Someone opened a card in your name. You found out from a collections letter. Now you want to know how an extended fraud alert works. Fair question. Here is the honest state of the research: the federal guidance reviewed for this piece confirms that fraud alerts exist as a protective tool. It does not explain the extended version. So this article covers what is confirmed, what is missing, and what to do first while you check the rest at the source.

Overhead view of a desk with an opened collections letter, handwritten call notes, and a phone receiver off its cradle, representing the early paperwork of an identity theft case.
The early paperwork of an identity theft case: an opened collections letter, call notes, and a phone.

What the sources confirm about fraud alerts

The Consumer Financial Protection Bureau lists placing fraud alerts or security freezes on credit reports among the steps identity theft victims can take. Two options, side by side. That tells you a fraud alert is one choice, not a required ritual. You can read the CFPB's full answer on its identity theft victim page.

The CFPB also treats the alert as one piece of a longer sequence. Close compromised accounts. Report the theft to local police and at IdentityTheft.gov. Call the security or fraud departments of your financial institutions right away. The alert does not replace any of those steps.

Reporting at IdentityTheft.gov produces an Identity Theft Report and a recovery plan with steps to follow. Whether that report is needed for a particular type of alert is not stated in the material reviewed here. Do not assume either way. Confirm it with the bureau or the FTC before you place anything.

What the sources leave unanswered

Experian and Equifax both publish pages on fraud alerts. Their titles point to the questions you would expect: what an extended fraud alert is, whether alerts expire, and how alerts differ from freezes. But the text available for this article was page titles and menus. No explanations came through, so none are relayed here. That includes the duration, the eligibility rules, and any cost.

That leaves a list of gaps. Treat each one as unknown, not as a quiet yes or no.

  • How long an extended alert lasts, and whether it expires on its own.
  • Who qualifies, and what proof is needed.
  • How to place one with each credit bureau, and the bureau contact details.
  • How it differs from an initial alert and from a security freeze, including effects on credit applications.
  • Whether any fees apply.

The CFPB text was cut off before its list of bureaus. The FTC page on credit freezes and fraud alerts matches the topic by title, but its usable text was navigation only. A federal summary of identity theft rights, referenced through Innovis, could not be read at all. The FTC page is the best first stop for the government's own wording.

How to think about choosing between options

This article cannot tell you whether an extended alert, an initial alert, or a freeze fits your situation. The sources do not compare them in usable detail. Pretending otherwise would be the first mistake.

A sensible order is short. Start with the one distinction the CFPB does draw: alerts are one category, freezes are another. Then read the current explanations straight from the FTC and the bureaus. Check the Experian fraud alert page and the Equifax alert page at the time you decide, since terms can change. Equifax also has a plain-language piece, 7 Things to Know About Fraud Alerts.

When you read them, write down the answers to the gaps above. Duration, proof needed, cost, and how each option affects new credit applications. Those four items decide most of the choice. This is educational only, not personal financial, legal, or tax advice. If your case is tangled, a qualified professional can review the specifics.

Questions to ask before acting

Do the first things first. Two questions, both drawn from the CFPB's guidance:

  1. Have the affected accounts been closed, and have the fraud departments of the financial institutions been contacted?
  2. Has the theft been reported at IdentityTheft.gov, so you have an Identity Theft Report and a recovery plan?

Then keep records. Date, who you spoke with, what they said, what you sent. Dull work. It also shows you what is done and what is left, and it gives you something concrete to hand over if a bureau asks for proof.

Warning signs of scams during identity theft recovery

Victims make good targets. The second scam often arrives right after the first. Watch for these red flags:

  • A caller claims to be the FTC and says your information was used to open accounts.
  • Anyone demands you transfer money to "protect" it.
  • Anyone tells you to withdraw cash or buy gold.
  • A message pushes you to call a number or click a link it supplied.

The FTC says it never threatens people, never asks them to move money for safety, and never tells them to withdraw cash or buy gold. Scammers have also posed as the CFPB, other agencies, law enforcement, and financial institutions. The CFPB's advice is plain: reach agencies and institutions only through their official websites and phone numbers, not the ones an unsolicited contact hands you.