Why Your Social Security Number Is a Target

Your Social Security number is the master key to your identity. With it, someone can open credit accounts in your name, file a tax return and claim your refund, take out loans, or drain your benefits. Unlike a password, you cannot change it. Once it is stolen, the damage can take years to undo.

Thieves get Social Security numbers from data breaches at companies that store them, from mail theft, from phishing emails that look like they come from the Social Security Administration or your bank, and from people you know. The Federal Trade Commission reports that identity theft cases involving Social Security numbers have grown steadily, and older adults are targeted more often because they tend to have better credit and larger savings.

The good news is that most theft is preventable. The steps that matter most are the ones you control: what you carry, what you share, and what you watch for.

Key Takeaways

  • Do not carry your Social Security card in your wallet or purse unless you absolutely need it that day — leave it at home in a safe place.
  • Never give your Social Security number over the phone or email unless you initiated the contact and you know who you are talking to.
  • Check your credit report once a year for free at annualcreditreport.com to catch fraudulent accounts before they damage your credit score.
  • If you suspect your number has been stolen, place a fraud alert with the three credit bureaus and consider a credit freeze.
  • Monitor your Social Security earnings record at ssa.gov to make sure no one is working under your number.

What To Do With Your Physical Card

The simplest step is to stop carrying your Social Security card. Most people never need it. Your employer needs it once, when you are hired. Your bank needs it once, when you open an account. Your doctor's office may ask for it, but you can usually refuse and provide your insurance number instead.

Keep your card at home in a locked drawer, safe, or lockbox — somewhere separate from your wallet and your other important documents. If you do need to carry it for a specific appointment, take it with you that day and return it home when ready after.

If your card is lost or stolen, contact the Social Security Administration at 1-800-772-1213 or visit your local Social Security office. You can request a replacement card for free. Bring proof of citizenship (a birth certificate or passport), proof of age, and proof of identity (a driver's license or state ID).

How To Spot and Avoid Phishing Attempts

Phishing is a message — usually email or text — that looks like it comes from a trusted source but is actually from a thief. The message asks you to "verify" your information, "confirm" your account, or "update" your details. It includes a link that takes you to a fake website that looks real.

The Social Security Administration will never email you or text you asking for your number, your name, or your date of birth. If you receive a message claiming to be from Social Security, it is a phishing attempt. Do not click any link in it. Do not call any phone number in it. Instead, hang up or delete the message, then call Social Security directly at 1-800-772-1213 using the number on your official Social Security card or on ssa.gov.

The same rule applies to banks, credit card companies, and the IRS. If you are unsure whether a message is real, contact the organization directly using a phone number or website you know is legitimate — not one from the message itself. Real organizations understand that you will verify independently.

Monitoring Your Credit and Earnings Record

You have the right to one free credit report per year from each of the three major credit bureaus: Equifax, Experian, and TransUnion. Go to annualcreditreport.com — this is the only official site for free reports. Do not use other websites that offer "free" reports; they usually sign you up for paid services.

When you receive your report, look for accounts you did not open, addresses you do not recognize, or inquiries from companies you never contacted. These are signs that someone is using your number. If you find fraud, contact the credit bureau that issued the report and ask them to place a fraud alert on your file. You can also file a report with the Federal Trade Commission at identitytheft.gov.

In addition to your credit report, check your Social Security earnings record once a year. Go to ssa.gov, create an account, and view your "Earnings Record." This shows all wages reported under your Social Security number. If you see earnings from an employer you never worked for, someone may be using your number to work illegally or to commit tax fraud. Contact Social Security when ready at 1-800-772-1213.

What To Do If Your Number Has Been Stolen

If you discover that your Social Security number has been used fraudulently, act quickly. First, place a fraud alert with the three credit bureaus. A fraud alert tells lenders to verify your identity before opening new accounts in your name. Call one bureau and they will notify the other two. The alert lasts one year and is free.

Contact information for fraud alerts:

  • Equifax: 1-800-525-6285
  • Experian: 1-888-397-3742
  • TransUnion: 1-800-680-7289

If fraud is already happening — accounts have been opened, charges have been made — you may want to place a credit freeze instead. A freeze locks your credit so that no one can open new accounts without your permission. It is free and lasts until you remove it. You place a freeze with each of the three bureaus separately using the contact numbers above.

Next, file a report with the Federal Trade Commission at identitytheft.gov. The FTC will create an identity theft report that you can use to dispute fraudulent accounts and to show creditors and credit bureaus that you are a victim. Keep a copy for your records.

Finally, contact your bank and credit card companies to report the fraud. Ask them to close any accounts that were opened without your permission and to dispute any charges you did not make.

Protecting Your Number in Daily Life

Beyond the major steps, small habits add up. Shred documents that contain your Social Security number before throwing them away — do not just tear them in half. Use a cross-cut shredder if you have one. Be cautious about who you give your number to: your doctor, your employer, your bank, and the IRS need it. Most other organizations do not.

If someone asks for your Social Security number and you are not sure why they need it, ask. Say, "Why do you need my Social Security number?" and "Can I provide something else instead?" Many organizations will accept an alternative form of identification.

Use strong, unique passwords for online accounts — especially your email and your bank accounts. If someone gains access to your email, they can use the "forgot password" feature to access other accounts and to intercept sensitive mail. Consider using a password manager to keep track of passwords securely.

If you use public Wi-Fi at a library, coffee shop, or airport, do not access your bank account, email, or any account that contains sensitive information. Public Wi-Fi is not encrypted, and thieves can intercept your data. Wait until you are home on your own network, or use a VPN (virtual private network) if you must use public Wi-Fi.

Frequently Asked Questions

Can I change my Social Security number if it has been stolen?

The Social Security Administration rarely issues a new number. You must prove that you are experiencing ongoing fraud and that a fraud alert or credit freeze has not stopped it. Contact your local Social Security office to discuss whether you may have access to. Even if approved, a new number does not erase the old one from records, so the process is complicated and should be a last resort.

What should I do if I receive a letter from the IRS or Social Security that I did not request?

Do not ignore it, but do not respond to it directly. Call the IRS at 1-800-829-1040 or Social Security at 1-800-772-1213 using the phone number on your official documents or website. Tell them you received a letter and ask whether it is legitimate. If it is a phishing attempt, report it to the agency so they can investigate.

Do I need to pay for credit monitoring or identity theft protection services?

No. You can monitor your credit for free using your annual credit reports and by checking your credit score through your bank or credit card company. A fraud alert is also free. Identity theft protection services charge a monthly fee but do not prevent theft — they only alert you after fraud has occurred, which you can do yourself by checking your reports regularly.

What if my Social Security card was stolen from the mail?

Contact Social Security when ready at 1-800-772-1213 to report it. Request a replacement card. Then place a fraud alert with the three credit bureaus as a precaution. Monitor your credit report closely over the next several months to catch any fraudulent accounts early.

How often should I check my credit report?

Check it at least once a year using annualcreditreport.com. If you have already been a victim of identity theft, check it more often — every three to four months — to catch new fraud quickly. You can also stagger your checks by requesting one report from a different bureau every four months so you are monitoring your credit year-round.