What should you do if someone has your Social Security number? Actions and precautions
If someone has your Social Security number (SSN), act immediately — place a fraud alert or freeze your credit to stop criminals from opening new accounts in your name. Every hour counts, and taking these immediate first steps can be the difference between a contained incident and long-term financial damage. A stolen SSN is a serious security breach that can open the door to credit fraud, tax scams, and full-blown identity theft. Knowing what to do if someone has your Social Security number can determine whether the fallout stays manageable or spirals into months of financial recovery.
How can someone get your Social Security number?
Most people don’t realize how many doors into their Social Security number actually exist. Some exposures are entirely out of your control — a data breach at a hospital, insurer, or government agency can put millions of SSNs into criminal hands overnight. Other exposures are more deliberate. Scammers may call posing as Internal Revenue Service (IRS) agents or Social Security Administration (SSA) representatives, manufacturing urgency to pressure you into “verifying” your number over the phone. Some cast a wider net through phishing emails, fake job postings requesting your SSN for a supposed background check, or counterfeit websites built to harvest personal details. And because tax documents, insurance paperwork, and financial statements carry your SSN in plain print, even something as low-tech as rifling through your mail or recycling bin can be enough for someone to get hold of your SSN.
What happens if your Social Security number is compromised?
If a criminal gains access to your Social Security number, they can cause serious, far-reaching damage. Your SSN is one of the most important pieces of personal information you have, which is why identity thieves can exploit it in so many ways, including:
- Open credit cards or loans in your name.
- Access your tax returns or file fraudulent tax claims.
- Gain employment under your identity.
- File for unemployment or other government benefits in your name.
- Commit medical or criminal fraud.
- Engage in check fraud by linking your SSN to fake bank accounts or stolen checks.
- Potentially access financial accounts when combined with other stolen data.
This list could go on — identity thieves are constantly inventing new scams. Your SSN plays a critical role in verifying your identity across nearly every aspect of life in the US. If someone gets access to it, there’s almost no limit to the damage they can do.
If you’d like to learn more, you can take a look at our guide on what someone can do with your Social Security number.
What should you do if someone has your Social Security number?
If you believe someone has your Social Security number or suspect identity theft involving it, take immediate action to limit the damage, starting with the steps laid out in the table below.
Action | How to take it | Contact information | What this does |
Contact any one of the three major credit bureaus (Equifax, Experian, or TransUnion). Once the alert is placed with one bureau, that bureau notifies the others automatically. | Equifax can be reached at 1-800-525-6285 or equifax.com, Experian at 1-888-397-3742 or experian.com, and TransUnion at 1-800-680-7289 or transunion.com. | Flags your file so lenders must verify your identity before approving new credit. | |
Contact each bureau individually to place the freeze. This can be done online, by phone, or by mail. | Equifax can be reached at 1-800-525-6285 or equifax.com, Experian at 1-888-397-3742 or experian.com, and TransUnion at 1-800-680-7289 or transunion.com. | Blocks anyone (including you) from opening new credit accounts or taking out loans in your name until you lift the freeze. It’s free to place and remove. | |
File a report to the Federal Trade Commission (FTC) either online or by phone. | Go to IdentityTheft.gov or call 1-877-438-4338. | Generates an official Identity Theft Report and a personal recovery plan. | |
Call the SSA fraud hotline or visit their website, and request a review of your Social Security statement for suspicious activity. | Go to ssa.gov or call 1-800-269-0271. | Lets you monitor your earnings record and flag suspicious activity tied to your SSN. Allows you to request a new SSN in extreme cases. | |
Visit your local police department in person or file online (if available). Bring your FTC Identity Theft Report, proof of identity, and any evidence of the theft. | Head to your local police department. | Formalizes the incident and provides official documentation, which may be required by creditors or your insurance provider in order to dispute fraudulent accounts and have them removed. | |
File IRS Form 14039 (Identity Theft Affidavit) online or by mail. If you suspect tax-related fraud, contact the IRS Identity Protection Specialized Unit. | Go to irs.gov/identity-theft-central. | Prevents identity thieves from filing fraudulent tax returns in your name and claiming your refund. Allows you to get an Identity Protection PIN (IP PIN). |
Pro tip: As you work through recovering from SSN theft, keep a written record of everything: calls, emails, government agency forms submitted, and any letters sent or received. If you ever need to dispute a fraudulent charge or verify your identity, having this documentation will make things easier and more credible.
