The fastest way to check if someone is using your Social Security number is to pull your credit reports from Equifax, Experian, and TransUnion, review your IRS tax transcript, and log into your my Social Security account to look at your earnings record. Unfamiliar accounts, tax returns you didn’t file, or wages from an employer you’ve never worked for are the clearest signs of misuse. Credit reports catch a lot, but not everything, so a full check reaches beyond them.
Pull Your Three Credit Reports
Most thieves who steal a Social Security number try to open new credit accounts, and that activity shows up on reports maintained by the three nationwide bureaus. Federal law guarantees a free copy from each, and all three permanently offer weekly reports at AnnualCreditReport.com.1Federal Trade Commission. Free Credit Reports When active fraud is a concern, weekly is far more useful than once a year.
Scan each report for accounts you never opened, credit inquiries from lenders you never contacted, and addresses where you’ve never lived. Pay close attention to collection accounts. Fraudulent utility, phone, or streaming accounts often don’t appear on a credit report until the thief stops paying and the debt goes to collections, so a collection entry may be your first sign.
Check Your IRS Tax Records
A thief who has your Social Security number can file a fake return in your name to steal a refund. You may not find out until the IRS rejects your legitimate return because one has already been filed. Get ahead of this by pulling your tax transcript through the IRS Get Transcript tool, which shows whether any returns or income records have been filed that you don’t recognize.2Internal Revenue Service. Get Your Tax Records and Transcripts Wages on the transcript from an employer you’ve never worked for suggest someone is working under your number.
You can also request an Identity Protection PIN. Any taxpayer with a Social Security number can voluntarily opt in. Once you have one, it has to appear on every return you file, electronic or paper, and the IRS will reject any return submitted under your number without the correct PIN.3Internal Revenue Service. Frequently Asked Questions About the Identity Protection Personal Identification Number IP PIN A new PIN is issued each year through your IRS online account.
Review Your Social Security Earnings Record
The Social Security Administration tracks every dollar of wages and self-employment income reported under your number throughout your working life. If someone is working under your Social Security number, their employer’s wage reports will land on your record. Log into your my Social Security account at SSA.gov and review your Social Security Statement, which lists your earnings history and benefit estimates.4Social Security Administration. Go Digital! Create Your Personal my Social Security Account Today Wages from an employer you’ve never heard of are a red flag.
If you’re already receiving benefits, confirm that your direct deposit destination and mailing address haven’t been changed. A thief who gets into your account can divert your payments entirely. Suspected misuse can be reported to the SSA’s Office of the Inspector General through its online portal.5Social Security Administration Office of the Inspector General. Report Fraud
Warning Signs That Never Touch a Credit Report
Some forms of Social Security number misuse can go undetected for years if you’re only watching your credit file. Watch for these:
- Bills or collection notices for utility, phone, or streaming accounts you never opened. These service accounts usually don’t hit a credit report until they go to collections.
- An Explanation of Benefits from your health insurer for care you never received. Medical identity theft can also corrupt your medical records with someone else’s diagnoses and drug allergies.
- A W-2 arriving from an employer you’ve never worked for, which ties directly to the earnings check at SSA.gov.
- Denials of government benefits because records show you’re already receiving them elsewhere.
- Traffic tickets, court summonses, or arrest warrants from jurisdictions you’ve never visited, which can mean someone gave your number to law enforcement.
Any one of these warrants immediate investigation. Two or more together almost certainly mean your number has been compromised.
Check ChexSystems and LexisNexis
The three credit bureaus aren’t the only companies keeping files on you. ChexSystems is a consumer reporting agency that banks use to screen new account applicants. If a thief opened checking or savings accounts under your Social Security number and those accounts were closed for fraud or unpaid fees, ChexSystems may have a record. You can request a security freeze on your ChexSystems file online, by phone at 800-887-7652, or by mail, which prevents new bank accounts from being opened using your information.6ChexSystems. Place a Security Freeze
LexisNexis keeps a consumer disclosure database that includes property records, liens, judgments, professional licenses, and historical addresses. Requesting your LexisNexis consumer disclosure report can show whether someone has used your identity for real estate transactions, insurance claims, or other activity that wouldn’t appear on a standard credit report. Requests can be made online, by phone at 866-897-8126, or by mail.7LexisNexis Risk Solutions. Consumer Disclosure
Checking a Child’s Social Security Number
Children are attractive targets precisely because nobody is checking their credit. A stolen child’s number can be used for years before anyone notices, often not until the child applies for a student loan or first credit card. Warning signs include the child receiving pre-approved credit card offers, IRS notices about unpaid taxes, or a denial of government benefits because someone else is already using the number.8Consumer Advice. How To Protect Your Child From Identity Theft
To check whether your child has a credit file, contact each of the three major bureaus and ask for a manual search using the child’s Social Security number. A child under 18 generally shouldn’t have a credit report at all, so its existence is itself the problem. You’ll typically need to provide a copy of your government-issued ID, proof of your address, the child’s birth certificate, and the child’s Social Security card.8Consumer Advice. How To Protect Your Child From Identity Theft
If You Confirm Misuse, Freeze First
Once something looks wrong, two tools stop further damage: fraud alerts and credit freezes. They work differently.
