Social Security identity theft usually starts with your number, not your name

Social Security identity theft occurs when someone uses your Social Security number (SSN) to open accounts, file tax returns, get jobs, or claim benefits in your name. The thief does not need to steal your entire identity — just your nine-digit number — to cause serious damage. Your SSN is the master key because it connects to your credit history, tax records, employment, and government benefits.

Thieves obtain SSNs through data breaches at companies that store them, phishing emails that trick you into revealing it, mail theft, or by buying stolen numbers on the dark web. Once they have your number, they can act quickly: filing a fraudulent tax return takes minutes, opening a credit card takes hours, and you may not notice for weeks or months.

Key Takeaways

  • Thieves need only your Social Security number to commit fraud in your name — they do not need your full identity or personal documents.
  • Data breaches at hospitals, retailers, and employers are the most common source of stolen SSNs, followed by phishing and mail theft.
  • Tax return fraud and credit card fraud are the two fastest ways thieves use a stolen SSN, often before you know it is compromised.
  • You can place a fraud alert or credit freeze with the three credit bureaus to block new accounts opened in your name.
  • The Social Security Administration does not contact you by phone or email to verify your number — any such contact is a scam.

Where thieves get Social Security numbers

Data breaches are the largest source of stolen SSNs. When a hospital, retailer, bank, or employer is hacked, thieves gain access to databases containing millions of numbers along with names and addresses. Equifax, one of the three major credit bureaus, experienced a breach in 2017 that exposed the SSNs of roughly 147 million people. Smaller breaches happen constantly at healthcare providers and retail chains.

Phishing is the second major route. A thief sends an email or text that appears to come from Social Security, the IRS, your bank, or your employer, asking you to "verify" or "confirm" your SSN. The link leads to a fake website that looks identical to the real one. When you enter your number, the thief captures it when ready. These messages often create false urgency: "Your account will be closed" or "We detected suspicious activity."

Mail theft is slower but still common. Thieves steal tax documents, bank statements, or benefit letters from your mailbox — all of which contain your SSN. They may also intercept mail sent to you by Social Security or the IRS. Placing a hold on your mail when you travel or using a locked mailbox reduces this risk.

Purchasing stolen numbers on the dark web is also routine. Criminals buy SSNs in bulk for a few dollars each, often bundled with names and addresses. They then test the numbers by filing tax returns or opening accounts until they find ones that work.

How thieves use a stolen Social Security number

Tax return fraud is the fastest and most common use. A thief files a false tax return in your name before you file your own, claiming a refund. The IRS sends the refund to the thief's bank account or address. You discover the fraud when you file your own return and the IRS rejects it because a return was already filed under your SSN. By then the thief has the money.

Credit fraud comes second. The thief opens credit cards, takes out loans, or opens utility accounts in your name. They may use a different address so bills go to them, not you. Months later, you discover accounts you never opened and a damaged credit score. Creditors may pursue you for unpaid balances.

Employment fraud occurs when a thief uses your SSN to get a job. Your employer reports wages to Social Security under your number, creating a record of income you never earned. This can affect your future Social Security benefits calculation and create confusion with the IRS about your actual income.

Benefit fraud involves filing for unemployment benefits, disability, or other government programs using your SSN. During the pandemic, widespread unemployment fraud used stolen SSNs to claim benefits from multiple states at once.

Why your Social Security number is so valuable to thieves

Your SSN is a universal identifier across government and financial systems. Banks use it to check your credit. The IRS uses it to track your tax history. Employers use it to report your wages. Social Security itself uses it to manage your account. Because so many systems rely on it, a thief with your number can impersonate you in nearly any financial or legal context.

Unlike a password, you cannot change your SSN. If your number is compromised, it stays compromised for life. You can place fraud alerts and credit freezes to block new accounts, but you cannot revoke the number itself. This is why SSN theft is more damaging than most other types of fraud.

Thieves also know that many people do not monitor their credit or tax records closely. You may not notice fraudulent accounts for months. By the time you discover the theft, the thief has already extracted value and moved on to the next victim.

Signs your Social Security number has been stolen

The IRS notifies you by mail if someone files a tax return using your SSN. You will receive a letter saying a return was already filed under your number, or that the IRS detected suspicious activity on your account. This is often the first sign of theft.

