Act within the first 30 days to limit damage

If you believe your Social Security number has been stolen, contact the Social Security Administration's fraud hotline at 1-800-269-0271 as soon as possible. They can flag your account and watch for unauthorized use. You should also file a report with the Federal Trade Commission at IdentityTheft.gov, which creates an official record and gives you a recovery plan tailored to your situation.

The first 30 days matter most. During this window, you can place a free fraud alert on your credit file, which tells lenders to verify your identity before opening new accounts in your name. After 30 days, you can request a credit freeze, which is stronger but takes longer to set up and remove when you need credit yourself.

Contact all three credit bureaus — Equifax, Experian, and TransUnion — to report the theft. Each one maintains a separate file on you, and a thief can use your number at any of them. You can reach all three through the centralized fraud alert line at 1-888-5-OPTOUT (1-888-567-8688).

Key Takeaways

  • Call the Social Security Administration's fraud line at 1-800-269-0271 and file a report at IdentityTheft.gov within the first few days.
  • Place a fraud alert with all three credit bureaus through the centralized number 1-888-567-8688, which is free and takes about 15 minutes.
  • Request your credit reports from all three bureaus at AnnualCreditReport.com and look for accounts you did not open.
  • If you find fraudulent accounts, contact the creditor directly and provide them with your FTC Identity Theft Report as proof.
  • A credit freeze is stronger than a fraud alert but requires you to unfreeze your file each time you want to open new credit.

Check your credit reports for accounts opened in your name

Go to AnnualCreditReport.com and request your credit report from all three bureaus at once. This is the official site run by the three bureaus themselves and is the only place to get your free annual report. Do not use other websites that claim to offer free reports — many charge hidden fees or sell your information.

Read each report carefully for accounts you do not recognize. Look for credit cards, loans, phone accounts, and utility accounts opened recently. Write down the account number, the date it was opened, and the creditor's name for each fraudulent account you find. This list becomes your evidence when you contact creditors.

If you find fraud on your reports, you have the right to dispute it. Send a written dispute to the credit bureau that reported the false account. Include a copy of your FTC Identity Theft Report, which the bureau must accept as proof that you are a victim. The bureau then has 30 days to investigate and remove the account if it cannot verify it is legitimate.

Contact creditors directly about fraudulent accounts

For each fraudulent account you found, call the creditor's fraud department and report it. Have your FTC Identity Theft Report ready — creditors are required to accept it as proof of identity theft. Ask the creditor to close the account and send you written confirmation that the fraudulent charges have been removed.

Keep a log of every call: the date, the name of the person you spoke with, what they said, and what they promised to do. Ask for a reference number. If a creditor refuses to remove charges or close the account, send a follow-up letter with copies of your FTC report and a description of what happened on the call.

Some creditors will remove fraudulent charges immediately; others take weeks. Do not pay any fraudulent charges, and do not ignore collection notices. If a debt collector contacts you about a fraudulent account, send them a written dispute within 30 days of first contact, along with a copy of your FTC report.

Understand fraud alerts versus credit freezes

A fraud alert tells lenders to call you before opening new accounts in your name. It lasts one year and is free. You place it by calling one bureau, and that bureau notifies the other two. A fraud alert does not prevent you from opening credit yourself — you just have to verify your identity when you do.

A credit freeze blocks lenders from seeing your credit file entirely, so they cannot open accounts without your permission. It is stronger than a fraud alert but also more inconvenient: you have to unfreeze your file each time you want to open new credit, which takes a few hours to a few days depending on the bureau. Freezes are free in most states, though a few charge a small fee to place or lift one.

Many people use both: a fraud alert first, then a freeze after 30 days if fraud continues. You can also place a temporary freeze that lifts automatically after a set date, which is useful if you know you will need credit soon.

Monitor your Social Security account and earnings record

Create an account at ssa.gov/myaccount to view your Social Security earnings record and check for unauthorized work reported under your number. A thief who uses your number to work will create false earnings on your record, which can affect your future benefits. Log in regularly — at least every few months for the first year — to watch for changes.

If you see earnings you did not report, contact the Social Security Administration at 1-800-269-0271 with the details: the employer name, the dates, and the amount. Social Security can investigate and correct your record, though the process takes time. Keep copies of your tax returns and W-2 forms as proof of what you actually earned.

If a thief files taxes using your number, the IRS will catch it when you file your own return. The IRS has a process for identity theft victims, and you can report it through their website or by calling 1-800-908-4490. Having your FTC Identity Theft Report ready will speed up the process.

Know what you are not responsible for paying

You are not responsible for charges made by someone who stole your Social Security number, even if they opened accounts in your name. Federal law limits your liability for fraudulent credit card charges to $50, and most major card issuers waive even that. For other types of fraud — bank accounts, loans, utility accounts — your liability depends on how quickly you report it and what the creditor's policies are.

If a creditor tries to collect a fraudulent debt from you, send a written dispute within 30 days of their first contact. Include a copy of your FTC Identity Theft Report. The creditor must then prove the debt is legitimate before they can pursue collection. If they cannot, they must stop contacting you and remove the debt from your credit report.

Do not let a creditor pressure you into paying a fraudulent debt. Your FTC report is your legal proof that you are a victim, and creditors know this. If a creditor continues to pursue you after you have sent a dispute with your FTC report, you can file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov.

Rebuild your credit after identity theft

Once fraudulent accounts are removed from your credit reports, your credit score will begin to recover. This can take months or even years depending on how much damage was done. In the meantime, you can rebuild by keeping your existing accounts in good standing and using credit responsibly.

If you have trouble opening new credit because of the fraud, some lenders offer credit-builder loans or secured credit cards designed for people recovering from identity theft. These require a deposit but help you rebuild your score. Check with your bank or credit union first — they often have programs for existing customers.

Continue to monitor your credit reports at least once a year, even after the fraud is resolved. You can get one free report per year from each bureau at AnnualCreditReport.com. Some people stagger their requests — one bureau every four months — to watch for new fraud throughout the year.

Frequently Asked Questions

Will my Social Security benefits be affected if someone uses my number to work?

Your benefits could be affected if false earnings are added to your record, because Social Security calculates benefits based on your lifetime earnings. Contact the Social Security Administration at 1-800-269-0271 to report the fraud and ask them to correct your record. Bring copies of your actual tax returns and W-2 forms as proof.

How long does it take to remove fraudulent accounts from my credit report?

The credit bureau has 30 days to investigate your dispute and remove the account if they cannot verify it. In practice, removal often takes 30 to 60 days. If the bureau does not remove it within 30 days, send a follow-up letter and file a complaint with the Consumer Financial Protection Bureau.

Can I get my Social Security number changed?

The Social Security Administration can issue you a new number, but only in rare cases and after you have taken steps to stop the fraud. You must visit your local Social Security office in person with proof of identity and proof of the identity theft. A new number does not erase your old record, so you will still need to correct fraudulent earnings and accounts.

What if the thief opened accounts before I noticed?

File your FTC Identity Theft Report immediately and send it to every creditor with a fraudulent account. The report is your legal proof of victimhood and shifts the burden to the creditor to prove the debt is legitimate. You are not responsible for paying fraudulent charges, even if they are months old.

Do I need to hire a credit repair company?

No. Everything a credit repair company can do, you can do yourself for free. You can place fraud alerts and freezes, dispute accounts, and monitor your credit on your own. If you need help, contact a nonprofit credit counselor through the National Foundation for Credit Counseling at nfcc.org — their services are free or low-cost.