A leaked Social Security number puts you at risk for identity theft, but immediate steps can limit the damage

If your Social Security number has been exposed in a data breach, leaked online, or compromised in any way, your first move is to place a fraud alert with the three major credit bureaus. A fraud alert tells lenders to verify your identity before opening new accounts in your name. You do not need to pay for this, and it takes about 15 minutes to set up. After that, monitor your credit report and consider a credit freeze if the breach involved financial information.

The risk is real: someone with your Social Security number can open credit cards, take out loans, file a false tax return, or apply for benefits in your name. But you have legal protections, and acting quickly makes a huge difference in how much damage occurs and how hard it is to clean up.

Key Takeaways

  • Place a fraud alert immediately by calling Equifax, Experian, or TransUnion — you only need to call one bureau, and they notify the other two.
  • Request a free credit report from annualcreditreport.com and check it for accounts or inquiries you did not open.
  • A credit freeze prevents new accounts from being opened in your name and costs nothing to place or remove.
  • If you spot fraudulent accounts or charges, file a report with the Federal Trade Commission at identitytheft.gov and keep the report number for creditors and police.
  • Social Security will not revoke or change your number just because it was leaked, but you can request a new one if identity theft has already occurred.

Place a fraud alert with the credit bureaus

A fraud alert is a flag on your credit file that tells lenders to contact you by phone before approving new credit. It is free and takes effect immediately. You only need to call one of the three major credit bureaus — Equifax, Experian, or TransUnion — and they are required to notify the other two. The initial alert lasts one year.

Call the bureau's fraud department directly. Equifax: 1-888-378-4329. Experian: 1-888-397-3742. TransUnion: 1-800-680-7289. Have your Social Security number, date of birth, and current address ready. The bureau will ask you to verify your identity and may send a confirmation letter. Keep that letter for your records.

After one year, the alert expires. If you want ongoing protection, you can renew it, or you can move to a credit freeze instead, which is stronger but requires more steps to lift when you actually need to open new accounts.

Check your credit report for unauthorized accounts

You are may have access to to one free credit report per year from each of the three bureaus. Go to annualcreditreport.com — this is the official site authorized by federal law. Do not use creditkarma.com, freecreditreport.com, or other sites that look similar; many of those charge fees or enroll you in monitoring services you did not ask for.

On annualcreditreport.com, you can request reports from all three bureaus at once or stagger them throughout the year. Look for accounts you did not open, credit inquiries from lenders you never contacted, or addresses that are not yours. If you spot fraud, write down the account number, the date you discovered it, and the name of the creditor.

If the breach just happened and you have not yet seen fraudulent activity, check your report anyway. Criminals sometimes wait weeks or months before using a stolen number. Set a reminder to check again in 30 and 60 days.

Consider a credit freeze to prevent new accounts

A credit freeze is stronger than a fraud alert. It locks your credit file so that no one — not even you — can open new accounts without unfreezing it first. This stops most identity theft cold, because lenders cannot see your credit report and will not approve new credit.

You can place a freeze for free by contacting each of the three bureaus. Equifax: equifax.com/personal/credit-report-services/credit-freeze. Experian: experian.com/freeze. TransUnion: transunion.com/credit-freeze. You will need your Social Security number, date of birth, address, and email. Each bureau will give you a PIN or password; save these somewhere safe, because you will need them to unfreeze your credit later.

The freeze takes effect within one business day. When you want to apply for a mortgage, car loan, or credit card, you will need to unfreeze your credit temporarily. You can do this online or by phone, and it usually takes a few hours to a few days. After the lender pulls your report, you can freeze it again.

File an identity theft report if fraud has already occurred

If you have already discovered fraudulent accounts, charges, or inquiries in your name, file a report with the Federal Trade Commission at identitytheft.gov. This is free and creates an official record of the theft. The FTC will give you a report number and an identity theft recovery plan tailored to your situation.

Bring this report number when you contact creditors, banks, or police. Many creditors will not remove fraudulent charges without it. The report also documents the timeline, which helps if you need to dispute charges or defend yourself against collection attempts.

After filing with the FTC, contact the creditors or banks where fraud occurred. Tell them you are a victim of identity theft, provide your FTC report number, and ask them to close the fraudulent accounts and remove the charges. Keep records of every call — write down the date, time, person's name, and what was said.

Understand what Social Security will and will not do

Social Security does not automatically revoke or change your number just because it was leaked. Your number is tied to your work history and benefits record, and changing it creates more problems than it solves — you would have to update it with your employer, the IRS, banks, and every other institution that has it on file.

However, if you can prove that identity theft has already occurred — meaning someone has already used your number to work, file taxes, or claim benefits — you can request a new number. You will need to provide evidence of the theft, such as your FTC identity theft report, a police report, or documentation from the IRS or Social Security showing fraudulent activity. Go to ssa.gov or visit your local Social Security office to request a replacement number.

Changing your number is a last resort. Do it only if the theft is severe and ongoing, because the new number will not erase the old one from records, and you may still have to deal with the fraudulent activity under the old number.

Monitor your accounts and tax records going forward

After a leak, check your bank and credit card statements monthly for charges you did not make. Set up account alerts with your bank so you get notified of large purchases or withdrawals. Many banks offer this for free.

Also watch for mail from creditors, tax documents, or government agencies about accounts or benefits you did not apply for. If someone filed a tax return in your name, the IRS will send you a notice. If someone claimed unemployment benefits using your number, your state's labor department will contact you. These are signs of ongoing fraud, and you should report them to the FTC and police immediately.

Consider signing up for credit monitoring through one of the bureaus. Many offer free monitoring for a limited time after a breach. This alerts you to new accounts or inquiries in real time, which can help you catch fraud faster than waiting for your monthly statement.

Frequently Asked Questions

How do I know if my Social Security number was actually leaked?

You may receive a letter from a company notifying you of a breach, or you might hear about it in the news. You can also check haveibeenpwned.com, a free site that tracks known data breaches. Enter your email address or Social Security number to see if it has appeared in any public breach. If it has, the site will tell you which breach and when.

Do I need to pay for credit monitoring or identity theft protection?

No. Fraud alerts and credit freezes are free. Credit monitoring is optional and often free for the first year after a breach. Paid services like LifeLock or Experian's monitoring plans offer convenience and insurance, but they are not necessary to protect yourself. The free tools — fraud alert, credit freeze, and regular credit report checks — do most of the work.

Can I get my money back if someone used my number to open credit cards?

Yes, but the process depends on whether the fraud was on your own accounts or new accounts opened in your name. If someone made unauthorized charges on your existing credit card, your card issuer is responsible for removing them under federal law. If someone opened a new credit card account in your name, you are not liable for charges, but you will need to dispute the account with the creditor and provide your FTC identity theft report.

What if I discover fraud years after the breach happened?

Report it to the FTC and the creditors involved immediately. There is no time limit on filing an identity theft report, and creditors must investigate disputes. However, the longer you wait, the harder it may be to prove you did not authorize the accounts. Check your credit reports regularly so you catch fraud as early as possible.

Will a fraud alert or credit freeze affect my credit score?

No. Neither a fraud alert nor a credit freeze will lower your credit score. They do not appear on your credit report in a way that affects scoring. However, a credit freeze may slow down your ability to get approved for new credit, because lenders cannot see your report until you unfreeze it.