Social Security identity theft means someone has obtained your Social Security number and is using it to open accounts, get jobs, file tax returns, or claim benefits in your name.
Unlike other forms of identity theft, Social Security number theft is difficult to spot immediately because the thief does not need your physical documents or credit cards. They only need the nine digits. A thief might use your number to work under a false name, apply for credit, file a fraudulent tax return, or claim unemployment or disability benefits. You may not discover it until you apply for a loan, check your credit report, or receive a notice from the IRS or Social Security Administration about income or benefits you did not receive.
The damage can take years to untangle. Your credit score can drop, your tax record can become tangled with someone else's income, and you may be denied benefits you are may have access to to because the thief's earnings are mixed with yours in the Social Security system. The sooner you act after discovering the theft, the easier the recovery process becomes.
Key Takeaways
- Social Security number theft is often discovered through a credit report, tax notice, or unexpected benefit denial rather than through direct notification.
- You should report the theft to the Social Security Administration, the Federal Trade Commission, and your bank or credit card companies within days of discovery.
- Creating a fraud alert with the three major credit bureaus (Equifax, Experian, TransUnion) freezes new credit applications in your name for one year.
- If your earnings record has been altered by the thief's work history, you will need to contact Social Security directly to correct it, which can take several months.
- If the thief filed a tax return using your number, you must report it to the IRS and may need to file your own return with Form 14039 (Identity Theft Affidavit).
How to report Social Security number theft to the government
Start by calling the Social Security Administration's fraud hotline at 1-800-269-0271. Have your Social Security number, date of birth, and any documents showing the fraudulent activity ready. Social Security will place a note on your account and can issue you a new number if the theft is severe, though this is rare and comes with complications because you must update your number everywhere you work and receive benefits.
Next, file a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record and generates a recovery plan specific to your situation. The FTC does not investigate individual cases, but the report is legally recognized and you can use it when disputing fraudulent accounts or correcting records with other agencies.
If the thief used your number to work, Social Security's earnings record will show income you did not earn. Contact Social Security in writing to request a correction. Include a copy of your tax return for that year, a letter explaining that the income is fraudulent, and any supporting documents (such as your actual W-2 forms or pay stubs). Social Security will investigate and correct the record, but this process typically takes three to six months.
Protecting your credit and bank accounts
Call each of the three major credit bureaus — Equifax (1-800-685-1111), Experian (1-888-397-3742), and TransUnion (1-800-680-7289) — and request a fraud alert. This alert tells lenders to verify your identity before opening new accounts in your name. The alert lasts one year and is free. You do not need to pay for credit monitoring services; the bureaus are required to provide you with a free credit report when you place a fraud alert.
Review your credit reports from all three bureaus at AnnualCreditReport.com (the only federally authorized site for free reports). Look for accounts you did not open, inquiries from lenders you did not contact, and incorrect personal information. Dispute any fraudulent accounts in writing with the credit bureau and the creditor. Keep copies of all correspondence.
Contact your bank and credit card companies directly. If the thief opened accounts using your number, the bank may close them and issue you new cards. If fraudulent charges appear on your existing accounts, report them immediately; federal law limits your liability to $50 per card, and most banks waive this if you report within 60 days.
Correcting your tax record if a fraudulent return was filed
If you receive a notice from the IRS about income you did not earn, or if your tax refund is delayed or denied unexpectedly, the thief may have filed a return using your number. Do not ignore IRS notices. Call the IRS at 1-800-829-1040 and explain the situation. The IRS has a dedicated identity theft unit and can place a flag on your account.
File your own tax return as normal, even if you think a fraudulent one was already filed. Include Form 14039 (Identity Theft Affidavit) with your return. Mail it to the IRS address listed in the notice you received, not to your regular tax filing address. Keep copies of everything you send. The IRS will investigate and correct your record, though this can take several months to over a year depending on the complexity of the case.
If you are owed a refund and the thief's fraudulent return was processed first, you will not receive your refund until the IRS resolves the identity theft case. This is one reason to report the theft immediately — the sooner the IRS knows, the sooner they can stop processing fraudulent returns in your name.
What to do if the thief used your number to work
When someone works under your Social Security number, their earnings are added to your official work record. This affects your future Social Security benefits because benefits are calculated based on your 35 highest-earning years. If the thief's earnings are mixed in, your benefit amount could be reduced or delayed.
Contact Social Security and request a corrected earnings record. You will need to provide proof that you did not work during the period in question — such as W-2 forms from your actual employers, pay stubs, or tax returns showing your real income. Social Security will investigate and remove the fraudulent earnings from your record. This process is free but can take several months.
If the thief is still working under your number, Social Security may contact you about a duplicate Social Security number in the system. Report this to Social Security immediately and provide any information you have about where the thief may be working. Social Security will notify the employer that the number is fraudulent.
Monitoring your accounts and records going forward
After you have reported the theft, check your credit reports every few months for the next year. You are may have access to to one free report per year from each bureau at AnnualCreditReport.com. Many people check one bureau every four months to spread out their monitoring throughout the year.
Set up account alerts with your bank and credit card companies. Most banks offer free alerts that notify you by email or text when large transactions occur, new cards are issued, or new accounts are opened. These alerts can catch fraudulent activity quickly.
Consider a credit freeze if you do not plan to open new accounts soon. A freeze prevents anyone — including you — from opening new credit in your name without unfreezing it first. Unlike a fraud alert, a freeze is permanent until you remove it, and it is free. You place a freeze with each of the three credit bureaus separately.
Frequently Asked Questions
Can I get a new Social Security number?
Yes, but only in limited circumstances. Social Security will issue a new number if the theft is severe and ongoing, or if you can show that keeping your current number puts you at risk. You must apply in person at a Social Security office with proof of citizenship, age, and identity. A new number creates complications because you must update it with your employer, banks, and all government agencies, and your old earnings record does not automatically transfer.
Will I be held responsible for debts the thief created?
No. Once you report the fraud to the creditor and the credit bureau, you are not responsible for paying fraudulent accounts opened in your name. You may need to dispute the accounts in writing and provide copies of your fraud report, but the creditor cannot pursue you for payment on accounts you did not open.
How long does it take to fix my Social Security record?
Correcting your earnings record typically takes three to six months from the date Social Security receives your written request. Tax record corrections through the IRS can take six months to over a year. The timeline depends on how much investigation is needed and how backed up the agency is.
What if I discover the theft years later?
Report it immediately even if years have passed. Social Security and the IRS can still correct your records, though the process may be more complex if multiple years of fraudulent earnings or returns are involved. The sooner you report, the sooner the correction begins.
Do I need to hire a lawyer or pay for identity theft services?
No. All the steps to report and correct Social Security number theft are free. You can do them yourself by contacting Social Security, the FTC, the IRS, and the credit bureaus directly. Identity theft protection services and lawyers are not necessary for recovery, though some people choose them for peace of mind or if the case is unusually complex.