Act quickly if you know or suspect someone has your Social Security number

If someone has your Social Security number, the risk is real but manageable if you move fast. A stolen number can be used to open credit accounts, file a false tax return, apply for benefits, or commit other fraud in your name. The sooner you report it and lock down your accounts, the smaller the window for damage.

Your first step is to contact the three major credit bureaus — Equifax, Experian, and TransUnion — and place a fraud alert on your file. This tells lenders to verify your identity before opening new accounts. You should also check your credit reports for accounts you did not open, and consider freezing your credit to block new applications entirely.

At the same time, report the theft to the Federal Trade Commission (FTC) and file a report with local police or the FBI if the theft involved a crime. Keep records of everything you report and every step you take, because you may need to prove you were a victim if fraudulent accounts appear later.

Key Takeaways

  • Contact all three credit bureaus (Equifax, Experian, TransUnion) immediately to place a fraud alert that lasts one year.
  • Freeze your credit with each bureau to prevent anyone from opening new accounts in your name, even if they have your number.
  • Report the theft to the FTC at IdentityTheft.gov and file a police report so you have documentation if fraud occurs later.
  • Check your credit reports for unauthorized accounts and monitor your bank and tax records for signs of misuse.
  • If you discover fraudulent accounts or tax returns filed in your name, contact the creditor or the IRS immediately with proof of the fraud.

Place a fraud alert with the credit bureaus

A fraud alert tells lenders that you may be a victim of identity theft and that they should verify your identity before opening new credit in your name. You only need to contact one of the three bureaus — Equifax, Experian, or TransUnion — and that bureau will notify the other two. The alert lasts one year and is free.

Call the fraud department at any of these numbers: Equifax (1-888-378-4329), Experian (1-888-397-3742), or TransUnion (1-800-680-7289). Have your Social Security number, date of birth, and current address ready. You can also place an alert online through each bureau's website, though a phone call creates a record of the date and time you reported it.

After you place the alert, each bureau will send you a free copy of your credit report. Review these reports carefully for accounts you do not recognize — credit cards, loans, phone accounts, or utilities opened in your name. If you find fraud, document it with the account number and the date it was opened, and contact the creditor directly to report it as fraudulent.

Freeze your credit to prevent new accounts

A credit freeze is stronger than a fraud alert. It blocks lenders from accessing your credit report entirely, which means no one — not even you — can open new credit accounts without unfreezing it first. A freeze is free and lasts until you remove it, making it the most effective tool if you know your number is compromised.

Contact each of the three bureaus to freeze your credit. You can do this by phone, mail, or online through their websites. Equifax, Experian, and TransUnion each have a dedicated freeze section. When you freeze, you will receive a PIN or password that you must use later if you want to unfreeze temporarily (for example, when you apply for a mortgage or car loan).

Keep your freeze PINs in a safe place — you will need them if you want to lift the freeze later. A freeze does not affect your existing accounts or your credit score, and it does not prevent you from checking your own credit report. It only stops new applications from going through.

Report the theft to the FTC and local law enforcement

Report the theft to the Federal Trade Commission at IdentityTheft.gov. This is a free, federal resource where you create a report documenting what happened, what accounts or fraud you have discovered, and what steps you have taken. The FTC does not investigate individual cases, but your report creates an official record that you can use if you need to dispute fraudulent accounts or prove you were a victim.

You should also file a report with your local police department or the FBI's Internet Crime Complaint Center (IC3) at ic3.gov if the theft involved online fraud or a crime. Provide the police with your FTC report number and a copy of the report itself. Keep the police report number — creditors and the IRS may ask for it when you report fraud.

Save copies of every report you file, including the FTC report number, the police report number, and the date you filed each one. These documents are your proof that you reported the theft promptly, which protects you if someone later tries to hold you responsible for fraudulent accounts.

Monitor your accounts and credit reports regularly

Check your bank and credit card statements every week for charges you did not make. Set up account alerts with your bank so you are notified of large transactions or new account activity. Many banks offer free fraud monitoring tools that flag unusual activity automatically.

Review your credit reports from all three bureaus at least once every few months for the first year after the theft. You can get free reports at AnnualCreditReport.com, which is the official site run by the three bureaus. Look for new accounts, inquiries from lenders you did not contact, or changes to your personal information.

If you discover fraudulent accounts, contact the creditor immediately and provide them with a copy of your FTC report and police report. Ask the creditor to close the account and remove it from your credit report. Follow up in writing and keep copies of all correspondence.

Watch for tax fraud and benefits fraud

Someone with your Social Security number can file a false tax return in your name to claim a refund. You will discover this when you file your own return and the IRS rejects it because a return was already filed under your number. If this happens, file your return anyway and include a copy of your FTC identity theft report with it.

Contact the IRS directly at 1-800-908-4490 and explain that your number was used fraudulently. The IRS has a process for victims of identity theft and can issue you an Identity Protection PIN — a six-digit number that only you can use to file future returns. This PIN prevents anyone else from filing in your name.

Someone can also use your number to file for unemployment benefits, Social Security benefits, or other government programs. Monitor your mail for benefit statements or tax documents you did not request. If you receive them, contact the agency immediately and report the fraud. Keep records of all contact with government agencies.

Understand what you are not responsible for

If someone opens a fraudulent account in your name and you report it promptly with documentation, you are generally not responsible for the charges. Federal law limits your liability for unauthorized credit card charges to $50, and many card issuers waive even that if you report fraud quickly. For bank accounts, your liability depends on how quickly you report it — report within two business days and you lose no more than $50.

Creditors and the IRS may initially hold you responsible for fraudulent accounts or false tax returns, but you can dispute these by providing your FTC report, police report, and evidence that you reported the fraud. Keep detailed records of every communication and every step you take. The burden of proof shifts to the creditor or agency once you have documented the theft.

Do not pay bills for fraudulent accounts or respond to collection calls for fraud you did not commit. Instead, send written disputes to the creditor and the credit bureau, and include copies of your FTC and police reports. Respond in writing so you have proof of your dispute.

Frequently Asked Questions

How long does a fraud alert last?

An initial fraud alert lasts one year from the date you place it. After one year, you can renew it. If you have already been a victim of identity theft, you can place an extended fraud alert that lasts seven years, though you will need to provide proof of the theft (your FTC report or police report).

Can I freeze my credit if I am not sure my number was stolen?

Yes. A freeze is free and does not hurt your credit, so you can place one as a precaution. You can unfreeze it anytime if you need to apply for credit. Many people freeze their credit after a data breach even if they are not certain their information was compromised.

What if I discover fraud years after my number was stolen?

Report it immediately using the same steps: contact the credit bureaus, file an FTC report, and file a police report. The older the fraud, the harder it may be to dispute, but you still have the right to challenge fraudulent accounts and remove them from your credit report. Keep records of everything.

Will my credit score drop if someone uses my number?

Yes, fraudulent accounts and missed payments on accounts you did not open will damage your credit score. However, once you dispute the fraud and the accounts are removed, your score should recover over time. Disputing fraud does not hurt your score further.

Do I need to change my Social Security number?

The Social Security Administration rarely issues new numbers. You can request one only if you can show ongoing fraud despite taking protective steps, or if you are in danger because of the theft. A new number does not erase the old one from records, so it is usually not necessary. Focus on freezing your credit and monitoring your accounts instead.