Place a fraud alert on your credit report
To stop new credit from being opened in your name, immediately place a fraud alert with one of the three major credit bureaus (Equifax, Experian, or TransUnion). Once one bureau processes your request, that same bureau is required to notify the other two, so you only need to make one call or visit.
A fraud alert instructs lenders to verify your identity before approving any new credit applications. Initial fraud alerts are free and last one year, after which you can renew them. If you’ve filed an Identity Theft Report with the FTC or a police report, you may qualify for an extended fraud alert, which lasts seven years.
You can reach any of the three bureaus using the details below:
- Equifax: equifax.com/personal/credit-report-services or 1-800-685-1111
- Experian: experian.com/fraud or 1-888-397-3742
- TransUnion: transunion.com/credit-help or 1-800-916-8800
Pro tip: You only need to contact one bureau. By law, the bureau you contact must notify the other two, and your fraud alert will be reflected across all three credit files within 24 hours.
Freeze your credit with all three credit bureaus
A credit freeze offers stronger protection than a fraud alert. While a fraud alert asks lenders to verify your identity, a freeze prevents anyone from accessing your credit file at all, making it impossible to open new accounts or take out loans in your name while the freeze is active. But unlike a fraud alert, a freeze doesn’t carry over automatically, so you’ll need to contact all three bureaus individually.
Freezing your credit is completely free at all three major bureaus, and each freeze takes effect within one business day when requested online or by phone — or within three business days if requested by mail. Once the freeze is in effect, it stays active until you choose to lift it. You can temporarily or permanently unfreeze your credit at any time using a secure PIN or password.
Pro tip: If you want to skip the back-and-forth with three separate bureaus, NordProtect’s credit lock lets you lock your credit instantly in one place, without having to manage multiple PINs or make a single phone call.
Report identity theft to the Federal Trade Commission
If you believe your SSN has been stolen or used fraudulently, file a report with the FTC at IdentityTheft.gov. This is a centralized system for managing identity theft cases, and it takes about 10 minutes to complete.
When filing the report, you’ll need to provide your personal information, a description of what happened, and any details about the fraudulent activity you’re aware of, such as accounts opened in your name, unauthorized charges, or suspicious inquiries on your credit report.
Having the following on hand will make the process smoother:
- A government-issued ID
- Your Social Security number
- Any evidence of fraud, such as credit statements, collection notices, or emails referencing accounts you didn’t open
- Details of any other steps you’ve already taken, such as a credit freeze or fraud alert
Once you submit the report, you’ll receive a personal recovery plan and an official Identity Theft Report, which you may need when dealing with creditors or law enforcement.
If your SSN has only been exposed — say, in a data breach or phishing scam — but you don’t see any signs of misuse yet, you’re not required to file an FTC report. Still, monitoring your credit and placing a fraud alert would be smart in this case.
Pro tip: Save or print your FTC Identity Theft Report as soon as you receive it. You’ll likely need it when filing a police report, disputing fraudulent accounts with creditors, or verifying your identity with government agencies.
Contact the Social Security Administration
Reach out to the Social Security Administration’s fraud hotline at 1-800-269-0271 or visit ssa.gov to access helpful resources.
It’s also a good time to log in to your “my Social Security” account. This online portal lets you replace a lost or stolen Social Security card, track your earnings history, view benefit estimates, and monitor for any suspicious activity. Your Social Security Statement will give you key insights into your Medicare, disability, and retirement benefits — and may help you spot any irregularities tied to identity theft, including Medicare scams.
If you’re wondering whether you can get a new number, the short answer is yes, you can change your Social Security number — but only under very specific circumstances, and often as a last resort. Changing your SSN can have serious consequences, including the loss of your credit history, academic records, and employment background. With no credit file under a new number, you could have trouble applying for loans, renting housing, or passing routine background checks.
That said, if you’ve exhausted all other options and your number continues to be misused despite safeguards, you may be eligible for a new Social Security number.
File a police report
A police report formalizes your identity theft case and helps build a timeline of the incident. It may be required by the FTC or your insurance provider. You should also share it with companies where your SSN or other personally identifiable information was used for fraudulent activity.
A police report is especially important if you have any information that could help identify the person who stole your Social Security number or if your number was used in connection with a crime. This includes situations where someone committed fraud, received benefits, or was arrested using your name, all of which fall under the classification of criminal identity theft.
When filing the report, bring documentation: a copy of your FTC Identity Theft Report, government-issued ID, and any evidence of fraud (for example, emails and credit statements).