Fraud Alerts
An initial fraud alert tells lenders to verify your identity before opening new credit in your name. It lasts one year, and you only need to contact one of the three bureaus, which is legally required to notify the other two.9Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts It’s the fastest single step you can take.
If you’ve confirmed identity theft and have an FTC identity theft report or a police report, you qualify for an extended fraud alert that lasts seven years. The extended alert also removes you from prescreened credit offer lists for five years, cutting off one avenue thieves use to intercept new card offers.9Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts
Credit Freezes
A credit freeze is stronger. It blocks access to your credit file entirely, so no one can open new accounts in your name. You place a freeze separately with each bureau. Freezes are free by federal law, and each bureau must place the freeze within one business day of an online or phone request. When you apply for legitimate credit yourself, you can temporarily lift the freeze, and the bureau must process the lift within one hour.10Consumer Financial Protection Bureau. Free Credit Freezes Are Here
The trade-off is convenience. Every credit card, car loan, or apartment application will require lifting the freeze first. If your Social Security number has been stolen, that inconvenience is worth it.
File at IdentityTheft.gov
Go to IdentityTheft.gov, the FTC’s reporting portal. Entering the details generates an Identity Theft Report and a personalized recovery plan with step-by-step instructions, and it pre-fills letters you can send to creditors and debt collectors.11Federal Trade Commission. What To Do Right Away The Identity Theft Report is the single most important document in the recovery process, because every institution you contact afterward will ask for it.
File a Police Report
Bring a copy of your FTC Identity Theft Report, a government-issued photo ID, proof of your address, and any evidence of the theft to your local police department and ask them to file a report.12Federal Trade Commission. Identity Theft: What to Do Right Away If the department is reluctant, the FTC provides a memo to law enforcement at IdentityTheft.gov explaining why the report matters.
Block Fraudulent Items From Your Credit Reports
With your Identity Theft Report in hand, you can demand that the credit bureaus permanently block any fraudulent information from your reports. Federal law requires each bureau to block the disputed information within four business days of receiving your identity theft report, proof of identity, identification of the fraudulent items, and your statement that the accounts aren’t yours.13Office of the Law Revision Counsel. 15 USC 1681c-2 – Block of Information Resulting From Identity Theft A block is permanent, unlike a standard dispute, which can sometimes reappear after investigation.
Contact Each Affected Company
Reach the fraud department of each company where fraudulent accounts were opened or unauthorized charges were made. Provide your FTC Identity Theft Report and ask them to close the fraudulent accounts, stop all collection activity, and send you written confirmation that the debt isn’t yours. Under federal identity theft rules, creditors that receive a valid identity theft report are prohibited from selling the fraudulent debt to a collection agency or continuing to try to collect it from you.
Your Liability for Unauthorized Charges
Federal law limits how much of the damage you personally owe, but the protections differ sharply between credit and debit cards.
For credit cards, your maximum liability for unauthorized charges is $50, and even that applies only to charges made before you notify the card issuer. After notification, you owe nothing for further unauthorized use.14GovInfo. 15 USC 1643 – Liability of Holder of Credit Card Most major card networks go further with zero-liability policies, but $50 is the legal floor.
Debit cards carry higher risk because the money leaves your bank account immediately. Your liability depends on how quickly you report:15eCFR. 12 CFR Part 1005 – Electronic Fund Transfers Regulation E
- Within 2 business days of learning about the theft, liability caps at $50.
- Between 2 and 60 days, liability can reach $500.
- After 60 days from your bank statement date, you could be liable for the full amount of unauthorized transfers occurring after that 60-day window.
Waiting even a few extra days can multiply your liability tenfold. If you suspect your Social Security number has been used to access your bank accounts, contact your bank the same day.
Getting a New Social Security Number
In extreme cases where you’ve done everything right and the fraud keeps recurring, the Social Security Administration can assign you a new number. This is a last resort. To qualify, you have to show that you’ve already tried to fix the problems caused by the misuse and that you continue to be harmed by using the original number.16Social Security Administration. Can I Change My Social Security Number? You’ll need to visit your local Social Security office in person.
A new number doesn’t reset your life the way most people assume. Your old credit history, employment records, and financial accounts are all tied to the original number, and transferring everything over is complicated. The SSA itself warns that a new number may create more problems than it solves, which is why it only approves the change when the ongoing harm clearly outweighs the disruption.