The email says a company you did business with lost your data, a settlement has been reached, and you have a choice to make: take a modest cash payment, or take several years of free credit monitoring. Most people pick the cash. Most people, by the math, pick wrong, and the biggest breach settlement in American history shows why.
When Equifax announced in 2017 that a breach had exposed the personal information of 147 million people, the eventual settlement with the FTC, the CFPB, and 50 states and territories set aside up to $425 million to help affected consumers. Claimants could choose free multi-year credit monitoring or, if they already had monitoring, an alternative cash payment that was advertised at up to $125. What happened next became the standard lesson in how these settlements actually pay.
Why the advertised cash number shrinks
Settlement funds for the cash option are almost always capped. In the Equifax case, the total available for the alternative cash payment was $31 million, and the FTC publicly warned that the flood of claims meant each payment would end up far smaller than the $125 headline figure, because the fixed pot had to be divided among everyone who chose it. That is not a quirk of one case. It is how pro-rata distribution works: the more claimants, the smaller each check, and popular settlements attract a lot of claimants.
The credit monitoring side of the offer does not work that way. Monitoring is a service the defendant must provide to every claimant who elects it, so your benefit is not diluted by your neighbors’ claims. That asymmetry is exactly why the FTC took the unusual step of encouraging consumers to pick the free monitoring instead of the cash, a recommendation it spelled out in its consumer guidance on the settlement.
When the monitoring is actually worth something
Credit monitoring gets dismissed as a token benefit, and sometimes it is. But judge it on three questions. How long does it run? Multi-year, three-bureau monitoring has real retail value if you would otherwise pay for it. Does it include identity restoration, meaning live help untangling fraud if it happens? In the Equifax settlement, affected consumers can get free identity restoration services through January 2029 even if they never filed a claim. And do you already have monitoring from a previous breach? Many people are covered two or three times over from past incidents, in which case another subscription adds little and the cash, however small, is the rational pick.
When the cash is the better pick
Take the cash when the settlement separately reimburses documented losses, when you already have monitoring, or when the monitoring on offer is short and single-bureau. Note the difference between the two kinds of money in these settlements. Payments for documented out-of-pocket losses and time spent dealing with the breach are usually claimed with receipts or a signed statement and are often paid closer to face value. The no-documentation alternative cash payment is the one that shrinks. If you actually lost money or hours to a breach, document it and claim it in the loss category, whatever you do with the monitoring choice.
The protections you do not need a settlement for
Here is the part the settlement notices will not emphasize: the two strongest protections cost nothing and are yours regardless of any lawsuit. A credit freeze blocks new-account fraud outright by stopping lenders from pulling your file, and federal law makes freezing and unfreezing free at all three bureaus. And you can check your own reports for free at AnnualCreditReport.com, where weekly access is now permanent. A settlement’s monitoring service is a smoke detector; the freeze is a locked door. Take both when the smoke detector is free, but do not skip the door.
If your information was exposed in any breach, the FTC’s IdentityTheft.gov checklist for lost or exposed information walks through the specific steps for what leaked, whether that is a Social Security number, a card number, or a password.
How to spot a real settlement notice
Breach settlements attract copycat scams, so verify before you click. Real FTC-related settlements are listed on the agency’s refunds page, with the official administrator site and contact numbers for each case. Legitimate settlement administrators will not ask you to pay a fee to claim a benefit, will not ask for your full Social Security number by email, and will not pressure you with a countdown clock. When in doubt, type the settlement website address from the FTC’s page yourself instead of following an emailed link.
The bottom line
Read the settlement’s terms before choosing, because every case divides the money a little differently. But the general rule from the biggest case on record holds: advertised cash amounts in capped funds shrink with popularity, while monitoring and restoration services do not. If you do not already have credit monitoring, take the service and add a free freeze. If you are already covered, take the cash and expect it to buy a sandwich, not a vacation. Either way, claim your documented losses in full, and let the settlement’s identity-restoration line do the tedious work if fraud ever surfaces.
This article was produced with AI assistance and reviewed by a human editor. Figures are linked to their primary sources; where a claim could not be verified from the public record, we say so.
