Signs Your Social Security Number May Be Compromised

Quick answer

• Monitor your credit reports regularly for unexpected accounts or inquiries.
• Be wary of unsolicited communications asking for your Social Security number (SSN).
• Look for official notices from the Social Security Administration (SSA) about account changes.
• Check your earnings record with the SSA annually for discrepancies.
• Review your tax returns for any signs of fraudulent activity.
• If you suspect a compromise, act quickly to protect yourself.

Who this is for

• Individuals concerned about identity theft and SSN misuse.
• People who have recently shared their SSN in potentially insecure situations.
• Anyone who wants to proactively safeguard their personal financial information.

What to check first (before you act)

Your SSN and its usage

Your Social Security number is a critical piece of your financial identity. It’s used by employers for tax purposes, by financial institutions for opening accounts, and by government agencies for benefits. Understanding where and why your SSN is requested can help you spot unusual activity.

Personal financial accounts

Regularly review statements from your bank accounts, credit cards, and investment accounts. Look for any transactions you don’t recognize, new accounts you didn’t open, or significant changes in your balances. This is often the first place you’ll see the impact of SSN misuse.

Credit reports

Obtain your free credit reports from Equifax, Experian, and TransUnion at AnnualCreditReport.com. Scrutinize them for any accounts, loan applications, or credit inquiries that you did not authorize. This is a direct indicator of potential identity theft.

Social Security Administration (SSA) records

Periodically check your Social Security earnings record. This can be done by creating an account on the SSA website. Discrepancies in reported earnings could indicate someone is using your SSN for employment.

Tax documents

Review your tax returns carefully each year. If someone has used your SSN fraudulently, they might have also filed a tax return using your information, which could prevent you from filing your own or lead to a refund being misdirected.

Step-by-step (simple workflow)

1. Regularly review your bank and credit card statements.

What to do: Set a schedule (e.g., weekly or bi-weekly) to log in to your online banking and credit card portals. Go through recent transactions line by line.
What “good” looks like: All transactions are familiar and match your spending habits.
Common mistake and how to avoid it: Only checking balances without reviewing transactions. Avoid this by dedicating time to actively scrutinize each charge.

2. Monitor your credit reports.

What to do: Visit AnnualCreditReport.com to request your free credit reports from all three major bureaus. Review each report for any accounts, inquiries, or personal information changes you don’t recognize.
What “good” looks like: All information on your credit reports is accurate and reflects your own financial activity.
Common mistake and how to avoid it: Only checking one credit bureau’s report or not checking them regularly. Avoid this by requesting all three reports and setting a reminder to check them at least annually, or more often if you have concerns.

3. Check your Social Security earnings record.

What to do: Create an account on the Social Security Administration’s website (ssa.gov) to access your earnings history. Compare the reported earnings to your actual employment history.
What “good” looks like: The earnings reported accurately reflect your employment and income.
Common mistake and how to avoid it: Assuming your earnings record is always correct. Avoid this by proactively reviewing it to catch potential errors or fraudulent activity early.

4. Be cautious of unsolicited communications.

What to do: Never provide your SSN or other sensitive information in response to unsolicited emails, phone calls, or text messages. Legitimate organizations will typically not ask for this information this way.
What “good” looks like: You are able to identify and ignore suspicious requests for personal information.
Common mistake and how to avoid it: Believing a scammer who claims to be from a reputable company or government agency. Avoid this by independently verifying the caller’s or sender’s identity through official channels.

5. Review tax-related documents.

What to do: When you receive tax documents (like W-2s or 1099s), verify that they were issued by your actual employers. If you receive a notice from the IRS about a tax return filed under your SSN that you didn’t file, take immediate action.
What “good” looks like: All tax documents correspond to your legitimate employment and tax filings.
Common mistake and how to avoid it: Filing your taxes without verifying all income documents. Avoid this by ensuring all reported income aligns with your actual earnings.

6. Look for unusual mail.

What to do: Pay attention to any mail you receive that seems out of place, such as bills for accounts you don’t recognize or collection notices for debts you didn’t incur.
What “good” looks like: All mail received pertains to your known financial activities.
Common mistake and how to avoid it: Disregarding unexpected mail as junk. Avoid this by opening and reviewing all mail, especially anything that looks like official correspondence.

7. Consider identity theft protection services.

What to do: If you are highly concerned or have experienced a potential compromise, explore reputable identity theft protection services. These services can monitor your credit and alert you to suspicious activity.
What “good” looks like: You have peace of mind knowing your identity is being actively monitored.
Common mistake and how to avoid it: Signing up for a service without understanding its features or reputation. Avoid this by researching providers and choosing one that offers comprehensive monitoring and support.

8. Report any suspected fraud immediately.

What to do: If you confirm or strongly suspect your SSN has been compromised, contact the Federal Trade Commission (FTC) at IdentityTheft.gov and report the incident. You should also contact the fraud department of each of the three credit bureaus.
What “good” looks like: You have taken the necessary steps to report the fraud and begin the recovery process.
Common mistake and how to avoid it: Delaying reporting the incident. Avoid this by acting swiftly, as the sooner you report, the more effectively you can mitigate the damage.

