TL;DR: A credit ban is Australia’s version of a credit freeze. Credit reporting agencies can’t share your credit file with lenders without your written consent, so a fraudster can’t easily open credit in your name. It lasts 21 days at first, and you can extend it to 12 months if you’re at risk of fraud. You can apply through one agency and ask it to place bans with the others. Existing cards and loans keep working.

What a credit ban does

According to IDCARE, a ban "freezes" access to your credit file. Credit reporting agencies can’t disclose your consumer credit information to credit providers without your written consent, unless the law requires it.

Since most lenders check your file before approving credit, a ban makes it very hard for someone using your stolen details to get a loan, card or phone plan in your name.

What it doesn’t affect

How long it lasts

StageLength
Initial ban21 days
Extension12 months, if you’re a victim of or at risk of credit fraud

Apply for an extension before the ban expires, ideally at least 10 days before. You may be asked for a police report number or a cyber.gov.au report number.

How to request one

  1. Go to one credit reporting agency’s ban request page. Equifax has an online form (it emails you once the ban is in place); Experian has an online ban request form.
  2. Ask that agency to place bans with the other agencies too. IDCARE says one request can cover both.
  3. Keep the confirmation.
  4. Diary the end date, so you can extend if needed.

Credit ban, fraud alert or "credit freeze": what’s the difference?

Credit ban (Australia)US credit freezeCanadian fraud alert
Blocks lenders seeing your fileYes, without your written consentYesNo, it flags your file
Length21 days, extendable to 12 monthsUntil you lift it6 years
CostFreeFreeFree

Australia’s ban is closer to a US freeze than to an alert, but with a shorter default life. That’s why diarising the end date matters: if you forget, the protection quietly lapses.

Step-by-step: a ban after a breach

  1. Check your credit reports first from the agencies, so you know your starting point (how).
  2. Request the ban at Equifax or Experian, asking them to place it with the other agency too.
  3. Report the incident: police, or ReportCyber at cyber.gov.au. You may need the report number for an extension.
  4. Extend to 12 months at least 10 days before the 21 days run out.
  5. Replace compromised ID: a new driver licence card number, passport or Medicare card, depending on what leaked.
  6. Set a reminder a couple of weeks before the 12 months end to decide whether to renew.

When to use one

Need credit while banned?

You’ll need to give written consent for a lender to access your file, or wait for the ban to end. Plan big applications (like a mortgage) around it.

Get help

IDCARE offers free support on 1800 595 160 (Australia) or 0800 121 068 (NZ). See our IDCARE recovery guide.

IDCARE also points to the OAIC’s guidance on fraud and your credit report if a credit reporting agency or lender doesn’t handle your request properly. A free exposure check shows whether your email turns up in breach data, a good early warning sign.

Frequently Asked Questions

How long does a credit ban last in Australia?

An initial ban lasts 21 days. You can extend it to 12 months if you’re a victim of or at risk of credit fraud.

Does a credit ban affect my existing credit cards?

No. You can still use existing cards and repay loans, unless credit is due for renewal.

Do I need to contact every credit agency?

IDCARE says you can apply through one agency and ask it to place bans with the others.

What do I need to extend a credit ban?

You may be asked for a police report number or a report number from cyber.gov.au to show you’re at risk of fraud.

When should I extend my credit ban?

Before it expires, ideally at least 10 days beforehand.

Sources

Related Reading