These services watch and alert after something has already happened. Here is how that differs from tools that block new-account fraud, and which protections cost nothing at all.
The ads tend to show up right after a headline-making breach: sign up, and get an alert the moment someone tries to use your identity. Identity monitoring is a genuine category of paid service, but the marketing blurs what these services detect with what they prevent. Most of what they sell is detection, and detection after the fact. The clearest prevention tool available to consumers, a credit freeze, costs nothing.
What Identity Monitoring Watches For
Identity theft is what happens when another person uses details about you, financial or otherwise, without asking. That can mean something as ordinary as a credit card number or as sensitive as a Social Security number, and the misuse may not be obvious right away. One of the clearest warning signs is entries on a credit report for accounts you never opened.
Paid monitoring works by watching for changes and reporting them. In its most basic form, a credit monitoring service charges a subscription to keep an eye on your credit reports and notify you when the accounts shown there change. Alerts typically arrive by email, text message, or phone call. Depending on the plan, a service may also advertise wider watching, such as checks for your email address, phone number, or other details showing up where stolen data gets traded. Treat those claims as a starting point and ask exactly what the service scans, how often, and what triggers an alert. A company that cannot answer those questions concretely is not offering much.
Credit Monitoring, Identity Monitoring and Dark Web Scans
Three labels get used loosely, and they are not the same thing.
Credit monitoring is the narrowest and the most clearly defined. It tracks your credit reports and flags changes to the accounts shown there. Costs differ a lot from plan to plan, and some run past $15 a month.
Identity monitoring is the broader umbrella. Plans under this label typically cover more than credit files, checking whether personal details such as email addresses or phone numbers appear in places the service monitors. The specific coverage varies by company, so read the plan description rather than the category name.
Dark web scans are the vaguest of the three. A service advertises that it checks whether your details show up where stolen data is bought and sold. A positive finding tells you information has leaked. It does not tell you who has it or whether anyone will use it, and a clean result does not prove your information is safe.
| What you pay for | What it watches | What an alert tells you |
|---|---|---|
| Credit monitoring | Changes to accounts on your credit reports | Something changed on a report, such as a new account |
| Identity monitoring | Your details across a wider set of places the service checks | Your details turned up somewhere, not who used them |
| Dark web scans | Whether your details appear where stolen data is traded | Your data has leaked; it says nothing about future use |
No service watches everything. Creditors are not required to report to every credit reporting company, so activity can exist off the reports a service monitors. Beyond the three nationwide bureaus, there are also specialty consumer reporting companies that build files for employment screening, tenant screening and other industries, and you have the right to request those reports yourself. Most paid plans do not cover them.
What Monitoring Cannot Do: It Doesn’t Prevent Theft
The Consumer Financial Protection Bureau puts it plainly: most monitoring services will not stop your personal information from getting stolen. What they do is tell you about it afterward. An alert is a notification that something has already happened.
An illustration of the difference. Suppose a thief obtains your Social Security number and applies for a store credit card. With credit monitoring, you would get an alert once the inquiry or new account appears on a report. The application has already been filed, and the damage is underway. Your job at that point is to respond. With a credit freeze in place at all three bureaus, no new credit account can be created in your name, even by you. The lender cannot reach your report, so the application stalls before it starts. If you later apply for credit, a job, an apartment or insurance, you temporarily lift the freeze and put it back when you are done.
The freeze has three other things going for it. Placing it or removing it costs nothing. It leaves your credit score untouched. And you never need a breach or a theft as a reason; anyone can freeze their credit at any time, and it stays in force until you remove it.
Worth doing
Freezing your credit costs nothing, works the same way at Equifax, Experian and TransUnion, and leaves your score untouched. It stays in force until you decide to remove it, and you never need a breach as a reason.
Free Coverage You May Already Have
Several of the things paid services sell are available directly, at no cost.
- Free weekly credit reports. You are entitled to a free credit report from every one of the nationwide credit bureaus each week. Federal law separately guarantees a free copy from each bureau every 12 months, and the FTC points to AnnualCreditReport.com as the source for a report that is genuinely free.
- A security freeze. Placing a freeze at Equifax, Experian and TransUnion cuts off third-party access to your reports, which in most cases keeps fraudulent credit accounts from being created.
- A fraud alert. If you believe you are a victim of identity theft or fraud, a fraud alert makes lenders take steps to confirm who you are before granting new credit. An initial alert stays in place for up to one year unless you remove it sooner. Unlike a freeze, it does not keep businesses from seeing your credit report.
- An opt-out from prescreened offers. Those “prequalified” credit and insurance mailings come from lists the bureaus sell. You can opt out for five years at optoutprescreen.com or by calling 1-888-5-OPT-OUT. Opting out leaves other unsolicited offers untouched, and prescreening itself does not hurt your credit score.
- A free recovery plan. IdentityTheft.gov is the federal government’s central resource for reporting and recovering from identity theft. It offers step-by-step guidance, printable checklists and sample letters, all at no charge.
