Take action when ready if you believe your Social Security number is compromised

If your Social Security number has been stolen, you need to act within the first few days. A thief with your number can open credit accounts, file a false tax return in your name, or drain your bank account. The faster you report it, the easier it is to limit the damage and prevent new fraud.

Start by calling the Federal Trade Commission's Identity Theft Hotline at 1-877-438-4338. They will walk you through creating an identity theft report, which you can also file online at IdentityTheft.gov. This report is the official record you will need when you contact banks, creditors, and the IRS. It takes about 10 minutes to file and costs nothing.

At the same time, contact the three credit bureaus — Equifax, Experian, and TransUnion — and place a fraud alert on your credit file. A fraud alert tells lenders to verify your identity before opening new accounts in your name. You only need to call one bureau; they are required to notify the other two. The alert lasts one year and is free.

Key Takeaways

  • File an identity theft report with the Federal Trade Commission at IdentityTheft.gov or by calling 1-877-438-4338 within the first few days of discovering the theft.
  • Place a fraud alert with one of the three credit bureaus (Equifax, Experian, or TransUnion), and they will notify the others automatically.
  • Check your credit reports from all three bureaus for accounts you did not open, and dispute any fraudulent activity in writing.
  • File Form 14039 with the IRS if you are concerned about tax fraud, even if you have not yet filed your return for that year.
  • Monitor your Social Security earnings record at ssa.gov/myaccount to catch wage theft or false income reports before tax time.

How to freeze your credit and prevent new accounts from being opened

A credit freeze is the strongest protection you can put in place. It locks your credit file so that no one — not even you — can open a new credit account without unfreezing it first. This stops a thief from using your stolen number to take out loans, credit cards, or phone contracts in your name.

You can freeze your credit with each of the three bureaus for free. Contact Equifax at 1-800-349-9960, Experian at 1-888-397-3742, and TransUnion at 1-888-909-8872. You will need to provide your name, date of birth, address, and Social Security number. Each bureau will give you a PIN or password to unfreeze your credit later. Write these down and keep them somewhere safe — you will need them if you want to explore for a loan or open a new account.

A freeze takes effect within one business day for online requests and up to three business days by phone or mail. If you need to unfreeze temporarily to explore for credit, you can do that through the same bureau's website or by phone. The freeze stays in place until you remove it, even if you do not renew it.

Check your credit reports for fraudulent accounts and dispute them

Once you have placed a fraud alert and frozen your credit, request your credit reports from all three bureaus. You are may have access to to one free report from each bureau every 12 months at AnnualCreditReport.com. This is the only official site for free reports; do not use other websites that claim to offer free reports, as many charge hidden fees.

Review each report carefully for accounts you do not recognize, hard inquiries from companies you never contacted, or addresses that are not yours. Write down every fraudulent item you find. Then dispute each one in writing with the bureau that reported it. Include a copy of your identity theft report and a letter explaining that the account is fraudulent. The bureau must investigate within 30 days and remove the item if it cannot verify it is legitimate.

Keep copies of all dispute letters and the bureau's responses. If the same fraudulent account appears on more than one report, you will need to dispute it with each bureau separately. This process can take several months, but it is the only way to remove false accounts from your credit history.

Report tax fraud to the IRS if a false return was filed in your name

A thief with your Social Security number may file a tax return before you do, claiming a refund in your name. When you file your own return, the IRS will reject it because a return has already been filed under that number. This is called tax identity theft.

If you suspect this has happened, file Form 14039 (Identity Theft Affidavit) with the IRS. You can file it by mail along with your own tax return, or submit it separately. Include a copy of your identity theft report from the FTC. The IRS will investigate and contact you if they find a fraudulent return. Do not wait until tax season to file this form — you can file it any time during the year if you are concerned.

If the IRS has already processed a fraudulent return and issued a refund to the thief, they will work with you to recover the money. This process can take several months. Keep all correspondence from the IRS and your identity theft report in a safe place.

