The more I think about the freeze/unfreeze thing and being charged bogus fees for it, the more ridiculous it seems. In light of the inability for any company or agency (including the federal government) to protect private data from hackers, there should be a law that all accounts are always frozen. Whenever anyone wants to access your report, you’d then log into your bureau account, request a unique , time limited, one time use access code that is emailed to you. You then give it to whomever you’ve authorized to access your credit. Annoying yes, but infinitesimally less so than having your identity stolen, paying over and over to have your account refrozen, waiting hours or days for your accont to unfreeze, etc., … and no more unauthorized hard pulls.