How a Social Security Number Is Structured

A Social Security number has nine digits divided into three parts: the area number (first three digits), the group number (middle two digits), and the serial number (last four digits). Written out, it looks like XXX-XX-XXXX. Each part was assigned for a specific reason when the number was issued, though the system has changed over time.

The area number originally indicated the state where you applied for your Social Security card. Before 2011, the first three digits were tied to geography — someone with a number starting in 001 to 003 came from New Hampshire, for example. This is no longer true. Since 2011, the Social Security Administration has randomized all new numbers, so the first three digits no longer reveal where someone lived or applied.

The group number (middle two digits) and serial number (last four digits) were assigned in a specific order when numbers were issued sequentially. Today, these are also randomized. Understanding this matters because scammers sometimes create fake numbers by guessing patterns, and knowing the current system helps you spot when a number looks wrong.

Key Takeaways

  • Social Security numbers follow the format XXX-XX-XXXX, with three parts that were historically tied to geography and issue order, but are now randomized for all new numbers.
  • Before 2011, the first three digits indicated the state where someone applied for their card; after 2011, this connection no longer exists.
  • Certain number combinations are never issued — for example, numbers starting with 000, 666, or 900-999 are invalid and should raise suspicion.
  • Knowing the format helps you spot fraudulent or fake numbers, which is useful when verifying someone's identity or checking documents.

Numbers That Are Never Issued

The Social Security Administration does not issue numbers with certain patterns, and these invalid combinations are a red flag for fraud. A number starting with 000 is never valid. Numbers starting with 666 are also never issued. Any number in the range 900 to 999 (the first three digits) is invalid.

Additionally, a number where all digits in the group or serial section are zeros — such as XXX-00-XXXX or XXX-XX-0000 — is not a real Social Security number. If you encounter a number matching any of these patterns on a document, application, or identity verification, it is a sign the number is fake or the document is fraudulent.

Why the Format Changed in 2011

For decades, Social Security numbers were issued in a predictable order based on geography and time. This predictability made it easier for people to guess or create fake numbers. Scammers could estimate someone's number based on where they lived and roughly when they were born.

In June 2011, the Social Security Administration switched to randomization. All new numbers issued since then have had their area, group, and serial numbers assigned randomly rather than sequentially. This makes it much harder to guess or fabricate a number. However, anyone who received their number before 2011 still has a number that reflects the old system — and that number remains valid for life.

How to Verify a Number Format

When you need to check whether a Social Security number looks legitimate, start by checking the first three digits. If they are 000, 666, or between 900 and 999, the number is invalid. Next, check the middle two digits and last four digits — if either section is all zeros, the number is not real.

These checks catch obvious fakes but do not confirm that a number actually belongs to a specific person. Only the Social Security Administration can verify that. If you are verifying someone's identity for employment, housing, credit, or legal purposes, you should use official verification channels — such as E-Verify for employment or a background check service — rather than trying to validate the format yourself.

What the Format Does Not Tell You

Knowing the format helps you spot invalid numbers, but it does not tell you who owns a number or whether someone is using their own number or someone else's. A correctly formatted number could belong to anyone. The format alone cannot reveal someone's age, current location, employment status, or whether they are the person claiming to use it.

This is why format checking is only a first step in identity verification. If you are hiring someone, renting to someone, or extending credit, you need to verify the number through official channels — not just confirm it follows the right pattern. Employers use E-Verify, landlords may run background checks, and lenders verify through credit bureaus and the Social Security Administration.

Protecting Your Number When Sharing It

Because your Social Security number is tied to your identity, credit, and government benefits, you should share it only when necessary and only with organizations you trust. Legitimate employers, banks, government agencies, and healthcare providers may need it. Retailers, schools, and most other organizations should not.

When you do share your number, confirm you are dealing with a real organization — call the main number listed on their official website rather than using a number from an email or letter. Scammers create fake documents and emails that look official but direct you to give your number to criminals. If someone asks for your Social Security number unexpectedly, it is reasonable to ask why they need it and to verify their identity before providing it.

Frequently Asked Questions

Can I tell where someone is from based on their Social Security number?

Not reliably. Before 2011, the first three digits indicated the state where someone applied for their card, but that connection no longer exists for numbers issued after June 2011. Even for older numbers, the area number only shows where they applied — not where they currently live or where they were born.

What should I do if I think someone is using a fake Social Security number?

If you suspect fraud in an employment, housing, or credit context, report it to the organization involved — your employer, landlord, or lender. If you suspect identity theft or fraud against you, contact the Social Security Administration's Office of Inspector General or file a report with the Federal Trade Commission at IdentityTheft.gov.

Is it safe to share my Social Security number online?

Only with secure, verified websites of organizations you trust. Never share it via email, text, or phone unless you initiated the contact and confirmed you are speaking with a real representative. Legitimate organizations will not ask for your full number via email or unsolicited calls.

Does a valid format mean the number is real?

No. A number can follow the correct format but not actually be issued to anyone. Format checking only catches obviously fake numbers — those starting with 000, 666, or 900-999, or those with all zeros in the group or serial section. To verify that a number actually belongs to someone, you need official verification through the Social Security Administration or a service like E-Verify.