Stop the damage before it spreads

If you believe someone has stolen your Social Security number, contact the Federal Trade Commission (FTC) at IdentityTheft.gov or call 1-877-438-4338. The FTC will create a recovery plan specific to what has already happened — whether the thief opened accounts, filed a false tax return, or straightforward has your number on file. This is your first step, not your last.

At the same time, call the Social Security Administration's fraud hotline at 1-800-269-0271. Tell them your number may be compromised. They can flag your account and watch for unauthorized use. This takes minutes and costs nothing.

Then contact the three major credit bureaus — Equifax, Experian, and TransUnion — and ask them to place a fraud alert on your credit file. A fraud alert tells lenders to verify your identity before opening new accounts in your name. You only need to call one bureau; they will notify the other two. The alert lasts one year and is free.

Key Takeaways

  • Report the theft to the FTC at IdentityTheft.gov and to the Social Security Administration at 1-800-269-0271 within the first few hours if possible.
  • Place a fraud alert with one of the three credit bureaus (Equifax, Experian, or TransUnion), and they will notify the others automatically.
  • Check your credit reports for accounts you did not open, and dispute any fraudulent charges or accounts in writing within 30 days of discovery.
  • File a police report if the thief has already used your number to open accounts, get a loan, or file a tax return in your name.
  • Monitor your Social Security earnings record and tax transcripts annually to catch unauthorized work or false tax filings early.

Check your credit reports for damage

You are may have access to to one free credit report from each of the three bureaus every 12 months. Go to AnnualCreditReport.com — this is the only official site for free reports. Do not use other sites that claim to be free; many charge hidden fees or sell your information.

When you receive your reports, look for accounts you do not recognize, inquiries from lenders you never contacted, and addresses or employers you never listed. Write down the account number, the date it was opened, and the amount owed. This becomes your evidence when you dispute the fraud.

If you find fraudulent accounts, contact the creditor directly and tell them the account is fraudulent. Then send a written dispute to the credit bureau that reported it. Include a copy of your police report if you have one, and a letter explaining that the account is not yours. The bureau must investigate within 30 days and remove the account if they cannot verify it is legitimate.

File a police report if accounts were opened in your name

If the thief has already opened credit cards, taken out loans, or filed a tax return using your number, file a report with your local police department. You will need the account numbers, dates, and amounts from your credit report. The police will give you a report number, which you will use when disputing fraudulent accounts and when dealing with the IRS.

Some police departments allow you to file online; others require you to come in person. Call ahead to ask what they need. If your local department refuses to take a report, try the police department in the city where the fraud occurred — that is often where the thief lives or works.

Keep a copy of the police report. You will need it to prove to creditors and the IRS that you are a victim of identity theft, not someone trying to dodge debt.

Watch for tax fraud and unauthorized work

If a thief has your Social Security number, they may file a tax return in your name to claim a refund. The IRS will reject your real return if a fraudulent one arrives first. To check whether someone has filed under your number, create an account at IRS.gov and view your tax transcript. You can also call the IRS at 1-800-829-1040 and ask them to mail you a transcript.

If you find a false return, file your own return when ready and include a copy of your police report. The IRS has a form called Form 14039 (Identity Theft Affidavit) that you can file if someone has used your number to file taxes. Mail it with your return and your police report.

You should also check your Social Security earnings record once a year. Go to ssa.gov, create a my Social Security account, and view your earnings history. If you see wages from an employer you never worked for, contact Social Security when ready. This can affect your future benefits.

Consider a credit freeze if the theft is serious

A credit freeze is stronger than a fraud alert. It blocks lenders from viewing your credit report entirely, which means no one can open new accounts in your name without your permission. A freeze is free and lasts until you remove it.

To freeze your credit, contact each of the three bureaus separately. You can do this online, by phone, or by mail. Equifax, Experian, and TransUnion each have their own process, but all are free. Write down the confirmation numbers they give you.

A freeze is most useful if the thief has already opened multiple accounts or if you are not planning to explore for credit soon. If you need to explore for a mortgage, car loan, or credit card, you will have to temporarily lift the freeze, which takes a few days.

Keep records and stay alert for years

Identity theft does not always show up right away. A thief may hold onto your number for months or years before using it. Keep copies of your police report, your FTC report, and all correspondence with creditors and the IRS in one folder. You will need these if new fraudulent accounts appear later.

Check your credit reports at least once a year, even after the initial fraud is resolved. Watch your bank and credit card statements every month for charges you do not recognize. If you see something suspicious, report it to your bank or card issuer when ready.

If you receive bills for accounts you never opened, or if a creditor calls about a debt you do not owe, respond in writing within 30 days. Keep copies of everything. The longer you wait, the harder it becomes to prove the fraud was not your fault.

Frequently Asked Questions

How long does it take to fix identity theft?

It depends on how much damage the thief did. If they only have your number but have not used it yet, a fraud alert may be enough. If they opened multiple accounts, resolving the fraud can take months or even years. Each fraudulent account must be disputed separately, and some creditors are slow to respond.

Will identity theft hurt my credit score?

Yes, fraudulent accounts will lower your score because they appear as new debt in your name. Once you dispute and remove the accounts, your score will gradually recover. It may take several months to a year for your score to return to normal, depending on how much damage was done.

What if the thief used my number to get a job?

Contact the Social Security Administration and tell them your number was used for employment you did not do. They will investigate and may contact the employer. You should also check your Social Security earnings record to see what wages were reported. This can affect your future benefits, so report it as soon as you discover it.

Do I have to pay for a fraud alert or credit freeze?

No. Fraud alerts and credit freezes are free by law. If a company charges you for either service, they are breaking the law. Use only the official websites and phone numbers for the three credit bureaus.

What if I do not know how the thief got my number?

You may never know. Social Security numbers are stolen from data breaches, lost mail, dumpsters, and careless businesses. You do not need to know how it happened to report it and protect yourself. Focus on the steps above instead of trying to figure out the source.