What should you do if someone has your Social Security number? Actions and precautions

How can someone get your Social Security number?

Most people don’t realize how many doors into their Social Security number actually exist. Some exposures are entirely out of your control — a data breach at a hospital, insurer, or government agency can put millions of SSNs into criminal hands overnight. Other exposures are more deliberate. Scammers may call posing as Internal Revenue Service (IRS) agents or Social Security Administration (SSA) representatives, manufacturing urgency to pressure you into “verifying” your number over the phone. Some cast a wider net through phishing emails, fake job postings requesting your SSN for a supposed background check, or counterfeit websites built to harvest personal details. And because tax documents, insurance paperwork, and financial statements carry your SSN in plain print, even something as low-tech as rifling through your mail or recycling bin can be enough for someone to get hold of your SSN.

What happens if your Social Security number is compromised?

If a criminal gains access to your Social Security number, they can cause serious, far-reaching damage. Your SSN is one of the most important pieces of personal information you have, which is why identity thieves can exploit it in so many ways, including:

• Open credit cards or loans in your name.
• Access your tax returns or file fraudulent tax claims.
• Gain employment under your identity.
• File for unemployment or other government benefits in your name.
• Commit medical or criminal fraud.
• Engage in check fraud by linking your SSN to fake bank accounts or stolen checks.
• Potentially access financial accounts when combined with other stolen data.

This list could go on — identity thieves are constantly inventing new scams. Your SSN plays a critical role in verifying your identity across nearly every aspect of life in the US. If someone gets access to it, there’s almost no limit to the damage they can do.

If you’d like to learn more, you can take a look at our guide on what someone can do with your Social Security number.

Know instantly if your SSN lands on the dark web

Act before criminals do.
Up to 78% off identity theft protection

Get the Deal⁠‌

30-day money-back guarantee

View promotion details.

What should you do if someone has your Social Security number?

If you believe someone has your Social Security number or suspect identity theft involving it, take immediate action to limit the damage, starting with the steps laid out in the table below.

Place a fraud alert on your credit report

To stop new credit from being opened in your name, immediately place a fraud alert with one of the three major credit bureaus (Equifax, Experian, or TransUnion). Once one bureau processes your request, that same bureau is required to notify the other two, so you only need to make one call or visit.

A fraud alert instructs lenders to verify your identity before approving any new credit applications. Initial fraud alerts are free and last one year, after which you can renew them. If you’ve filed an Identity Theft Report with the FTC or a police report, you may qualify for an extended fraud alert, which lasts seven years.

You can reach any of the three bureaus using the details below:

• Equifax: equifax.com/personal/credit-report-services or 1-800-685-1111
• Experian: experian.com/fraud or 1-888-397-3742
• TransUnion: transunion.com/credit-help or 1-800-916-8800

Freeze your credit with all three credit bureaus

A credit freeze offers stronger protection than a fraud alert. While a fraud alert asks lenders to verify your identity, a freeze prevents anyone from accessing your credit file at all, making it impossible to open new accounts or take out loans in your name while the freeze is active. But unlike a fraud alert, a freeze doesn’t carry over automatically, so you’ll need to contact all three bureaus individually.

Freezing your credit is completely free at all three major bureaus, and each freeze takes effect within one business day when requested online or by phone — or within three business days if requested by mail. Once the freeze is in effect, it stays active until you choose to lift it. You can temporarily or permanently unfreeze your credit at any time using a secure PIN or password.

Report identity theft to the Federal Trade Commission

If you believe your SSN has been stolen or used fraudulently, file a report with the FTC at IdentityTheft.gov. This is a centralized system for managing identity theft cases, and it takes about 10 minutes to complete.

When filing the report, you’ll need to provide your personal information, a description of what happened, and any details about the fraudulent activity you’re aware of, such as accounts opened in your name, unauthorized charges, or suspicious inquiries on your credit report.