Credit bureaus may contact you if they detect fraud alerts or unusual account openings. You can also check your credit report for free once per year at AnnualCreditReport.com. Look for accounts you do not recognize, inquiries from lenders you did not contact, or addresses that are not yours.

Social Security sends a statement each year showing your earnings record. If you see wages reported that you did not earn, your SSN may have been used for employment fraud. You can create an account at ssa.gov to view your statement online.

Debt collectors may contact you about accounts you never opened. Creditors may send bills to an address you do not recognize. These are signs that someone has opened accounts in your name.

Steps to take if your Social Security number is compromised

Contact the three credit bureaus — Equifax, Experian, and TransUnion — and place a fraud alert on your account. A fraud alert tells lenders to contact you before opening new accounts in your name. You can place a fraud alert by calling one bureau; they are required to notify the other two. The alert lasts one year and is free.

Consider a credit freeze, which is stronger than a fraud alert. A freeze blocks lenders from viewing your credit report entirely, making it nearly impossible to open new accounts in your name. You must place a freeze with each of the three bureaus separately. Freezes are free and last until you remove them. You can temporarily unfreeze your credit if you need to open a legitimate account.

File a report with the Federal Trade Commission at IdentityTheft.gov. The FTC creates an Identity Theft Report, which you can use as proof of fraud when disputing accounts or working with creditors and the IRS.

If you suspect tax fraud, contact the IRS directly. You can file Form 14039, Identity Theft Affidavit, with your tax return or separately. The IRS has a dedicated identity theft unit that investigates fraudulent returns filed under your SSN.

Review your Social Security earnings record at ssa.gov and report any wages you did not earn. Contact Social Security's fraud hotline at 1-800-269-0271 to report employment fraud.

How to reduce the risk of Social Security number theft

Do not carry your Social Security card in your wallet. Leave it at home in a find place. You rarely need to show the physical card; most organizations only need the number.

Never share your SSN by phone, email, or text unless you initiated the contact and you are certain of who you are talking to. The Social Security Administration, IRS, and banks will never contact you first asking for your number. If someone calls claiming to be from Social Security and threatens to suspend your benefits, hang up — it is a scam.

Shred documents containing your SSN before throwing them away. Use a cross-cut shredder if possible. Do not leave mail in your mailbox for days; collect it promptly or place a hold with the postal service when you travel.

Monitor your credit report at least once per year using AnnualCreditReport.com. Check your Social Security earnings record annually at ssa.gov. Review your tax transcripts at IRS.gov to spot fraudulent returns filed in your name.

Use strong, unique passwords for financial accounts and enable two-factor authentication when available. Be cautious of phishing emails and texts that ask you to verify personal information. Legitimate organizations will not ask you to confirm sensitive data by email or text.

Frequently Asked Questions

Can someone use my Social Security number without my name?

Yes. A thief needs only your SSN to file a tax return, open a credit card, or get a job. They may use a different name or address, which is why you might not notice the fraud when ready. The SSN is the key; everything else can be fabricated.

How long does it take to recover from Social Security identity theft?

Recovery varies widely. straightforward cases — like disputing a single fraudulent account — may take weeks. Complex cases involving multiple accounts, tax fraud, or employment fraud can take months or years. You will need to contact creditors, the IRS, and Social Security separately, and each has its own timeline for investigation and resolution.

Will Social Security contact me by phone if there is a problem with my account?

No. Social Security does not initiate contact by phone, email, or text to verify your number or threaten to suspend benefits. Any such contact is a scam. If you have concerns about your account, call Social Security directly at 1-800-772-1213 using the number on the official Social Security website or your benefit statement.

What is the difference between a fraud alert and a credit freeze?

A fraud alert notifies lenders to contact you before opening new accounts, but they can still open accounts if they cannot reach you. A credit freeze blocks lenders from viewing your credit report entirely, making new accounts nearly impossible without your permission. A freeze is stronger but requires you to unfreeze temporarily if you want to open a legitimate account.

Can I get a new Social Security number if mine is stolen?

The Social Security Administration rarely issues new numbers. You must show that you are experiencing ongoing, severe harm from the theft and that a fraud alert or credit freeze is not enough. Most people manage theft through fraud alerts, credit freezes, and disputing fraudulent accounts rather than requesting a new number.