How to tell if your Social Security number has been stolen

Identity theft involving your Social Security number (SSN) usually shows up in one of three ways: you receive tax documents you didn't file for, you see accounts or charges you don't recognize, or the Social Security Administration (SSA) tells you directly. The most common sign is a tax return filed in your name before you file your own — the IRS will reject your legitimate return and send you a notice.

Check your Social Security statement for earnings you didn't make. You can view your statement online at ssa.gov by creating a my Social Security account. If someone has been working under your number, their wages will appear on your record. You may also notice collection calls about debts you never incurred, or credit inquiries you didn't authorize.

If you receive a notice from the IRS, SSA, or a creditor about activity you don't recognize, treat it as urgent. Do not ignore it or assume it will resolve itself — the longer you wait, the harder it becomes to prove the theft and reclaim your record.

Key Takeaways

  • The most common sign of SSN theft is a tax return filed in your name before you file your own, which the IRS will reject.
  • You can check your Social Security earnings record for unauthorized wages at ssa.gov using a my Social Security account.
  • Report the theft to the IRS, SSA, and the Federal Trade Commission (FTC) in writing, not by phone, so you have a record.
  • Place a fraud alert or credit freeze with the three credit bureaus (Equifax, Experian, TransUnion) to block fraudulent accounts.
  • Keep copies of every report, letter, and document you send — identity theft recovery takes months and you will need proof of your actions.

Report the theft to the Social Security Administration

Contact the SSA by phone at 1-800-772-1213 (TTY 1-800-325-0778) to report the theft. Have your SSN, date of birth, and any documents showing the fraudulent activity ready. The SSA will place a note on your record and may issue you a new number, though this is rare and usually only happens after other steps have failed.

Follow up your phone call with a written report sent to your local Social Security office. Include copies of any documents showing the theft — tax notices, collection letters, credit reports showing unauthorized accounts. Mail it certified with return receipt so you have proof the SSA received it. Your local office address is on ssa.gov or you can call 1-800-772-1213 to ask for it.

The SSA does not investigate identity theft itself, but your report creates an official record that protects you if someone later tries to claim benefits in your name or if your earnings record is disputed.

File a report with the Federal Trade Commission

The FTC maintains a centralized identity theft report at IdentityTheft.gov. This is a free, federal resource where you document the theft and create a recovery plan. You will answer questions about what happened, what accounts or documents are involved, and what steps you have already taken.

The FTC report generates an Identity Theft Report, which is a legal document you can use with creditors, banks, and credit bureaus to prove you are a victim. Many creditors will not remove fraudulent accounts without this report. Print and keep multiple copies — you will send it to multiple places.

The FTC does not investigate individual cases, but the report is your proof of the theft and is recognized by financial institutions and law enforcement. If you later need to dispute charges or remove accounts, creditors will ask for this report.

Report the theft to the IRS if taxes are involved

If someone filed a tax return using your SSN, contact the IRS immediately. Call 1-800-829-1040 or visit irs.gov. Have your SSN, the year the fraudulent return was filed, and any IRS notices ready.

The IRS will flag your account and may issue you an Identity Protection PIN (IP PIN), a six-digit number only you know that you must enter when filing your return. This prevents anyone else from filing in your name. The IP PIN is valid for one tax year and you must request a new one each year after that.

File your own return as soon as possible, even if the year is not yet over. If the fraudulent return was filed first, yours will be rejected — this is normal and expected. Include a copy of your IRS notice and the FTC Identity Theft Report with your return to explain the delay.

Place a fraud alert and credit freeze

Contact one of the three major credit bureaus — Equifax, Experian, or TransUnion — and request a fraud alert. You only need to contact one; by law, that bureau must notify the other two. A fraud alert tells creditors to verify your identity before opening new accounts in your name. It lasts one year and is free.

After the fraud alert expires, you can renew it. If the theft happens again, you can request an extended fraud alert that lasts seven years, though this requires proof of identity theft (your FTC report).

A credit freeze is stronger than a fraud alert. It locks your credit file so no one can open accounts without your permission, even with your SSN. You must request a freeze with each of the three bureaus separately. Freezes are free and last until you remove them. When you need to open a legitimate account, you temporarily unfreeze your credit with the bureau the creditor will check.

Monitor your credit and financial accounts

Request a free credit report from each of the three bureaus at annualcreditreport.com. You are may have access to to one free report per bureau per year. Review each report for accounts you did not open, inquiries you did not authorize, or addresses that are not yours.

Dispute any fraudulent accounts or inquiries in writing with the credit bureau. Include a copy of your FTC Identity Theft Report. The bureau must investigate within 30 days and remove the item if it cannot verify it. Keep copies of your dispute letters and the bureau's responses.

Check your bank and credit card statements monthly for unauthorized charges. Set up account alerts with your bank and credit card companies so you are notified of large purchases or changes to your account. If you find fraudulent charges, contact the financial institution immediately and file a dispute.

Document everything and keep records

Create a folder — physical or digital — and save every document related to the theft: the FTC report, SSA correspondence, IRS notices, credit bureau letters, dispute responses, and copies of any fraudulent accounts or charges. Write down the date and time of every phone call, the name of the person you spoke with, and what was discussed.

Identity theft recovery is not quick. It can take months or years to fully resolve, especially if fraudulent accounts were opened or if wages were reported under your SSN. Creditors, credit bureaus, and government agencies will ask for proof that you reported the theft and took steps to fix it. Your documentation is your proof.

Keep these records for at least three to seven years. Some creditors may dispute your claims years later, and you will need to show what you did when you first discovered the theft.

Frequently Asked Questions

Can I get a new Social Security number?

The SSA rarely issues new numbers. You must show that the theft is causing ongoing, serious harm — for example, that you cannot get a job because of fraudulent wages on your record, or that you cannot resolve the theft any other way. Even then, approval is not may provide. A new number does not erase your old record; both numbers remain linked in SSA systems.

Will I have to pay taxes on fraudulent wages reported under my SSN?

No. If someone worked under your SSN and taxes were withheld, you will not owe tax on those wages. When you file your return, explain the situation and include a copy of your IRS notice and FTC report. The IRS will adjust your record to remove the fraudulent income.

What if the thief opened accounts in my name and I cannot pay them?

Do not pay fraudulent accounts. Contact the creditor in writing with a copy of your FTC Identity Theft Report and explain that the account is fraudulent. The creditor must investigate. If they cannot verify the account is legitimate, they must remove it from your credit report. Do not make payments on accounts you did not open.

How long does it take to fix identity theft?

Simple cases with one or two fraudulent accounts may resolve in a few months. Complex cases with multiple accounts, fraudulent wages, or tax returns can take a year or longer. Credit bureaus have 30 days to investigate disputes, but creditors may take longer to remove accounts. Stay organized and follow up in writing every 30 to 60 days.

Should I file a police report?

You can file a police report, but most local police departments do not investigate identity theft — they will direct you to the FTC. Some jurisdictions allow you to file online. A police report can be useful if you need to show law enforcement involvement, but it is not required to recover from identity theft. Your FTC report is usually sufficient.