You can tell your Social Security number has been compromised when it starts showing up where you didn’t put it: credit accounts you never opened, an IRS notice about wages you never earned, a rejected tax return, unemployment benefits someone else already claimed, or a medical bill for care you never received. Because your SSN links your credit file, tax record, earnings history, and health records, a single misuse tends to leave traces in more than one place. The signs below are the ones worth checking first, and the earlier you catch them, the less damage you’ll spend months undoing.
Unfamiliar Accounts or Inquiries on Your Credit Report
Your credit report is usually where identity theft leaves its first fingerprint. A hard inquiry you don’t recognize means a lender pulled your file because someone applied for credit in your name. If the application was approved, you’ll also see an account you never opened, sometimes already in collections. The Fair Credit Reporting Act gives you the right to dispute anything on your file that isn’t yours.1Office of the Law Revision Counsel. 15 USC 1681 – Congressional Findings and Statement of Purpose
Look past the obvious entries too. Addresses where you’ve never lived, aliases you don’t use, and employer names you don’t recognize are all warning signs. A fraudster may register a slightly different name or a mailing address they control so statements never reach you. An unfamiliar employer on your report usually means someone is handing your SSN to a payroll department.
Pull free weekly reports from all three national bureaus at AnnualCreditReport.com. Weekly access is now permanent, and Equifax is offering six additional free reports per year through 2026.2Federal Trade Commission. Free Credit Reports Check all three, because not every creditor reports to every bureau, and a fraudulent account can appear on one file while the others look clean.
Bank accounts opened in your name often skip the standard credit report entirely. To catch those, request a disclosure report from ChexSystems, which tracks checking account applications, bounced checks, and account closures.3Consumer Financial Protection Bureau. Chex Systems, Inc.
IRS Rejections and Notices About Income That Isn’t Yours
Tax season exposes theft you didn’t know about. The most common scenario: you try to e-file, and the IRS rejects your return because a return using your SSN was already submitted for that year. Thieves file early, often in January, to grab a fraudulent refund before you get around to filing. Federal law requires every return to carry a taxpayer identification number, and the system won’t accept two returns for the same person and the same year.4Office of the Law Revision Counsel. 26 USC 6109 – Identifying Numbers
You may also get a notice about wages from an employer you’ve never worked for. That means someone is working under your SSN, and their employer is reporting those wages to the IRS in your name. When the agency spots this pattern, it sends a CP01E notice alerting you to possible employment-related identity theft and placing a protective marker on your account.5Internal Revenue Service. Understanding Your CP01E Notice Any IRS letter about income you didn’t earn, a refund you didn’t request, or a filing you don’t recognize deserves immediate attention.
Incorrect Earnings on Your Social Security Statement
Your Social Security statement tracks every dollar of wages and self-employment income reported under your SSN, year by year, and the Social Security Administration uses those figures to calculate your future retirement and disability benefits.6Office of the Law Revision Counsel. 42 USC 405 – Evidence, Procedure, and Certification for Payments If the earnings for a given year look higher than what you actually made, or an employer you never worked for shows up, someone else’s wages are being credited to your record.
Check your history by logging in to your “my Social Security” account at ssa.gov. The portal shows reported earnings for each year and lets you flag errors.7Social Security Administration. Get Your Social Security Statement The SSA recommends checking in August each year to confirm the previous year’s earnings posted correctly.8Social Security Administration. Review Record of Earnings
This type of theft tends to fly under the radar for years. The thief isn’t opening credit cards or filing fake returns; they’re using your SSN to get a job, often because they can’t pass a background check with their own. The damage is quieter but still real. Inflated earnings can distort your future benefits, create tax discrepancies, and trigger IRS notices about unreported income.
Collection Calls, Benefit Denials, and Medical Bills That Aren’t Yours
Sometimes the first sign is a stranger’s problem landing in your mailbox. Debt collectors calling about a loan you never took out, utility bills addressed to someone else at your home, or credit card statements for accounts you didn’t open all suggest your SSN is passing identity checks in the private sector.
