Credit Freeze (Business)

A business credit freeze restricts new credit inquiries on a business's commercial credit file at Dun & Bradstreet, Experian Business, and Equifax Business — preventing new credit accounts from being opened fraudulently. Unlike personal credit freezes, business credit freezes are NOT federally mandated under FCRA (15 U.S.C. § 1681 et seq.) and are offered at each bureau's discretion.

The Fair Credit Reporting Act (FCRA, 15 U.S.C. § 1681 et seq.) grants consumers the federally mandated right to place a security freeze on their personal credit files at the three major consumer bureaus (Equifax, Experian, TransUnion). The CFPB enforces FCRA at consumerfinance.gov/consumer-tools/credit-reports-and-scores/. Personal credit freezes became free in 2018 under the Economic Growth, Regulatory Relief, and Consumer Protection Act. Business credit files — maintained by Dun & Bradstreet (dnb.com), Experian Business (experian.com/small-business), Equifax Business (equifax.com/business), and the Small Business Financial Exchange (SBFE, sbfe.org) — are not covered by FCRA. There is no federal statutory right to freeze a business credit file. Each bureau decides independently whether to offer business security freeze products, and availability, process, and cost vary. Dun & Bradstreet: Businesses can request corrections to their D&B file and may be able to limit certain disclosures, but D&B does not offer a formal security freeze equivalent. Businesses can monitor their D&B file through CreditSignal or D&B Risk Manager. Experian Business: Offers a 'Business Credit Lock' product through Experian's business credit portal that restricts new inquiry access to the business's commercial credit file. Equifax Business: Offers business credit monitoring but limited freeze functionality. For business identity theft — where fraudulent entities open credit accounts or file false UCC liens in a business's name — the primary remedies are: (1) direct dispute with each bureau; (2) Secretary of State UCC lien termination requests; (3) IRS EIN fraud alerts (irs.gov/businesses/small-businesses-self-employed/identity-theft-information-for-businesses); (4) FTC business identity theft reporting at ftc.gov/idtheft. The FTC's identity theft guidance applies to both personal and business identity theft under 15 U.S.C. § 45.

Examples

Frequently asked questions

Can I freeze my business credit file like I can freeze my personal credit?

Not in the same federally mandated, free, and universal way. FCRA grants personal credit freeze rights; no equivalent federal law covers business credit files. Experian Business offers a Business Credit Lock product. D&B and Equifax Business offer monitoring rather than full freezes. Contact each bureau directly to understand current options. For comprehensive business identity protection, combine monitoring, Experian's lock (if available), and IRS EIN fraud alerts.

How do I protect my business from business identity theft?

Multi-layer approach: (1) Monitor all three business credit bureaus (D&B CreditSignal, Experian Business, Equifax Business) for new inquiries or tradelines; (2) Set up IRS EIN alerts at irs.gov/businesses; (3) Conduct quarterly Secretary of State UCC searches to verify only your own liens are filed; (4) Use strong, unique passwords and multi-factor authentication on all business accounts; (5) Subscribe to Experian Business Credit Lock when available; (6) Report any suspicious activity to the FTC at ftc.gov/idtheft.

What is the SBFE and does it offer business credit freezes?

The Small Business Financial Exchange (SBFE, sbfe.org) is a nonprofit data exchange for small business credit information contributed by financial institutions. SBFE data feeds into business credit models at Equifax and Experian. SBFE does not offer direct consumer-facing business credit freeze tools — access is managed through the reporting financial institutions and the downstream bureaus.

Can fraudulent UCC liens be removed from my business's file?

Yes. File a UCC-3 Termination statement with the Secretary of State in the state where the fraudulent UCC-1 was filed. If you didn't authorize the filing, you can challenge it with the filing office or file your own UCC-3 Termination. Some states require you to notify the secured party; if the filing is fraudulent, document that notification. The SBFE's dispute process and direct dispute with each business credit bureau are parallel remediation paths.

Related terms

Further reading