Notify the Internal Revenue Service
If someone has your SSN, they may attempt to file a fraudulent tax return in your name to claim a refund. Contact the IRS as soon as possible to get ahead of it.
Start by submitting Form 14039 at IRS.gov. This formally notifies the IRS that your SSN may be compromised and flags your account for monitoring. You can file online or by mail.
You should also log in to your IRS account to check for any unauthorized filings or suspicious activity tied to your SSN.
Pro tip: Apply for an IP PIN at IRS.gov. This free six-digit code is issued annually each January and must be included on your tax return — without it, no return can be filed under your SSN. The IP PIN is one of the most effective safeguards against tax-related identity theft.
How can you prevent your Social Security number from being stolen?
While you can’t eliminate every risk, you can take steps to protect your financial health and reduce your risk of becoming a victim of identity theft. Prevention starts with strong habits and a few smart tools:
- Get an IP PIN and renew it each January. This IRS-issued six-digit code adds extra security to your SSN and prevents fraudsters from filing a tax return using it.
- Leave your Social Security card at home. You usually don’t need to carry it in your wallet. Only bring it when it’s absolutely necessary.
- Shred documents before discarding them. Anything that includes your SSN — tax forms, insurance paperwork, or financial statements — should be destroyed.
- Be selective about where you share your SSN. Don’t send it via email or enter it on a website unless you’re sure the site is legitimate and secure. It’s also reasonable to ask how a company plans to store and protect your information.
- Understand how scammers operate. A compromised email account can lead to phishing attempts that target your SSN. Know what to do if a scammer has your email address and take steps to lock it down if needed.
- Stay alert for phishing, smishing, and spoofing attempts. If someone contacts you unexpectedly and asks for sensitive information, pause. Verify the source — the email address, phone number, or website — before responding or clicking any links.
- Enable credit monitoring. Real-time alerts about activity tied to your identity are the first warning sign of identity theft.
- Secure all your financial accounts. Use strong passwords and two-factor authentication (2FA).
- Regularly check your credit reports. Visit AnnualCreditReport.com to access free reports from each of the three major credit bureaus. Look for unfamiliar accounts or incorrect personal or financial information.
- Consider an identity theft protection service. For example, NordProtect includes dark web monitoring and scans your SSN across millions of data points. If your number shows up where it shouldn’t, you’ll receive an immediate alert so you can take action before serious damage is done.
Pro tip: Prevention is the best defense. Check out our in-depth guide on how to protect your Social Security number to keep your identity safe.
FAQ
There’s no way to track every place your SSN might be misused, but there are clear warning signs to watch out for. Start by reviewing your credit reports for accounts you didn’t open or inquiries you didn’t make. You should also log in to your “my Social Security” account to check your earnings record for any discrepancies. For a full breakdown, read our guide on how to spot the signs someone is using your Social Security number and what to do about it.
It’s also worth running a dark web scan, since stolen SSNs are frequently traded on dark web marketplaces without the owner ever knowing. If you discover your SSN on the dark web, treat it as a confirmed exposure and take action immediately, starting with a credit freeze and a fraud alert.
If both your SSN and date of birth have been compromised, the risk of identity theft is significantly higher. Together, these two pieces of information are enough for a criminal to impersonate you in many situations. Below is what you should do if someone has your Social Security number and date of birth:
- Place a fraud alert with any one of the three major credit bureaus (Equifax, Experian, or TransUnion). The bureau you contact will automatically notify the other two.
- Freeze your credit at all three bureaus to prevent anyone from opening new accounts in your name.
- File a report with the FTC at IdentityTheft.gov to receive an official Identity Theft Report and a personal recovery plan.
- Log in to your “my Social Security” account at ssa.gov to check your earnings record and flag any suspicious activity.
- Contact the IRS and submit Form 14039 to protect against fraudulent tax filings under your SSN.
- File a police report with your local authorities, especially if you have evidence of misuse.
Having both your SSN and a form of ID stolen is one of the more serious combinations, because it gives a criminal nearly everything they need to fully impersonate you across financial, legal, and government systems. How to respond if someone has your Social Security number and ID:
- Start with a fraud alert by contacting any one of the three major credit bureaus (Equifax, Experian, or TransUnion). Whichever bureau you contact will inform the other two on your behalf.
- Freeze your credit at all three bureaus to ensure no new accounts can be opened or loans taken out in your name while you sort things out.
