Identity Theft

Social Security Number Stolen? Here's Your Complete Recovery Plan

A stolen Social Security number is the master key to your identity. Criminals can open credit cards, file tax returns, get medical care, and even take jobs — all in your name. Here is how to fight back.

Published: March 23, 2026 9 min read Silent Security Research Team
Silent Security Research Team
Published March 23, 2026  ·  Our methodology Privacy Policy

Your Social Security number is the single most valuable piece of personal information a criminal can steal. Unlike a credit card number, you cannot just cancel your SSN and get a new one. It follows you for life — and in the wrong hands, it unlocks everything: credit accounts, tax refunds, medical care, employment, and government benefits. If your SSN has been compromised, here is your complete recovery plan.

How Social Security Numbers Get Stolen

Understanding how SSNs are stolen helps you assess your risk and prevent future exposure:

  • Data breaches: This is the most common source. Breaches at employers, healthcare providers, financial institutions, and government agencies have exposed hundreds of millions of SSNs. The 2017 Equifax breach alone compromised 147 million SSNs.
  • Dark web marketplaces: Stolen SSNs are bought and sold on dark web markets for as little as $2 to $10. Once your SSN is on the dark web, it can be purchased and used by multiple criminals over many years.
  • Phishing and social engineering: Criminals impersonate the IRS, Social Security Administration, banks, and employers to trick people into revealing their SSNs over the phone, by email, or through fake websites.
  • Mail theft: Tax documents (W-2s, 1099s), Social Security statements, and financial account statements sent by mail contain your SSN. Stolen mail is a low-tech but effective method.
  • Physical document theft: Stolen wallets, purses, and documents from cars, homes, or workplaces. Anyone who has ever had a Social Security card in their wallet is at risk.
  • Insider theft: Employees at companies, medical offices, and government agencies who have access to SSNs in their systems can steal and sell them.
Assume Your SSN Has Been Exposed

Given the scale of data breaches over the past decade — Equifax (147M), Anthem (78.8M), OPM (21.5M), T-Mobile (76M), and thousands of smaller breaches — security experts recommend that every American assume their SSN has been compromised at some point. The protective steps below are worth taking even if you have not received a specific breach notification.

Immediate Steps: The First 48 Hours

If you know or suspect your SSN has been stolen, take these steps as quickly as possible:

Step 1: Freeze Your Credit at All Three Bureaus

This is the single most important action. A credit freeze prevents anyone from opening new credit accounts using your SSN. It is free by federal law and does not affect your credit score.

Also freeze at these lesser-known bureaus that some lenders use:

For a detailed walkthrough, see our complete credit freeze guide.

Step 2: File an Identity Theft Report with the FTC

  • Go to IdentityTheft.gov and complete the reporting process.
  • The FTC will generate an Identity Theft Report — this is a legally recognized document that creditors and credit bureaus must honor when you dispute fraudulent accounts.
  • Save and print your report. You will need it multiple times throughout the recovery process.

Step 3: File a Police Report

  • File with your local police department. Bring your FTC Identity Theft Report and any evidence of the theft or fraudulent use.
  • Some departments may be reluctant to take the report if no financial loss has occurred yet. Insist — federal law supports your right to file.
  • Get a copy of the police report for your records.

Step 4: Contact the Social Security Administration

  • Create a my Social Security account at ssa.gov/myaccount/ if you do not already have one. This prevents a criminal from creating one in your name and redirecting your benefits.
  • Review your earnings record for any employment you do not recognize. Criminals sometimes use stolen SSNs for employment, and their wages get reported under your number.
  • Report fraud to the SSA Office of the Inspector General at oig.ssa.gov or call the fraud hotline at 1-800-269-0271.

Protect Your Taxes: IRS Identity Protection PIN

Tax-related identity theft is one of the most common uses of a stolen SSN. A criminal files a fraudulent tax return early in the season, claims your refund, and you discover the problem only when the IRS rejects your legitimate return.

