What should you do if someone has your Social Security number? Actions and precautions

Why is a Social Security number important?

Originally created to track earnings and benefits, a Social Security number has become one of the most sensitive pieces of information a United States resident can have. It’s used for everything from opening bank accounts and applying for jobs to receiving healthcare, filing taxes, and verifying your identity online.

Because your SSN links so many aspects of your financial and personal life, it's a prime target for cybercriminals specializing in identity theft. With it, they can impersonate you, open credit lines in your name, receive medical services fraudulently, and even commit crimes under your identity.

What happens if someone has your Social Security number?

Your Social Security number (SSN) is one of the most important pieces of personal information you have. If a criminal gains access to it, they can cause serious, far-reaching damage. Identity thieves can exploit your SSN in many ways, including:

• Open credit cards or loans in your name.
• Access your tax returns or file fraudulent tax claims.
• Gain employment under your identity.
• File for unemployment or other government benefits in your name.
• Commit medical or criminal fraud.
• Engage in check fraud by linking your SSN to fake bank accounts or stolen checks.
• Potentially access financial accounts when combined with other stolen data.

This list could go on — identity thieves are constantly inventing new scams. Your SSN plays a critical role in verifying your identity across nearly every aspect of life in the US. If someone gets access to it, there’s almost no limit to the damage they can do.

What should you do if someone has your Social Security number?

If you believe someone has your Social Security number — or even suspect it’s been exposed — you can take a few specific steps to limit the damage and prevent identity theft:

1. Place a fraud alert with a credit bureau.
2. Freeze your credit across all major credit bureaus.
3. Report the identity theft to the FTC.
4. Contact the SSA for guidance.
5. File a police report with local authorities.
6. Contact the IRS.

Tip: As you go through this process, keep a written record of everything: calls, emails, government agency forms submitted, and any letters sent or received. If you ever need to dispute a fraudulent charge or verify your identity, having this documentation will make things easier and more credible.

Let’s go into each step in more detail.

Place a fraud alert on your credit report

Most identity thieves are after one thing: money. And with your Social Security number, they can target everything from your credit profile to your bank accounts. That’s why your first step should be a fraud alert on your credit file. This step tells lenders to take extra precautions before approving any new credit in your name.

To activate a fraud alert, contact any of the three major credit bureaus: Equifax, Experian, or TransUnion. Once one bureau processes the alert, it notifies the others automatically.

A fraud alert lasts one year and is free to renew. You’ll also be entitled to a free credit report from each bureau so you can check for suspicious activity.

Freeze your credit with all three credit bureaus

A security freeze offers stronger protection than a fraud alert. It prevents lenders from accessing your credit file, which means no one, including you, can open new accounts or take out loans in your name while the freeze is in place.

Unlike fraud alerts, credit freezes aren’t shared automatically. You’ll need to get in touch with Equifax, Experian, and TransUnion individually to place a freeze using these contact details:

Equifax

• Online: Equifax credit freeze webpage
• Phone: 888-298-0045
• Mailing address:

Equifax Info Services LLC

P.O. Box 105788

Atlanta, GA 30348-5788

Experian

• Online: Experian credit freeze webpage
• Phone: 888-397-3742
• Mailing address:

Experian Security Freeze

P.O. Box 9554

Allen, TX 75013

TransUnion

• Online: TransUnion credit freeze webpage
• Phone: 800-916-8800
• Mailing address:

TransUnion

P.O. Box 160

Woodlyn, PA 19094

You can unfreeze your credit at any time using a secure PIN or password.

Report identity theft to the Federal Trade Commission (FTC)

If you believe your SSN has been stolen or used fraudulently, file a report with the FTC at IdentityTheft.gov. This is a centralized system for managing identity theft cases.

When you submit a report, you’ll receive a personal recovery plan and an official Identity Theft Report, which you may need when dealing with creditors or law enforcement. It’s also a helpful starting point for understanding what to do if your identity is stolen, especially if the situation becomes more complex over time.

If your SSN has only been exposed (say, in a data breach or phishing scam), but you don’t see any signs of misuse yet, you’re not required to file an FTC report. Still, monitoring your credit and placing a fraud alert would be smart in this case.

Contact the Social Security Administration (SSA)

Reach out to the Social Security Administration’s (SSA) fraud hotline at 1-800-269-0271 or visit ssa.gov to access helpful resources.

It's also a good time to log in to your "my Social Security" account. This online portal lets you replace a lost or stolen Social Security card, track your earnings history, view benefit estimates, and monitor for any suspicious activity. Your Social Security Statement will give you key insights into your Medicare, disability, and retirement benefits — and may help you spot any irregularities tied to identity theft.

Some people ask whether it’s possible to change their Social Security number after becoming a victim of identity theft. In rare cases, it is, but the Social Security Administration grants new numbers only under very limited circumstances, and often as a last resort. Changing your SSN can have serious consequences, including the loss of your credit history, academic records, and employment background. With no credit file under a new number, you could have trouble applying for loans, renting housing, or passing routine background checks.