Having the following on hand will make the process smoother:

• A government-issued ID
• Your Social Security number
• Any evidence of fraud, such as credit statements, collection notices, or emails referencing accounts you didn’t open
• Details of any other steps you’ve already taken, such as a credit freeze or fraud alert

Once you submit the report, you’ll receive a personal recovery plan and an official Identity Theft Report, which you may need when dealing with creditors or law enforcement.

If your SSN has only been exposed — say, in a data breach or phishing scam — but you don’t see any signs of misuse yet, you’re not required to file an FTC report. Still, monitoring your credit and placing a fraud alert would be smart in this case.

Contact the Social Security Administration

Reach out to the Social Security Administration’s fraud hotline at 1-800-269-0271 or visit ssa.gov to access helpful resources.

It’s also a good time to log in to your “my Social Security” account. This online portal lets you replace a lost or stolen Social Security card, track your earnings history, view benefit estimates, and monitor for any suspicious activity. Your Social Security Statement will give you key insights into your Medicare, disability, and retirement benefits — and may help you spot any irregularities tied to identity theft, including Medicare scams.

If you’re wondering whether you can get a new number, the short answer is yes, you can change your Social Security number — but only under very specific circumstances, and often as a last resort. Changing your SSN can have serious consequences, including the loss of your credit history, academic records, and employment background. With no credit file under a new number, you could have trouble applying for loans, renting housing, or passing routine background checks.

That said, if you’ve exhausted all other options and your number continues to be misused despite safeguards, you may be eligible for a new Social Security number.

File a police report

A police report formalizes your identity theft case and helps build a timeline of the incident. It may be required by the FTC or your insurance provider. You should also share it with companies where your SSN or other personally identifiable information was used for fraudulent activity. 

A police report is especially important if you have any information that could help identify the person who stole your Social Security number or if your number was used in connection with a crime. This includes situations where someone committed fraud, received benefits, or was arrested using your name, all of which fall under the classification of criminal identity theft.

When filing the report, bring documentation: a copy of your FTC Identity Theft Report, government-issued ID, and any evidence of fraud (for example, emails and credit statements).

Notify the Internal Revenue Service

If someone has your SSN, they may attempt to file a fraudulent tax return in your name to claim a refund. Contact the IRS as soon as possible to get ahead of it.

Start by submitting Form 14039 at IRS.gov. This formally notifies the IRS that your SSN may be compromised and flags your account for monitoring. You can file online or by mail.

You should also log in to your IRS account to check for any unauthorized filings or suspicious activity tied to your SSN.

How can you prevent your Social Security number from being stolen?

While you can’t eliminate every risk, you can take steps to protect your financial health and reduce your risk of becoming a victim of identity theft. Prevention starts with strong habits and a few smart tools:

• Get an IP PIN and renew it each January. This IRS-issued six-digit code adds extra security to your SSN and prevents fraudsters from filing a tax return using it.
• Leave your Social Security card at home. You usually don’t need to carry it in your wallet. Only bring it when it’s absolutely necessary.
• Shred documents before discarding them. Anything that includes your SSN — tax forms, insurance paperwork, or financial statements — should be destroyed.
• Be selective about where you share your SSN. Don’t send it via email or enter it on a website unless you’re sure the site is legitimate and secure. It’s also reasonable to ask how a company plans to store and protect your information. 
• Understand how scammers operate. A compromised email account can lead to phishing attempts that target your SSN. Know what to do if a scammer has your email address and take steps to lock it down if needed.
• Stay alert for phishing, smishing, and spoofing attempts. If someone contacts you unexpectedly and asks for sensitive information, pause. Verify the source — the email address, phone number, or website — before responding or clicking any links.
• Enable credit monitoring. Real-time alerts about activity tied to your identity are the first warning sign of identity theft.
• Secure all your financial accounts. Use strong passwords and two-factor authentication (2FA).
• Regularly check your credit reports. Visit AnnualCreditReport.com to access free reports from each of the three major credit bureaus. Look for unfamiliar accounts or incorrect personal or financial information.
• Consider an identity theft protection service. For example, Coveron includes dark web monitoring and scans your SSN across millions of data points. If your number shows up where it shouldn’t, you’ll receive an immediate alert so you can take action before serious damage is done.