How to Freeze Your Credit and Report Identity Theft in Canada

Canada’s credit-lockdown toolkit depends on your province: a real freeze in Quebec and (since July 2026) Ontario, and fraud alerts everywhere. The tools that exist are free, fast, and criminally underused. Here’s the real playbook.

If you live in Quebec or Ontario: freeze your file

A security freeze blocks new lenders from seeing your credit file, which stops most new-credit fraud outright. You lift it temporarily when you apply for credit yourself.

• Quebec: free freezes with both Equifax and TransUnion since February 2023
• Ontario: free Equifax freeze since July 1, 2026; TransUnion must offer it by July 1, 2027

Other provinces don’t have a freeze right yet, so use the fraud alert below.

Step zero: the fraud alert (do this today, breach or not)

A fraud alert (potential fraud warning) tells every lender: verify it’s really this person before issuing credit. It’s free, lasts 6 years, doesn’t touch your score, and stops the classic attack — instant credit opened with stolen SIN and name.

• Equifax Canada: online or 1-800-465-7166
• TransUnion Canada: online or 1-800-663-9980
• Place it with BOTH. Lenders pull different bureaus; one alert is half a lock

If your data was in any breach (and if you’ve banked, shopped, or had a phone plan in Canada in the last decade, it was), this is the proportional response — not the paid “credit monitoring” subscriptions sold in the breach apology emails.

Monitor both bureaus for free

You have two credit files, not one, and they diverge. Free access: Borrowell (Equifax, weekly), Credit Karma (TransUnion), or directly from each bureau’s free annual disclosure. The scan takes 5 minutes: unknown accounts, addresses you’ve never lived at, hard inquiries you never made. Catch the anomaly at month one and it’s an afternoon of phone calls; at year two, it’s a nightmare.

If identity theft actually happens: the order of operations

1. Banks and card issuers — freeze compromised accounts; zero-liability covers unauthorized card charges (the dispute rules)
2. Both bureaus — fraud alerts on, fraudulent entries disputed in writing
3. Police report — get the file number; lenders and bureaus require it for fraud removals
4. Canadian Anti-Fraud Centre — 1-888-495-8501; their report strengthens every dispute
5. Every affected lender, in writing — phone calls vanish; letters create the record that fixes your file
6. Email password + 2FA first — your inbox is the reset key to your financial life; secure it before anything else you do online

Prevention worth the effort

• Shred anything with your SIN, DOB, or account numbers — dumpster fraud is not dead
• Never give the SIN to anyone who isn’t an employer, bank, or CRA — it’s not ID, it’s a credit key
• Unique passwords + 2FA on banking and email; breaches make reused passwords into skeleton keys
• CRA My Account secured — benefit fraud via hijacked CRA accounts is one of the fastest-growing vectors; register before a fraudster registers as you

The Canadian system won’t lock your credit for you — but a freeze where your province allows it, an alert on both bureaus, both reports checked twice a year, and a locked-down email account block essentially every common attack. Twenty minutes, zero dollars, once.