Stop the damage first, then report it

If you believe someone has stolen your Social Security number, your first move is to place a fraud alert with the three credit bureaus — Equifax, Experian, and TransUnion — by calling just one of them. That one call triggers alerts at all three. A fraud alert tells lenders to verify your identity before opening new accounts in your name, which blocks most identity theft before it starts.

The second move is to check your credit report for accounts you did not open. You can view your report free once per year at annualcreditreport.com, the official site run by the three bureaus. Look for new credit cards, loans, or inquiries from lenders you never contacted. If you find fraudulent accounts, dispute them directly with the bureau that reported them — they must investigate within 30 days.

The third move is to report the theft to the Federal Trade Commission at IdentityTheft.gov. This creates an official record and gives you a recovery plan tailored to what was stolen. You will receive an Identity Theft Report, which you can show to creditors and bureaus as proof of the theft.

Key Takeaways

  • Call one of the three credit bureaus — Equifax, Experian, or TransUnion — to place a fraud alert that applies to all three at once.
  • Check your credit report at annualcreditreport.com for accounts opened without your permission, and dispute any fraudulent accounts directly with the bureau.
  • Report the theft to the Federal Trade Commission at IdentityTheft.gov to create an official record and receive a recovery plan.
  • If the thief used your number to work, contact the Social Security Administration to report the misuse and review your earnings record.
  • Consider a credit freeze if you want to prevent new accounts entirely, though it requires separate requests to each bureau and takes a few days to set up.

Contact the Social Security Administration about work history

When someone uses your Social Security number to work, it shows up on your earnings record. This can affect your future benefits because Social Security bases your benefit amount on your lifetime earnings. You need to contact the Social Security Administration to report the misuse and ask them to correct your record.

Call the Social Security Administration at 1-800-772-1213 (TTY 1-800-325-0778) or visit your local office. Bring a photo ID and proof of your address. Tell them your number was stolen and ask them to review your earnings record for the past year. If you see earnings you did not make, ask them to remove them or correct the name and number attached to those wages.

The Social Security Administration will investigate, but the process can take months. Keep records of all your calls — dates, times, names of representatives — in case you need to follow up. If the earnings remain on your record after 60 days, you can file a statement with the Social Security Administration explaining the fraud.

Decide whether to freeze your credit

A credit freeze prevents anyone — including you — from opening new accounts using your Social Security number without your permission. It is more restrictive than a fraud alert because it blocks all credit inquiries, not just new accounts. A fraud alert is usually enough, but a freeze is stronger protection if the theft was serious or if you want maximum control.

To freeze your credit, contact each of the three bureaus separately. You can do this online, by phone, or by mail. Equifax offers free freezes at freeze.equifax.com, Experian at freeze.experian.com, and TransUnion at freeze.transunion.com. Each bureau will give you a PIN to unfreeze your credit later. Keep these PINs in a safe place.

A freeze takes a few business days to set up and costs nothing. The downside is that you will need to unfreeze your credit temporarily whenever you want to open a new account, explore for a loan, or let a lender check your credit. This takes a phone call or online request each time, which can be inconvenient but is manageable.

Dispute fraudulent accounts and charges

If the thief opened credit cards, loans, or other accounts in your name, you must dispute them. Start by sending a written dispute to the creditor — not the credit bureau — within 60 days of discovering the fraud. Include a copy of your Identity Theft Report from the FTC, a copy of the fraudulent account statement, and a letter explaining that you did not open the account.

The creditor must investigate within 30 days and either remove the account or explain why it is valid. Send your dispute by certified mail with return receipt so you have proof it was received. Keep copies of everything you send and receive.

If the creditor does not remove the account, dispute it with the credit bureau that is reporting it. The bureau must investigate within 30 days. If the bureau confirms the fraud, they must remove it from your report. If they do not, you can file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov.

Monitor your accounts and reports going forward

After identity theft, check your credit report every few months for the next year, even though you get one free report annually. You can stagger your three free annual reports — one from each bureau every four months — by spacing them out at annualcreditreport.com. This gives you ongoing visibility without paying.

Set up account alerts with your bank and credit card companies so they notify you of large purchases, new accounts, or address changes. Many banks offer this free. Also consider signing up for credit monitoring through your bank or a reputable service, though this is optional and not required to recover from theft.

Review your Social Security earnings record every year at ssa.gov/myaccount. Create an account, log in, and check your "Earnings Record" to make sure all wages listed are yours. If you see fraudulent earnings again, contact the Social Security Administration when ready.

What to do if you are denied credit or employment

Sometimes a thief's actions show up as negative marks on your credit report — late payments, collections, or charge-offs — even though you never opened the account. If you are denied credit or a job because of these marks, you have the right to dispute them.

When you are denied credit, the lender must give you the reason and the name of the credit bureau that reported the negative information. Contact that bureau and dispute the item as fraudulent. Include your Identity Theft Report as proof. The bureau must investigate and remove the item if it is fraud.

If you are denied a job because of fraud on your credit report, the employer must tell you which bureau reported it. Contact that bureau and dispute the fraudulent items. Once they are removed, you can reapply for the job or ask the employer to reconsider.

Understand what the thief may have done with your number

A stolen Social Security number can be used in several ways. The most common is opening credit accounts — credit cards, personal loans, or store cards. Another is filing a false tax return to claim your refund. A third is using it to work, which affects your earnings record. A fourth is using it to open utility accounts, phone accounts, or rental agreements.

You do not need to know exactly what the thief did to start protecting yourself. The steps above — fraud alert, credit report check, FTC report, and Social Security review — cover all the main ways a stolen number is misused. If you discover a specific type of fraud later, you can take additional steps for that type.

Frequently Asked Questions

How long does it take to recover from identity theft?

Recovery depends on what the thief did. If they only opened one credit card, you may resolve it in a few weeks. If they filed a false tax return or used your number to work, it can take months or years to fully correct your records. Most people see the worst of it resolved within 3 to 6 months if they act quickly.

Will I be responsible for charges the thief made?

No. Federal law limits your liability for fraudulent credit card charges to $50, and most card issuers waive even that if you report the fraud promptly. For other types of fraud — utility accounts, loans, tax refunds — you are not responsible, but you must prove you did not authorize them. Your Identity Theft Report from the FTC serves as that proof.

Should I change my Social Security number?

The Social Security Administration discourages changing your number because it does not erase the old number from records and can create confusion with employers and lenders. Change your number only if the theft is severe, ongoing, or if you have already exhausted other remedies. If you do change it, you will need to update it with your employer, bank, and any creditors.

What if the thief filed taxes using my number?

Contact the Internal Revenue Service at 1-800-908-4490 or file Form 14039, Identity Theft Affidavit, with your tax return. The IRS will investigate and correct your record. Also file a report with the FTC and the Social Security Administration so all three agencies know about the theft.

Can I sue the credit bureaus or the thief?

You can sue a credit bureau if they fail to investigate your dispute or remove fraudulent items after you have provided proof. You can also sue a thief, but most identity thieves have no money to collect from. Focus your energy on correcting your records and protecting your credit rather than pursuing legal action, which is expensive and often fruitless.