Social Security Identity Theft: What Happens When Your SSN Is Stolen

Your Social Security number was never intended to be a universal identifier. It was created in 1936 as a way to track earnings for Social Security purposes. But over the decades, it became the key that unlocks nearly every door in your financial life — credit accounts, tax records, medical insurance, employment verification, government benefits, and more.

When a thief gets your Social Security number, they don’t just have nine digits. They have a master key to your identity — one that can be used to impersonate you across every system that depends on it.

—

What Is Social Security Identity Theft?

Social Security identity theft occurs when your Social Security number is stolen and used without your authorization — to open credit accounts, apply for benefits, file tax returns, gain employment, or establish an entirely false identity.

It is the foundation of most other forms of identity theft. Financial identity theft requires your SSN. Tax identity theft requires your SSN. Employment identity theft requires your SSN. Child identity theft targets the SSN specifically. Social Security identity theft is, in many ways, the umbrella category under which all other types fall.

The Social Security Administration distinguishes between two specific types of SSN fraud: misuse of your SSN for employment (someone working under your number) and misuse of your SSN to obtain benefits (someone collecting Social Security, disability, or Medicare in your name).

—

How Does Social Security Identity Theft Occur?

Data breaches. Your SSN is stored in hundreds of databases — your employer’s HR system, your healthcare provider’s records, the IRS, the SSA, your bank, and dozens of other institutions. Any of these can be breached. The 2024 National Public Data breach alone exposed an estimated 2.9 billion records, including SSNs.

Phishing. Sophisticated phishing attacks impersonate the SSA itself — warning you that your Social Security number has been “suspended” due to suspicious activity, and asking you to call a number or provide information to “reactivate” it. The SSA does not call you about suspended numbers.

Physical theft. Your Social Security card, or documents containing your SSN, can be stolen from your wallet, your home, or your mail.

Dark web markets. SSNs are among the most traded commodities on criminal dark web markets, often sold in bulk following large data breaches.

—

Warning Signs Your SSN Has Been Compromised

Because SSNs are used across so many systems, the warning signs of SSN theft are wide-ranging:

Financial signals: Unfamiliar accounts on your credit report. Hard inquiries from lenders you didn’t contact. Declined credit applications due to records you don’t recognize.

Tax signals: A rejected tax return because one was already filed under your SSN. IRS correspondence about income or employers you don’t recognize.

Employment signals: W-2 forms from companies you’ve never worked for. SSA earnings records showing employers you’ve never had.

Benefits signals: Denial of Social Security benefits you’ve applied for, because benefits are already being collected under your number. Medicare billing for care you didn’t receive.

Government signals: Mail from government agencies about applications, benefits, or accounts you didn’t initiate.

—

What to Do If Your SSN Has Been Stolen

Step 1: Report to the FTC at IdentityTheft.gov

This is your command center. The FTC’s recovery tools will generate a specific plan based on what your SSN was used for.

Step 2: Freeze your credit at all three bureaus

Do this immediately. A credit freeze prevents new accounts from being opened in your name, regardless of what information a thief has.

Step 3: Create an account at SSA.gov

If you haven’t already, create a my Social Security account and put a block on changes to your account — preventing a thief from changing your direct deposit information or contact details.

Step 4: Get an IP PIN from the IRS

The IRS’s Identity Protection PIN prevents anyone from filing a tax return using your SSN without the PIN. Apply at irs.gov.

Step 5: Contact each affected institution

Depending on what your SSN was used for, contact the relevant creditors, employers, benefits agencies, or government departments individually. Document every communication.

Step 6: Monitor all relevant records going forward

Your credit reports. Your SSA earnings record. Your IRS tax transcripts. Your medical records. Set up alerts wherever they’re available.

—

How to Protect Your Social Security Number

Never carry your Social Security card. The card itself offers very little utility in daily life and enormous liability if lost or stolen. Store it in a secure location at home.

Give out your SSN only when legally required. Many institutions ask for your SSN as a matter of habit when they don’t actually need it. Medical offices, schools, businesses, and many government agencies often have alternatives. Ask why it’s needed and what their security practices are before providing it.

Be alert to SSA impersonation scams. The SSA will not call you to say your number has been suspended. They will not demand immediate payment by gift card or wire transfer. Any call with those characteristics is a scam. Hang up.

Check your SSA earnings record annually. Your my Social Security account at SSA.gov shows your complete earnings history. An annual review takes five minutes and can catch employment identity theft early.

Create a my Social Security account before someone else does. A thief can create an SSA account in your name before you do, then use it to redirect benefits. Creating your own account first removes that risk.

—

Frequently Asked Questions

Q: Can I get a new Social Security number if mine is stolen?

A: In very limited circumstances — yes. The SSA will assign a new SSN if you can demonstrate that you’ve done everything possible to resolve the problem and are still being harmed. However, a new number doesn’t erase your history and creates its own complications. It is a last resort, not a routine remedy.

Q: Is it illegal to use someone else’s Social Security number?

A: Yes. Under the Identity Theft and Assumption Deterrence Act of 1998, using another person’s SSN without authorization is a federal crime, punishable by up to 15 years in prison.

Q: What if I find my SSN on the dark web?

A: Many identity theft protection services will alert you if your SSN appears in dark web markets or data breach databases. If this happens: freeze your credit immediately, set up IRS and SSA account protections, and monitor all relevant accounts closely. Finding your SSN on the dark web is a warning, not an emergency — but it means the risk of misuse is elevated and you should take immediate precautions.

→ Back to Types Hub: https://www.scammed.org/identity-theft/types/

→ Back to Pillar: https://www.scammed.org/identity-theft/