- Report the theft to the FTC at IdentityTheft.gov to receive an official Identity Theft Report and a personal recovery plan.
- File a police report with your local authorities. Since a physical ID is involved, this is especially important because it creates a formal record in case your identity is used in connection with a crime.
- Contact the issuing authority for your ID. If your driver’s license was stolen, notify your state’s Department of Motor Vehicles (DMV). If your passport was taken, contact the US Department of State to report it and request a replacement.
- Submit Form 14039 to the IRS to guard against fraudulent tax filings.
If someone has been using your SSN to gain employment, it can affect your tax records, government benefits, and even your criminal background, since that person’s employment history becomes tied to your identity.
Your immediate course of action if someone is using your SSN for employment:
- Check your Social Security earnings record by logging in to your “my Social Security” account at ssa.gov. Look for employers or income you don’t recognize because these are the clearest signs someone is working under your SSN.
- Contact the SSA directly by calling 1-800-269-0271 to report the misuse and get guidance on correcting your earnings record.
- Notify the IRS by submitting Form 14039, since fraudulent employment under your SSN can create tax liabilities that show up in your name.
- File a report with the FTC at IdentityTheft.gov to document the case and receive a personal recovery plan.
- File a police report with your local authorities, particularly if you have information about who may be using your SSN or where they are employed.
Tax-related identity theft happens when someone files a tax return using your SSN to claim a refund before you do. You’ll often only find out when you try to file your own return and the IRS rejects it because one has already been submitted. So if someone is using your SSN to file taxes:
- Submit Form 14039 at IRS.gov as soon as possible. This formally alerts the IRS that your SSN has been used fraudulently and flags your account for investigation.
- Continue to file your own tax return on time, even if you have to do so by paper mail. The IRS will process your legitimate return alongside the investigation.
- Apply for an IP PIN at IRS.gov. Once issued, this six-digit code must be included on any return filed under your SSN, preventing anyone else from filing in your name going forward.
- File a report with the FTC at IdentityTheft.gov to formally document the case and get a recovery plan tailored to your situation.
- Contact the IRS Identity Protection Specialized Unit directly at 1-800-908-4490 if you need to speak with someone or require additional assistance resolving the case.
If someone has taken out a loan using your SSN, it will likely show up as an unfamiliar account on your credit report. The longer it goes unnoticed, the more damage it can do to your credit score and financial standing. What to do if someone is using your SSN to take out a loan:
- Pull your credit reports from all three major bureaus at AnnualCreditReport.com and look for any loans or accounts you don’t recognize. Note the lender names, account numbers, and dates for your records.
- Freeze your credit at all three bureaus to prevent any further loans or accounts from being opened in your name while you resolve the situation.
- Contact the lender directly to report the fraudulent account. Provide your FTC Identity Theft Report as supporting documentation and request that the account be closed and removed from your credit file.
- Dispute the fraudulent account with whichever credit bureau is reporting it. Each bureau has an online dispute process, and they are required by law to investigate and respond within 30 days.
- Go to IdentityTheft.gov to report the fraud and receive a personal recovery plan.
- File a police report with your local authorities, especially if the loan amount is significant or you have information about how the fraud occurred.
On its own, an SSN is not enough to access your bank account. However, when combined with other personal details (like your full name, date of birth, or address), it may be used to bypass security questions or open new accounts. That’s why it’s vital to act quickly if your SSN is exposed.
Identity theft recovery doesn’t follow a fixed timeline. The scope of the damage and how swiftly you responded are what ultimately determine whether you’re looking at weeks or years. In simple cases (where exposure was caught early and misuse was limited to one or two fraudulent accounts) resolution typically takes anywhere from a few weeks to a couple of months.
When multiple fraudulent accounts, disputed credit entries, or tax-related fraud are involved, the process takes considerably longer. Most moderate cases are resolved within three to six months, though that window assumes you’re actively following up with creditors, bureaus, and government agencies throughout.
Complex cases are in a category of their own. If your SSN has been used for employment fraud, criminal identity theft, or across multiple financial institutions, resolution can take a year or more — and in some instances, several years. Keeping detailed records of every step you take, including calls made, forms submitted, and letters sent and received, will help move things along and strengthen your case if disputes arise.
Dominykas writes about how fragile a digital identity really is and explains how to build a stronger shield around it. He helps NordProtect readers decipher the signals threatening their online privacy and make identity protection a daily practice rather than a safety net they hope they will never need.
