I have this on my account, and you don't need to go online to "thaw" it. The bureau calls you and asks "did you just apply for an auto loan at a Hyundai dealership in Florida?" and you reply "no, no I didn't", they say "okay, have a nice day", and that's that.

At least that's what happened when somebody tried to use my identity to buy a Hyundai in Florida.