Someone opens a credit card in your name, and you find out weeks later when a collection notice arrives. Speed matters when your identity is stolen. So does knowing which protective flags exist. One option is an extended fraud alert, a marker on a credit report that is meant to make it harder for a thief to open new accounts.

Close-up of a hand holding a folder with a red tab on a desk, symbolizing a flagged credit file that requires extra verification.
A credit file flagged for security requires lenders to take extra verification steps before approving new lines of credit.

The sources we reviewed describe an extended fraud alert as an alert that lasts longer than the initial one and is tied to identity theft victims. They do not spell out every rule. Treat this article as a starting point, not a full rulebook. Details can change, and the agencies themselves are the place to confirm them.

The Federal Trade Commission covers the basics on its consumer page on credit freezes and fraud alerts. Read it directly before you file anything. The text available to us cut off before the section on alert types, so we cannot quote its specifics here.

How long an extended alert lasts

This is the question most readers ask first, and the sources we reviewed do not answer it. They do not give a duration for an extended alert. They also do not say how an alert is renewed or removed.

What they do say is that an extended alert runs longer than an initial one. That is the one firm point. For exact timing, check the FTC page above or the bureau pages listed below, and ask each bureau when your alert will expire.

Cost is another gap. None of the sources we reviewed state what, if anything, it costs to place an extended alert. Ask before you agree to anything. Be wary of any third party that wants payment to place a flag on your file, and start with the official channels instead.

The sources also do not say whether an extended alert brings extra rights, such as removal from marketing lists or additional free reports. Ask each bureau what comes with the alert rather than assuming.

Who qualifies and what you need

The sources tie extended alerts to identity theft victims. They do not lay out the full qualification rules or the documentation a bureau will ask for. Expect to be asked for proof, and confirm what kind with the bureau.

The CFPB gives a clear order of actions in its advice for identity theft victims. Close compromised accounts. Report the theft to local police and at IdentityTheft.gov. Then place fraud alerts or security freezes on your credit reports.

Reporting at IdentityTheft.gov produces an Identity Theft Report and a recovery plan that lists the steps to take. Keep that report. It is likely to be useful when you deal with the bureaus, though the sources do not say it is required for an extended alert.

A sensible sequence based on the CFPB guidance:

  1. Close accounts that show fraudulent charges or unauthorized openings.
  2. Report the theft to local police and at IdentityTheft.gov.
  3. Save your Identity Theft Report and recovery plan.
  4. Contact one of the three nationwide credit reporting companies to start the alert process.
  5. Ask what documentation that company needs and keep a record of the call.

The CFPB text available to us cut off before naming the step after contacting a bureau. Write down confirmation numbers and the names of the people you speak with.

Alerts, freezes and other options

A fraud alert is one of several tools. The CFPB says victims can place fraud alerts or security freezes on their credit reports. The two work differently, and the sources only point to comparison pages rather than explaining the full differences in duration and effect.

Experian has a dedicated page on placing a fraud alert, and it is a useful place to compare an alert with a freeze. Equifax also offers requests on its fraud alert and active duty alert page. These are bureau pages, listed here for information only.

Equifax treats active duty alerts as a separate type. If you are a service member, check whether that option fits your situation better.

  • Initial fraud alert: the shorter alert.
  • Extended fraud alert: the longer alert, tied to identity theft victims.
  • Security freeze: a separate tool that the CFPB lists alongside alerts.
  • Active duty alert: a separate type described by Equifax.

One open question is whether placing an alert with one bureau carries over to the others. The sources reviewed do not answer it. Ask when you call, and consider confirming with each of the three bureaus so you are not left guessing.

Impersonation scams that target victims

Victims often get a second round of attention from scammers. The CFPB warns that some pose as FTC staff, say someone used your information, and demand money transfers, cash withdrawals or gold purchases. The FTC never does these things.

If someone contacts you unexpectedly and demands payment or money transfers to secure your credit file, hang up.

Scammers also pose as banks, card issuers and other financial institutions. Do not trust caller ID. Verify contact through official websites and phone numbers, such as the number printed on your card or statement.

Keep your paperwork in one folder. Include your Identity Theft Report, any police report, bureau confirmations and your call notes. Once you learn your alert's expiration date from the bureau, put a reminder on your calendar well ahead of it.