The IRS Identity Protection PIN (IP PIN) prevents this entirely:

  • An IP PIN is a 6-digit number that the IRS assigns to you. It must be included on your tax return — without it, the return is rejected.
  • Apply online at irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin.
  • You will receive a new IP PIN each year. The IRS will mail it to you or you can retrieve it online.
  • This is free and available to any taxpayer — you do not need to be a confirmed identity theft victim.
Everyone Should Get an IRS IP PIN

The IRS IP PIN is one of the most underused identity protection tools available. It is free, it takes 15 minutes to set up, and it completely prevents fraudulent tax returns filed with your SSN. Even if your SSN has not been stolen, this is worth doing proactively.

If Your SSN Is Being Used for Employment Fraud

If your Social Security earnings record shows wages from employers you never worked for, someone is using your SSN for employment. This can cause serious problems including incorrect tax obligations and issues with government benefits.

  • File IRS Form 14039 (Identity Theft Affidavit) with the IRS.
  • Contact the employer listed on your earnings record (if identifiable) and inform them that the employee is using a stolen SSN.
  • Report to the SSA OIG at oig.ssa.gov.
  • File with your state's workforce agency if fraudulent unemployment claims have been filed using your SSN.

When to Request a New Social Security Number

The SSA will issue a new SSN in extreme cases, but this is genuinely a last resort. Here is why:

  • Eligibility is narrow: The SSA will only consider a new SSN if you have done everything possible to resolve the problem with your current number and continue to be disadvantaged. Simply having your SSN exposed in a data breach is not sufficient.
  • A new SSN creates new problems: Your credit history does not transfer to the new number. You start with a blank credit file, which makes it difficult to get credit, rent an apartment, or pass background checks.
  • Your old number does not disappear: Your old SSN still exists in databases everywhere. You will need to manage and monitor two numbers instead of one.
  • The process is slow: Requesting a new SSN requires an in-person visit to a Social Security office with extensive documentation.

In nearly all cases, freezing your credit, monitoring your accounts, and filing the proper reports provides better protection than getting a new SSN. Consult with an identity theft attorney before pursuing this option.

Protect Children's SSNs Too

Children are prime targets for SSN theft because the fraud can go undetected for years — until the child applies for their first credit card, student loan, or apartment. Freeze your child's credit at all three bureaus. They may not have a credit file yet, but the bureaus will create one for the purpose of the freeze. Check their credit reports annually.

Ongoing Monitoring and Protection

A stolen SSN is a permanent vulnerability. Even after you take all the immediate steps, criminals can attempt to use your SSN months or years later. Ongoing vigilance is essential:

  • Check your credit reports at least quarterly at AnnualCreditReport.com.
  • Review your Social Security earnings statement annually at ssa.gov/myaccount/.
  • Renew your IRS IP PIN every year.
  • Keep your credit frozen at all bureaus. Only temporarily unfreeze when you need to apply for credit, then refreeze immediately.
  • Monitor the dark web: Your SSN may be traded on dark web marketplaces multiple times. Knowing when it surfaces gives you time to act before it is used.

Automated SSN Monitoring

Manual monitoring has limits — you cannot check the dark web yourself, and quarterly credit checks leave gaps. Aura's identity protection provides continuous SSN monitoring across credit bureaus, the dark web, public records, and financial accounts. When your SSN appears somewhere it should not, you get an instant alert — plus up to $5 million in identity theft insurance to cover recovery costs if the worst happens.

Your SSN Recovery Checklist

Complete SSN Theft Recovery Steps
  1. Freeze credit at all 3 major bureaus + Innovis, ChexSystems, and NCTUE
  2. File an Identity Theft Report at IdentityTheft.gov
  3. File a police report with your local department
  4. Create a my Social Security account at ssa.gov and review earnings
  5. Report fraud to SSA OIG at oig.ssa.gov or 1-800-269-0271
  6. Get an IRS Identity Protection PIN at irs.gov
  7. File IRS Form 14039 if you suspect tax fraud
  8. Set up ongoing credit monitoring and dark web monitoring
  9. Check credit reports quarterly and SSA earnings annually
  10. Keep credit frozen permanently — only unfreeze temporarily when needed

For the full identity theft recovery process, including how to dispute fraudulent accounts and restore your credit, see our comprehensive Identity Theft Recovery Guide. For dark web monitoring options and how they work, see our Dark Web Monitoring Guide.

Related Reading