Stop the damage first, then report it

If you believe your Social Security number has been stolen, your first move is to freeze your credit with the three major credit bureaus — Equifax, Experian, and TransUnion. A credit freeze prevents anyone from opening new accounts in your name, even if they have your number. You can request a freeze online, by phone, or by mail with each bureau at no cost. The freeze takes effect within one business day and lasts until you remove it.

While the freeze is being set up, check your credit report for accounts you did not open. You can view your report free once per year at annualcreditreport.com, which is the official site run by the three bureaus. Look for new credit cards, loans, or inquiries you do not recognize. If you find fraudulent accounts, note the account numbers and dates opened — you will need these when you report.

Next, report the theft to the Federal Trade Commission at identitytheft.gov. This creates an official record and gives you a recovery plan tailored to your situation. The FTC does not investigate individual cases, but the report is a document you can show to creditors and banks. Print or save your report number — you will reference it often.

Key Takeaways

  • Freeze your credit with Equifax, Experian, and TransUnion when ready — this is free and stops new accounts from being opened in your name.
  • Check your credit report at annualcreditreport.com for accounts you did not open, and save the account numbers and dates.
  • Report the theft to the Federal Trade Commission at identitytheft.gov and save your report number to show creditors.
  • Contact your bank and credit card companies directly to report fraud on existing accounts and request new cards with new numbers.
  • File a police report if money was stolen or accounts were opened; some creditors require this document before removing fraudulent charges.

Contact your bank and credit card companies

Call the fraud department of every bank and credit card company where you have an account. Tell them your Social Security number has been compromised. Ask them to flag your accounts for fraud and to monitor for suspicious activity. They may issue you new cards with new numbers on the spot.

If you see unauthorized charges on your statements, dispute them in writing. Send a letter to the fraud department with your FTC report number, the disputed transaction details, and a copy of your credit report showing the fraudulent account. Keep copies of everything you send. Banks typically have 30 to 60 days to investigate, though many resolve disputes faster.

File a police report if money was taken

If someone used your number to open credit accounts, take out loans, or make large purchases, file a report with your local police department. You can file in person or online depending on your jurisdiction. Bring your FTC report number, your credit report, and any statements showing the fraud.

Some creditors will not remove fraudulent charges without a police report number. Even if your local police say they cannot investigate identity theft, ask for a report number anyway — many departments will issue one for your records. Keep the report number with your other documents.

Monitor your accounts and credit for the next year

Check your credit report every three months for the next year. You can order free reports from annualcreditreport.com three times per year — once from each bureau. Stagger them so you check one bureau every four months. This catches new fraudulent accounts before they damage your credit score.

Set up account alerts with your bank and credit card companies. Most will notify you by email or text when a purchase is made, a withdrawal occurs, or a new device logs in. These alerts give you early warning if someone is using your accounts.

Consider a credit monitoring service or identity theft protection service if you want continuous monitoring. These are not free, but they watch your credit report 24/7 and alert you to changes. The FTC's recovery plan at identitytheft.gov lists both paid and free options.

What to do if your Social Security number is used for employment

If someone used your number to get a job, you may not know until you file taxes or receive a wage statement for work you did not do. Check your Social Security earnings record at ssa.gov by creating a my Social Security account. Your record shows all wages reported under your number.

If you see wages you did not earn, contact the Social Security Administration at 1-800-772-1213. They can help you correct your earnings record. You will also need to file a tax return or contact the IRS to report the fraudulent wages. The IRS has a process for identity theft victims; call 1-800-908-4490 or visit irs.gov/identity-theft.

Update your passwords and security questions

Change the passwords on all your financial accounts, email, and any accounts linked to your Social Security number. Use passwords that are at least 12 characters long and include numbers, uppercase letters, and symbols. Do not reuse passwords across accounts.

Review your security questions on bank and credit card websites. If a thief has your Social Security number, they may also have your mother's maiden name or other personal details. Update security questions to ones only you would know the answer to, or use random answers you write down and store securely.

Consider an Identity Theft Affidavit if creditors won't listen

If a creditor refuses to remove fraudulent charges or close an account, you can file an Identity Theft Affidavit with the FTC. This is a sworn statement that you did not authorize the account or charges. The FTC provides the form at identitytheft.gov.

Send the completed affidavit to the creditor's fraud department along with copies of your police report and FTC report. Creditors are required by law to investigate and respond within 30 days. If they still refuse, you can file a complaint with your state's attorney general or the Consumer Financial Protection Bureau.

Frequently Asked Questions

How long does it take to recover from Social Security number theft?

Recovery typically takes several months to a year, depending on how widely your number was used. If only one or two accounts were opened, you may resolve it in two to three months. If your number was sold to multiple criminals, monitoring for new fraud may take a full year or longer. Continue checking your credit report regularly even after you think the problem is solved.

Will my credit score recover after identity theft?

Yes, but it takes time. Fraudulent accounts and missed payments will lower your score, but once you dispute and remove them, your score will gradually improve. Negative items typically fall off your credit report after seven years. In the meantime, making on-time payments on your own accounts helps rebuild your score faster.

Do I need to change my Social Security number?

The Social Security Administration rarely issues new numbers. You can request one only if you can prove ongoing misuse despite your efforts to stop it, or if you are a victim of abuse. A new number does not erase your old credit history, so it is usually not worth the effort. Focus instead on freezing your credit and monitoring for fraud.

What if I find out about the theft years later?

You can still take action. Freeze your credit when ready, check your credit report, and report to the FTC. Fraudulent accounts may still be on your report or in creditor systems. The sooner you act, the sooner you can stop new fraud and begin disputing old charges. There is no time limit on reporting identity theft to the FTC.

Is my Social Security number permanently compromised?

A stolen number does not become useless — it can be used repeatedly by different criminals. However, a credit freeze makes it much harder for anyone to open new accounts. Combined with regular credit monitoring, a freeze protects you even if your number is sold multiple times. The goal is not to change your number but to make it unusable for fraud.