How a Credit Alert Helps You Guard Against Identity Theft in Canada

A credit alert flags your credit file so lenders verify your identity before new credit is issued.

By Promissory.ca Editorial Team Reviewed against official Canadian sources Last updated: 2026-09-16

A credit alert is a tool you control, not a product someone sells you. Placing one is a matter of contacting the credit bureaus that hold your file, confirming who you are, and asking them to attach your instruction to your record. Everything after that depends on how well the businesses that check your file honour it.

What a Credit Alert Is and How It Works

In Canada, two national credit bureaus — Equifax Canada and TransUnion Canada — hold the files that most lenders, landlords, insurers and utilities check. Each bureau keeps its own file, so information and instructions do not automatically travel from one to the other. A credit alert is a note on one of those files, placed at your request, asking anyone who pulls it to take reasonable steps to confirm your identity before opening new credit in your name.

Most credit identity theft follows the same pattern: someone uses your name, date of birth and address to apply for a card, a loan, a phone plan or a utility account. The business checks the file, sees nothing unusual, and approves. A credit alert interrupts that sequence by telling the person reading the file that you want verification — typically a callback to the number already on file, a request for identification, or a question only the real you could answer.

Why an alert is not a lock

An alert is a caution flag, not a freeze. It does not prevent a lender from approving an application, and it does not compel a lender to call you before it does. A business that is satisfied by its own checks may proceed anyway. Treat the alert as a speed bump: it buys time, discourages a casual fraudster, and creates a documented instruction on your file that can help you later.

Alerts versus monitoring

Monitoring and alerts solve different halves of the same problem. Monitoring watches for changes — a new inquiry, a new account, a new address — and tells you about them after they appear on your file. A credit alert speaks to the business pulling your file in the moment, asking it to verify before it acts. Monitoring may be offered by a bureau, a financial institution or an independent service, and its value depends on whether you actually read and act on the notices.

How to Place or Remove a Credit Alert

You request an alert directly from each bureau you want to carry it. Because the two national bureaus maintain separate files, an alert placed with one does not appear with the other. Requests are usually made by telephone, by mail, or through an account you set up with the bureau.

What you may be asked to provide

• Your full legal name, plus any former or alternate names, because files are matched on name and date of birth.
• Your current address and recent previous addresses.
• Your date of birth and government-issued identification.
• Supporting documents if you are reporting a suspected fraud, such as correspondence you never wrote or a police file number.

Removing or extending an alert

Alerts normally run for a set period rather than forever, so you may need to renew a long-running alert and you may need to ask for it to be lifted once your situation is resolved. Keep a written record: the date you called, the name of the person you spoke with, and any reference number. If you later apply for credit and are declined for reasons that make no sense, that record gives you something concrete to point to.

Warning Signs That Your Identity Is Being Used

Identity theft is usually quiet. The first clue is often a letter, a call or a declined application rather than a dramatic event. These are the signals worth acting on:

One declined application is not proof of fraud, and an unfamiliar name on a report can be a simple reporting error. What matters is the pattern: unfamiliar accounts, unfamiliar inquiries, or unfamiliar addresses that keep appearing.

Practical Ways to Protect Your Credit File

• Check your credit report from both national bureaus on a regular schedule, and read every account, inquiry and address line.
• Treat your Social Insurance Number as confidential. Ask why it is needed before you provide it, and do not use it as general identification.
• Shred or securely destroy statements, tax slips and pre-approved credit offers before they go in the recycling.
• Use unique passwords for financial accounts and email, and turn on multi-factor authentication wherever it is offered.
• Use a locked mailbox or a post office box if your mail is exposed, and collect mail promptly when you travel.
• Slow down on texts, emails and calls that create urgency about your account. Contact the organization using a number you look up yourself.
• Watch how many new credit applications you make in a short period. A hard inquiry can affect a credit score, while a soft inquiry — such as checking your own report — does not.
• Update your address with your financial institutions, service providers and the bureaus when you move.
• Ask how an organization stores and shares your personal information, especially before handing over identification to a new landlord, employer or service provider.

If Your Identity Is Misused

Move deliberately, and keep a written record of everything.

1. Contact both national bureaus. Ask for a credit alert, request a copy of your file, and report the fraudulent activity.
2. Report the matter to your local police and obtain a file number. Many organizations will not act without one.
3. Notify the businesses involved in writing, dispute the fraudulent accounts, and ask for confirmation when they are removed.
4. Report the incident to the federal anti-fraud reporting service so it can be tracked alongside other complaints.
5. Review your file again after the dispute process, and keep the alert in place until you are confident the activity has stopped.

Where Privacy Law Fits In

PIPEDA governs how private-sector organizations handle personal information in Canada. It gives you the right to know what is collected about you, to ask for corrections, and to complain to the federal privacy regulator if an organization mishandles your information. A credit alert sits alongside those rights rather than replacing them.

Two limits are worth remembering. First, an alert asks for verification; it does not force a lender to refuse credit. Second, an alert does not fix errors. If an account on your file is not yours, the fix is a dispute with the bureau, supported by documents — and a dispute is a separate process from placing an alert, even though the two are often used together.

This article is general information only, not legal, financial or credit advice, and it does not describe any specific product or service. Promissory.ca is a loan comparison and information site, not a lender.