Benefit denials point the same direction. If you apply for unemployment and your state agency says you’re already receiving it, an imposter filed first using your information.9USAGov. Unemployment Scams Fraudsters filed unemployment claims in other people’s names across multiple states during the pandemic on a large scale.10Federal Trade Commission. Consumer Alert – Is a Scammer Getting Unemployment Benefits in Your Name? The same logic applies to other benefits: being told you’re enrolled in something you never applied for means your SSN is in someone else’s hands.
Medical identity theft deserves particular attention because it can affect your health, not just your finances. If you get an Explanation of Benefits from your health insurer for a procedure you never had or a prescription you don’t take, someone is using your identity to get care.11Federal Trade Commission. What To Know About Medical Identity Theft Beyond the billing fraud, the thief’s medical history can get merged with yours, which can lead to wrong diagnoses or dangerous treatment decisions later. Request records from any provider that shows up on a suspicious EOB and look for visits, conditions, or procedures that aren’t yours.
Data Breach Notifications
You may learn your SSN is compromised not from anything on your own accounts but from a letter or email telling you a company holding your data was hacked. All 50 states, the District of Columbia, and U.S. territories require organizations to notify affected individuals when a breach exposes personal information like Social Security numbers. The notices explain what data was exposed, when the breach happened, and what free monitoring the company is offering.
Take every breach notification seriously, even from a company you barely remember doing business with. If the notice confirms your SSN was among the exposed data, treat it as a compromise whether or not you’ve seen suspicious activity yet. Thieves sometimes sit on stolen data for months before using it, and a breached SSN doesn’t expire.
What to Do the Moment You Spot a Sign
Confirming compromise is only useful if you act on it. Start with a credit freeze at all three national bureaus. A freeze blocks lenders from accessing your file, which means nobody, including you, can open new accounts until you lift it.12Federal Trade Commission. Credit Freezes and Fraud Alerts Freezing and unfreezing are free under federal law at Equifax, Experian, and TransUnion.13Consumer Financial Protection Bureau. What Is a Credit Freeze or Security Freeze on My Credit Report? You can temporarily lift the freeze when you need to apply for credit and refreeze afterward.
A fraud alert is a lighter alternative. Rather than blocking access, it tells lenders to verify your identity before approving new credit. An initial alert lasts one year and can be renewed. If you’ve already been victimized and have filed an identity theft report, you qualify for an extended alert that lasts seven years.14Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts and Active Duty Alerts You only need to contact one bureau to place an alert; that bureau must notify the other two.
File an identity theft report at IdentityTheft.gov. The site asks what happened, then generates a personal recovery plan and an FTC Identity Theft Affidavit. Combined with a police report, that affidavit becomes an official Identity Theft Report that unlocks specific legal rights, including the ability to demand fraudulent accounts be removed and to place extended fraud alerts.15IdentityTheft.gov. IdentityTheft.gov Bring the FTC affidavit, a government-issued ID, and proof of address when you file with local police.
If your taxes are affected, file IRS Form 14039 (Identity Theft Affidavit) with a paper return. The IRS assigns your case to a specialist team that removes fraudulent returns from your record, releases any legitimate refund, and places a protective marker on your account.16Internal Revenue Service. IRS Identity Theft Victim Assistance: How It Works To block future tax fraud, enroll in the IRS Identity Protection PIN program. An IP PIN is a six-digit number the IRS assigns to you each year, and any return filed under your SSN without the correct PIN gets rejected. Anyone with an SSN or ITIN can enroll through their IRS online account.17Internal Revenue Service. Get an Identity Protection PIN (IP PIN)
Requesting a brand-new Social Security number is a last resort, not a first step. The SSA will assign a new number only if you can show ongoing harm from identity theft after exhausting other remedies, and a new number carries its own problems, including losing the credit history tied to the old one.18Social Security Administration. Identity Theft and Your Social Security Number For most people, a credit freeze, fraud alerts, and an IP PIN provide enough protection without the upheaval.