Act within the first 24 hours

If you know or suspect someone has your Social Security number, contact the three major credit bureaus — Equifax, Experian, and TransUnion — by phone or online to place a fraud alert on your credit file. A fraud alert tells lenders to verify your identity before opening new accounts in your name. You only need to call one bureau; they are required to notify the other two.

Equifax: 1-800-525-6285. Experian: 1-888-397-3742. TransUnion: 1-800-680-7289. Have your Social Security number ready when you call. The alert lasts one year and is free.

At the same time, go to IdentityTheft.gov, the official site run by the Federal Trade Commission. Create an account, report the theft, and generate a recovery plan. The site will walk you through the next steps and create a record of your report, which you may need if fraudulent accounts are opened.

Key Takeaways

  • Contact all three credit bureaus within 24 hours to place a fraud alert, which costs nothing and tells lenders to verify your identity before opening accounts.
  • Report the theft to the Federal Trade Commission at IdentityTheft.gov and keep the report number for your records.
  • Check your credit reports from all three bureaus at AnnualCreditReport.com (the only free, official source) for accounts you did not open.
  • If fraudulent accounts exist, file a report with your local police department and the FBI's Internet Crime Complaint Center, then send copies to the creditors.
  • Consider a credit freeze if you do not plan to open new accounts soon; it prevents anyone, including you, from opening accounts without your PIN.

Check your credit reports for unauthorized accounts

Go to AnnualCreditReport.com — this is the only official, free source for your credit reports. You are may have access to to one free report from each bureau per year. Request all three at once or stagger them over the year to monitor more frequently.

Review each report carefully for accounts you did not open, inquiries from lenders you did not contact, and addresses or employers you do not recognize. Write down the account numbers, creditor names, and dates. Do not assume small balances are harmless; fraudsters often test stolen numbers with small charges first.

If you find fraudulent accounts, contact the creditor directly using the phone number on your credit report (not a number the fraudster may have provided). Tell them the account is fraudulent, provide your police report number if you have one, and ask them to close the account and remove it from your credit file. Get the name and reference number of the person you speak with.

File a police report and report to the FBI

Go to your local police department in person or online (many now accept reports through their websites) and file a report for identity theft. Bring your ID, your Social Security number, and documentation of any fraudulent accounts. Ask for a copy of the report number; you will need this when disputing fraudulent charges with creditors and credit bureaus.

Also file a complaint with the FBI's Internet Crime Complaint Center at IC3.gov. This is a separate report from the police report and helps the FBI track identity theft patterns. You do not need to have been scammed online to file here; the IC3 handles all cybercrime complaints.

Dispute fraudulent accounts and charges with credit bureaus

Send a written dispute to each credit bureau that is reporting a fraudulent account. Include your police report number, your FTC report number, copies of the fraudulent account statements, and a clear statement that you did not open the account. Send the letter by certified mail with return receipt requested so you have proof of delivery.

The bureau must investigate within 30 days and remove the account if they cannot verify it is legitimate. If they do not remove it, you can file a complaint with the Consumer Financial Protection Bureau at ConsumerFinance.gov.

For fraudulent charges on accounts that are actually yours (such as credit cards you do hold), contact the card issuer directly. Most card companies have fraud departments and will issue you a new card and reverse unauthorized charges, though the process varies by issuer.

Decide whether to freeze your credit

A credit freeze prevents anyone — including you — from opening new accounts using your Social Security number without a PIN you create. It is free and does not affect your credit score. If you do not plan to open new credit accounts, loans, or utilities in the near future, a freeze adds a layer of protection.

To freeze your credit, contact each of the three bureaus separately. Equifax: Freeze.equifax.com. Experian: Experian.com/freeze. TransUnion: Transunion.com/credit-freeze. You will receive a PIN; keep it in a safe place. When you want to open a new account later, you will need to temporarily lift the freeze by providing your PIN.

A freeze is different from a fraud alert. An alert stays in place for one year and still allows lenders to check your credit; a freeze blocks access entirely until you lift it. Some people use an alert first, then add a freeze if fraud actually occurs.

Monitor your accounts and credit going forward

Check your credit reports again three to six months after the theft, then annually. Watch your bank and credit card statements monthly for charges you do not recognize. Many card issuers offer free credit monitoring; ask yours whether it is included with your account.

If new fraudulent accounts appear after you have placed a fraud alert, contact the bureaus again to renew or extend the alert. You can also place an extended fraud alert that lasts seven years if you have already been a victim of identity theft.

Keep records of all your reports — police, FTC, credit bureau disputes, and creditor communications — in one folder. You may need to reference them if questions arise later.

Frequently Asked Questions

Can someone open a bank account with just my Social Security number?

Most banks require more than a Social Security number alone — typically a photo ID, address verification, and sometimes a credit check. However, fraudsters may use your number along with other stolen information (name, address, date of birth) to open accounts. This is why monitoring your credit reports and placing a fraud alert quickly is important.

Will my credit score drop if someone uses my Social Security number?

Yes, fraudulent accounts and missed payments on accounts you did not open will lower your score. However, once you dispute and remove the fraudulent accounts from your credit report, your score should recover over time. The damage is temporary if you act quickly.

Do I need to change my Social Security number?

The Social Security Administration rarely issues new numbers. Changing your number creates more problems than it solves — you would have to update it everywhere (employers, banks, insurance). Focus instead on monitoring your credit and placing a freeze. A new number does not erase the old one from records.

What if I find out about the theft years later?

You can still place a fraud alert and freeze your credit at any time. You can also dispute fraudulent accounts on your credit report for up to seven years from the date they first appeared. Contact the bureaus and creditors when ready, even if the theft happened long ago.

Is identity theft insurance worth buying?

Many of the services identity theft insurance covers — credit monitoring, fraud alerts, credit freezes — are free or low-cost on your own. Insurance may help if you need legal information or have to take time off work to resolve fraud, but it is not required to protect yourself.