Monitor your Social Security earnings record and watch for wage theft

A thief may use your Social Security number to work under a false name, which means income is reported to your Social Security account that you did not earn. This can reduce your future Social Security benefits if it is not corrected. You can check your earnings record for free at ssa.gov/myaccount.

Log in with your username and password, or create an account if you do not have one. Your earnings record shows all income reported to Social Security under your number for each year. Look for years or amounts that do not match your actual W-2 forms or 1099s. If you find fraudulent income, contact Social Security at 1-800-772-1213 and ask to report wage theft. They will investigate and correct your record if the income is not legitimate.

Check your earnings record once a year, ideally before tax season. This is also a good time to verify that your actual income has been reported correctly by your employers.

Set up monitoring and consider identity theft protection services

After you have filed your identity theft report and frozen your credit, set up free monitoring tools to catch new fraud early. The FTC's IdentityTheft.gov dashboard tracks your case and sends alerts if new accounts are opened or inquiries are made on your credit file. You can also sign up for free credit monitoring through the three bureaus, though the features vary.

Some people choose to pay for identity theft protection services, which monitor credit reports, the dark web, and public records for signs of fraud. These services are not required — everything they do can be done for free — but some people find the automated alerts helpful. If you choose a paid service, read the terms carefully and make sure it includes credit freezing, credit monitoring, and fraud resolution support.

Do not pay for credit reports or credit monitoring through websites other than AnnualCreditReport.com or the three bureaus directly. Many third-party sites charge fees for services that are available for free.

Protect your Social Security number from future theft

Once you have recovered from identity theft, take steps to prevent it from happening again. Do not carry your Social Security card in your wallet — leave it at home in a safe place. Do not give your number to anyone who asks for it unless you initiated the contact and you know the organization is legitimate. Many organizations ask for your Social Security number out of habit, not necessity; you can often refuse and ask for an alternative identifier.

Use strong, unique passwords for online accounts, especially banking and email. Enable two-factor authentication whenever it is offered. Be cautious about what personal information you share on social media or in public. Shred documents that contain your Social Security number before throwing them away. If you receive mail addressed to someone else at your address, write "return to sender" on it — this can be a sign that a thief is using your address.

Consider opting out of prescreened credit offers, which are a common way thieves learn your personal information. You can opt out for five years or permanently at OptOutPrescreen.com.

Frequently Asked Questions

How long does it take to recover from Social Security number theft?

Recovery depends on how much fraud occurred. Removing fraudulent accounts from your credit report takes 30 to 90 days per dispute. Resolving tax fraud with the IRS can take several months to a year. Wage theft corrections through Social Security may take weeks to months. Throughout this time, your credit freeze and fraud alert provide ongoing protection.

Will my credit score be damaged if my Social Security number is stolen?

Yes, fraudulent accounts opened in your name will lower your credit score. However, once you dispute and remove those accounts, your score will recover over time. A fraud alert and credit freeze help prevent new damage. Monitoring your credit reports and disputing fraud quickly minimizes the long-term impact.

What if I discover the theft years later?

You can still file an identity theft report and take protective steps, but recovery is more difficult because fraudulent accounts may have aged into your credit history. File your report when ready and contact the bureaus and IRS. Some older fraud may be harder to remove, but you can still dispute it and work toward correction.

Do I need to change my Social Security number?

The Social Security Administration rarely issues new numbers. Changing your number does not erase the old one from records, and it can create new problems with your earnings history and benefits. Focus instead on freezing your credit, disputing fraud, and monitoring your accounts. A new number is only considered in extreme cases of repeated, ongoing fraud.

Can I hold the credit bureaus responsible for the fraud?

The bureaus are required to investigate disputes and remove fraudulent items, but they are not liable for the theft itself. If a bureau fails to investigate your dispute or removes fraud and then re-reports it, you can file a complaint with the Consumer Financial Protection Bureau. Keep all documentation of your disputes and the bureau's responses.