Put a weekly report review next to a standing freeze, and you have built most of what a paid plan sells, yourself.
What an Alert Actually Requires You to Do
An alert is a starting gun, not a solution. Whatever the alert says, the response work lands on you. A reasonable sequence:
- Verify the alert on your own terms. Go to the service’s app or website directly rather than calling a number or clicking a link in the message. Impersonation is a staple of fraud, and a supposed security alert is a common way in.
- Pull your credit reports. Look for accounts you never opened and anything else that is not yours.
- Read your statements. Go through your card and bank statements and flag any charge or withdrawal you do not recognize to the institution.
- Act on what you find. If the alert points to a real problem, report it. Identity theft can be reported to the FTC at IdentityTheft.gov or by phone at 1-877-438-4338, which produces a recovery plan.
Keep scammers in mind as well. A call that claims your identity was stolen and offers to fix everything, for a fee or for your account numbers, deserves the same skepticism as any other unsolicited call. Our article on how tech support scams work covers the playbook.
The Cost Question Before You Subscribe
Some monitoring services cost over $15 a month, which adds up to more than $180 a year for a service that tells you about theft after it happens. That is not automatically a bad deal for everyone, but it should be weighed against the free stack above, which covers the same core credit reports.
Before you sign up for anything:
- Check what “free” actually means. The CFPB suggests reading the fine print on any free monitoring offer, watching for charges tucked in or conditions on getting out, and asking your local consumer protection agency and State Attorney General whether complaints have been lodged against the company.
- Know how to leave before you join. Cancellation rules differ from one company to the next, so find the exit steps before you hand over payment details. If a renewal charge goes through anyway, our guide to canceling online subscriptions sets out what the law gives you.
- Be skeptical of repair upsells. Paying a credit repair company buys nothing you cannot do on your own, typically for free or close to it. No company can erase accurate negative marks from your report, and the law forbids one from demanding payment up front before doing any work.
- Know what an Identity Theft Report can and cannot do. Victims can use one to keep debts that came from identity theft off their credit reports. Using one to block debts you actually owe is against the law.
If You Get an Alert, Where to Start
If an alert turns out to be real, IdentityTheft.gov is the first stop. The site walks you through reporting the theft, produces an Identity Theft Report and hands you a personalized recovery plan with printable checklists and sample letters. From there:
- Ask each of the three credit bureaus to add a credit freeze and a fraud alert to your files.
- Get in touch with the fraud teams at your card issuers, your bank, and any other company where you hold an account.
- If you find errors on your credit report, dispute them with both the credit bureau and the company that supplied the information. The bureau has 30 days to investigate and correct anything that turns out to be wrong.
- If the problem is tax-related identity theft and you have not heard from the IRS, filing Form 14039, the Identity Theft Affidavit, can void a fraudulent return filed with your details.
- If a dispute goes nowhere, the Consumer Financial Protection Bureau takes complaints about credit reporting online.
One more thing worth doing: request your reports from the specialty consumer reporting companies too. The CFPB maintains a list of these companies, which includes employment screening and tenant screening firms, and reviewing those files can surface problems a credit-focused alert would never catch.
Detection has its place, but the account hygiene around it matters more. Old, forgotten accounts are one of the places personal data leaks from, so it pays to clean up old online accounts before they leak. And if a breach has you rethinking how you handle logins in the first place, our checklist on what to check before you install a password manager is a sensible next read.
The essentials
- Credit monitoring is a paid service that tracks your credit reports and sends alerts when they change, and some plans run past $15 a month.
- Monitoring services generally cannot stop your information from being stolen; their alerts arrive only after a theft has already happened.
- A credit freeze at all three bureaus costs nothing to add or remove, leaves your score untouched, and keeps new credit accounts from being created.
- You can pull a free credit report from each of the three nationwide bureaus every week, and a bureau has 30 days to investigate a dispute.
- Report identity theft at IdentityTheft.gov or by calling 1-877-438-4338 to get a free recovery plan, checklists and sample letters.
Reader questions
Will identity monitoring stop someone from opening a credit card in my name?
No. Monitoring alerts you after changes show up on your credit reports. A credit freeze, which costs nothing to place at all three bureaus, is the tool that stops those applications before they start.
Is a credit freeze the same as a fraud alert?
No. A freeze cuts off access to your credit reports so new accounts cannot be opened, while a fraud alert makes lenders take steps to confirm your identity first. An initial fraud alert stays in place up to one year unless you remove it sooner.
Do I have to pay to check my own credit reports?
No. You can pull a free report from each of the nationwide credit bureaus every week, and federal law also guarantees a free copy from each bureau every 12 months.
What should I do first if a monitoring alert turns out to be real?
Report the identity theft at IdentityTheft.gov or call 1-877-438-4338 to get a recovery plan. Then place a freeze and fraud alerts with the three credit bureaus and get in touch with the fraud teams at your bank and card issuers.
We describe how services generally work; features, settings and terms change often, and they differ between companies. This is general information, not legal advice. Check the provider’s current policies and official sources such as FTC.gov.