in twenty consumers had errors serious enough to raise what they pay for credit. Identity thieves, meanwhile, can run an account in your name for months before you'd otherwise notice. The defense against both is the same and it's free: actually pull your reports, on a schedule, from the one legitimate source — and lock the door behind you with a freeze.

This is the guide to getting your reports and protecting them. (Reading the report line by line and disputing what's wrong is its own topic — we cover it separately in our guide to reading a credit report.)

The one real website: AnnualCreditReport.com

AnnualCreditReport.com is the only source authorized by federal law for your free reports from all three bureaus — Equifax, Experian, and TransUnion. What began as one free report per bureau per year became free weekly access during the pandemic, and the bureaus made that permanent. You can now pull any of your three reports essentially whenever you want, at no cost, with no card number required.

Everything else in the search results is either a bureau's upsell page or a lookalike designed to sell you monitoring. If a site asks for payment card details to show you "your free report," you're on the wrong site. No credit card, ever, is the tell. You can also request reports by phone at 1-877-322-8228 or by a mail-in form — useful if the identity-verification quiz locks you out online, which happens if you've moved recently or can't recall an old loan detail. If it does, don't give up: the mail route works with copies of your ID and a utility bill.

One more distinction worth being clear on: your report is not your score. Free-score apps like Credit Karma show bureau data and estimated scores, and they're fine as a rough gauge, but they are not the full report a lender sees, and score-watching is not error-catching. The report is where the problems live.

The frequency strategy: stagger the three bureaus

The three bureaus keep separate files, and they don't match. A collection account or a fraudulent card can appear on one report and not the others. Since all three are free, the smart pattern is rotation:

1. Pull one bureau every four months — say Equifax in January, Experian in May, TransUnion in September. You get year-round coverage for free without doing more work at any one sitting.
2. Put the three dates in your phone calendar right now as recurring reminders. This system fails only when it depends on remembering.
3. Save each report as a PDF when you pull it. If you ever need to dispute something, having last year's clean report is powerful evidence.
4. Break the rotation and pull all three immediately when something happens: a data-breach notice, a collection call you don't recognize, a denied application, a lost wallet, or two to three months before any mortgage or auto loan application, so there's time to fix problems before a lender looks.

What you're scanning for (the five-minute version)

A full read matters before a big loan, but the routine pull is a quick scan for anything that isn't yours: accounts you didn't open, addresses you've never lived at, hard inquiries you didn't trigger, and collections you don't recognize. Those four things are how identity theft and mixed files (someone else's data on your report) announce themselves. If you find one, that's when the dispute process starts — through the bureau's site — and if it smells like fraud, IdentityTheft.gov is the FTC's one-stop machine for reporting it and generating the letters and recovery plan.

Freeze your credit — yes, you, now

A security freeze blocks lenders from pulling your file to open new credit, which stops nearly all new-account identity theft cold. Since a 2018 federal law, freezes are free at all three bureaus, and freezing does not affect your credit score, your existing cards, or your ability to use credit you already have.

• You have to freeze at each bureau separately — three accounts, three freezes: Equifax, Experian, and TransUnion, each on its own site or by phone.
• When you actually apply for credit, you "thaw" the freeze temporarily, online or by app, and it lifts within minutes. Ask the lender which bureau they pull and thaw just that one.
• Keep the PINs or account logins somewhere safe. Recovering bureau credentials is the only annoying part of the system.
• Parents can — and generally should — freeze credit files for minor children. Child identity theft often runs undetected for a decade, until the kid applies for a student loan and discovers a credit history.

Freeze vs. lock vs. fraud alert

The bureaus muddy this on purpose, because one of these is free by law and the others are products:

• Freeze: free, federally mandated, legally binding on the bureau. The one to use.
• Lock: the bureaus' app-based lookalike — similar effect, but governed by a contract rather than statute, and sometimes bundled into a paid subscription. There is no reason to pay for a lock when the freeze is free.
• Fraud alert: free, weaker — it tells lenders to take extra steps to verify identity but doesn't block the pull. A standard alert lasts one year and renews easily; identity-theft victims with an FTC report can get a seven-year extended alert. Useful as a quick measure after a breach notice while you set up freezes; not a substitute for them.

Do you need paid monitoring? Mostly no

The $15-$30 a month monitoring services sell alertness you can largely assemble for free: a freeze (which prevents rather than alerts), the four-month rotation above, transaction alerts your bank and card apps already offer, and free monitoring the bureaus and services like Credit Karma provide anyway. If a company that breached your data offers you a few years of paid-tier monitoring for free, take it — it costs you nothing. Paying for it yourself makes sense mainly if you've already been an identity-theft victim and want the recovery insurance and help-line some plans include, or you simply want the convenience and can spare the money without wincing.

The whole system, assembled: freeze all three bureaus once, set three calendar reminders, pull a rotating report every four months and scan it for strangers. Total cost, zero dollars; total time, about twenty minutes a year — and it puts you ahead of the large majority of people whose first look at their credit report comes courtesy of a loan officer with bad news.