Common mistakes (and what happens if you ignore them)

Mistake	What it causes	Fix
Not reviewing bank statements regularly	Unnoticed fraudulent charges accumulating, leading to financial loss and difficulty disputing charges.	Set up alerts for transactions and review statements at least weekly.
Ignoring unfamiliar inquiries on credit reports	New fraudulent accounts being opened in your name, damaging your credit score and making it harder to obtain future credit.	Dispute unauthorized inquiries with the credit bureaus immediately.
Failing to check Social Security earnings record	Someone using your SSN for employment, potentially impacting your future Social Security benefits or creating tax issues.	Create an account on ssa.gov and review your earnings history annually.
Responding to unsolicited requests for personal information	Becoming a victim of phishing scams, leading to identity theft and financial fraud.	Never share sensitive information via email, text, or unverified phone calls.
Delaying reporting suspected identity theft	The fraudster has more time to open more accounts or incur more debt in your name, making recovery more complex.	Report suspected fraud to the FTC and credit bureaus as soon as possible.
Not shredding sensitive documents	Physical documents containing your SSN or other personal data can be stolen from trash, leading to physical identity theft.	Always shred documents with personal information before discarding.
Believing fake caller IDs or email addresses	Falling for sophisticated phishing attempts designed to trick you into revealing sensitive data.	Independently verify the identity of anyone requesting personal information by calling official numbers or visiting official websites.
Assuming identity theft only means financial loss	Identity theft can also lead to fraudulent medical claims, criminal records, or other serious issues impacting your life beyond finances.	Be aware of all potential ramifications and take comprehensive steps to protect all aspects of your identity.
Not placing fraud alerts or credit freezes	Allowing new credit to be opened easily in your name by fraudsters.	Place fraud alerts or credit freezes with the three major credit bureaus if your SSN is compromised.

Decision rules (simple if/then)

• If you receive a notification of a new account you didn’t open, then immediately contact the financial institution to report fraud because this is a clear sign of identity theft.
• If your tax return is rejected due to a duplicate filing, then contact the IRS and file an Identity Theft Affidavit (Form 14039) because someone is likely using your SSN for fraudulent tax purposes.
• If you see unfamiliar inquiries on your credit report, then dispute them with the credit bureau and place a fraud alert on your file because this indicates someone may be attempting to open new credit in your name.
• If you receive collection notices for debts you don’t recognize, then contact the collection agency and the original creditor to dispute the debt and report identity theft because these debts may be the result of fraudulent activity.
• If you find discrepancies in your Social Security earnings record, then contact the Social Security Administration to investigate and correct the record because this could mean someone is using your SSN for employment.
• If you are asked for your SSN by an unknown entity via email or phone, then do not provide it and instead independently verify their identity through official channels because unsolicited requests are often scams.
• If you notice unusual activity on your bank accounts or credit cards, then contact your financial institution immediately to report suspicious transactions because swift action can prevent further losses.
• If you are a victim of identity theft, then file a report with the FTC at IdentityTheft.gov because this is a crucial step in creating an identity theft recovery plan.
• If you suspect your SSN has been compromised, then consider placing a credit freeze with all three credit bureaus to prevent new accounts from being opened in your name because this provides a strong layer of protection.
• If you receive official mail from the SSA about account changes you didn’t make, then contact the SSA directly to confirm and secure your account because this is a direct notification of potential misuse.

FAQ

What are the most common ways an SSN is compromised?

Common methods include phishing scams, data breaches at companies that store your information, mail theft, and dumpster diving for discarded documents.

How often should I check my credit reports?

It’s recommended to check them at least annually from each of the three major bureaus. If you’ve experienced a breach or suspect fraud, check them more frequently.

What is a fraud alert vs. a credit freeze?

A fraud alert makes it harder for someone to open new credit in your name by requiring lenders to take extra steps to verify your identity. A credit freeze completely restricts access to your credit file, preventing any new credit from being opened.

What should I do if I find an unfamiliar charge on my credit card?

Contact your credit card company immediately to report the fraudulent charge. They have procedures to investigate and often reverse unauthorized transactions.

Can my Social Security benefits be affected if my SSN is hacked?

Yes, if someone uses your SSN to gain employment or file fraudulent tax returns, it can impact your earnings record and potentially affect your future Social Security benefit calculations.

How long does it take to recover from SSN identity theft?

Recovery can be a lengthy process, often taking months or even years, depending on the severity and complexity of the fraud. Consistent monitoring and diligent action are key.

Is it safe to share my SSN over the phone?

Generally, it is not recommended to share your SSN over the phone unless you initiated the call and are absolutely certain of the recipient’s identity and legitimacy.

What is the role of the FTC in SSN compromise cases?

The Federal Trade Commission (FTC) provides resources and guidance through IdentityTheft.gov, where you can report identity theft and create a personalized recovery plan.

What this page does NOT cover (and where to go next)

• Detailed legal advice for pursuing damages from identity thieves.
• Specific recommendations for identity theft protection services (research reputable providers).
• How to recover from other forms of identity theft, such as medical or criminal identity theft.
• Advanced cybersecurity practices for protecting your digital footprint beyond SSN concerns.
• The process of disputing fraudulent tax filings with the IRS (visit IRS.gov for specific forms and guidance).
• How to apply for new benefits or correct errors on your Social Security record (visit ssa.gov for details).