That said, if you've exhausted all other options and your number continues to be misused despite safeguards, you may be eligible for a new Social Security number. 

File a police report

A police report formalizes your identity theft case and helps build a timeline of the incident. It may be required by the FTC or your insurance provider. You should also share it with companies where your SSN or other personally identifiable information was used for fraudulent activity. 

A police report is especially important if you have any information that could help identify the person who stole your Social Security number or if your number was used in connection with a crime. This includes situations where someone committed fraud, received benefits, or was arrested using your name — also known as criminal identity theft.

When filing the report, bring documentation: a copy of your FTC Identity Theft Report, government-issued ID, and any evidence of fraud (for example, emails and credit statements).

Notify the Internal Revenue Service (IRS)

Tax-related identity theft is one of the most common forms of fraud involving Social Security numbers. If someone has your SSN, they may try to file a fraudulent tax return in your name to claim a refund. To prevent or respond to this, contact the IRS right away.

Start by submitting Form 14039: Identity Theft Affidavit, which informs the IRS that someone may be misusing your SSN for tax purposes. You can file this form online or by mail, depending on your situation.

You should also:

• Monitor your IRS account for unauthorized filings.
• Consider applying for an Identity Protection PIN (IP PIN) — a six-digit number that prevents identity thieves from filing a return with your SSN.

Social Security number scams

Criminals specializing in identity theft understand exactly how powerful your Social Security number is and have developed a range of tactics to steal it. One classic method is stealing your wallet in the hopes that your Social Security card will be inside. However, far more sophisticated SSN theft tactics also exist: 

• Phone scams that pressure you into “verifying” your identity. Criminals often pose as representatives from government agencies or banks and call with urgent-sounding requests. They may report a problem with your tax return or bank account and insist you confirm your SSN over the phone. Don’t fall for it. Government agencies like the IRS rarely initiate contact this way — and never ask for personal information like your SSN.
• Job scams that ask for your SSN too early. Fake job postings can lure you in with the promise of remote work, quick hiring, or high pay. Once you’ve “applied,” the scammers request your SSN, claiming they need it for a background check. In reality, they’re harvesting your data. Legitimate employers won’t ask for your SSN until after a formal interview process, and only when you’re seriously being considered for the role.
• Data breaches that expose your information without your knowledge. Cybercriminals often breach large companies and then sell the stolen customer data, including Social Security numbers, on the dark web. Keep an eye out for data breaches at organizations you do business with, like banks, insurers, or healthcare providers. That’s why monitoring services and regular dark web scans are worth your attention. 
• Mail theft and dumpster diving. Your mailbox and trash can be easy targets. Identity thieves often search through discarded mail or documents looking for anything with personal information: your address, phone number, account details, and especially your SSN. Always shred paperwork that contains sensitive data before throwing it away, and consider opting into paperless statements when possible.
• Lookalike websites designed to steal your information. Scammers create convincing fake websites that mimic trusted brands, hoping to trick you into entering your SSN, login credentials, or other personal details. Before submitting any information online, double-check the URL, look for HTTPS encryption, and avoid clicking on links from unsolicited messages.
• Phishing emails and text messages. These messages are designed to look legitimate but are often laced with urgency or scare tactics. They may claim there’s suspicious activity on your account or that you’re owed a refund — and then ask you to "verify" your information. Don’t take the bait. If a message seems off, contact the organization directly through official channels rather than replying or clicking links.

How can you prevent your Social Security number from being stolen?

While you can’t eliminate every risk, you can take steps to protect your financial health and reduce your risk of becoming a victim of identity theft. Prevention starts with strong habits and a few smart tools:

• Leave your Social Security card at home. You usually don’t need to carry it in your wallet. Only bring it when it’s absolutely necessary.
• Shred documents before discarding them. Anything that includes your SSN — tax forms, insurance paperwork, or financial statements — should be destroyed.
• Be selective about where you share your SSN. Don’t send it via email or enter it on a website unless you’re sure the site is legitimate and secure. It’s also reasonable to ask how a company plans to store and protect your information. 
• Understand how scammers operate. A compromised email account can lead to phishing attempts that target your SSN. Know what to do if a scammer has your email address and take steps to lock it down if needed.
• Stay alert for phishing, smishing, and spoofing attempts. If someone contacts you unexpectedly and asks for sensitive information, pause. Verify the source — the email address, phone number, or website — before responding or clicking any links.
• Enable credit monitoring. Real-time alerts about activity tied to your identity are the first warning sign of identity theft.
• Secure all your financial accounts. Use strong passwords and two-factor authentication (2FA).
• Check your credit reports regularly. Visit AnnualCreditReport.com to access free reports from each of the three major credit bureaus. Look for unfamiliar accounts or incorrect personal information.
• Consider an identity theft protection service. For example, NordProtect includes dark web monitoring and scans your SSN across millions of data points. If your number shows up where it shouldn’t, you’ll receive an immediate alert so you can take action before serious damage is done.