Last updated 3 months ago. Our resources are updated regularly but please keep in mind that links, programs, policies, and contact information do change.
Social Security is a cornerstone of financial security for millions of Americans, providing essential income during retirement, disability, or after the loss of a loved one. Unfortunately, this vital program and the Social Security number (SSN) itself are prime targets for criminals.
Protecting yourself requires awareness and proactive steps. This guide offers clear, actionable advice drawn directly from official U.S. government sources, including the Social Security Administration (SSA), the SSA Office of the Inspector General (OIG), and the Federal Trade Commission (FTC).
Understanding Social Security Fraud
Social Security fraud encompasses any deceptive act aimed at wrongfully obtaining Social Security benefits or misusing an SSN for fraudulent purposes. It manifests in various ways, impacting both the Social Security system’s integrity and individuals directly.
Impersonation Scams
One of the most prevalent forms of Social Security fraud involves criminals falsely claiming to represent the SSA, the SSA OIG, or sometimes even other government or law enforcement agencies like local police departments. These imposter scams have surged, becoming the most commonly reported type of government imposter fraud.
The scammer’s objective is usually to frighten or deceive you into revealing sensitive personal information – such as your full SSN, bank account details, or date of birth – or to pressure you into sending money. They often employ tactics like threatening arrest, legal action, or the suspension of your SSN if you don’t comply immediately.
Alternatively, they might offer false promises, such as activating a benefit increase or cost-of-living adjustment (COLA) in exchange for a fee or personal information. The success of these scams often hinges on the public’s uncertainty about how the SSA genuinely communicates.
Identity Theft
Identity theft related to Social Security occurs when a criminal uses your stolen SSN along with other personal details like your name, address, or date of birth to fraudulently apply for Social Security benefits in your name. This could involve filing for retirement, disability, or survivor benefits that rightfully belong to you or someone else.
Beyond direct benefit theft, a compromised SSN can be used to open fraudulent credit card accounts, obtain loans, rent apartments, or secure employment, all under your identity. This can severely damage your credit history, lead to you being denied legitimate credit or benefits, result in unexpected tax bills if your SSN is used for fraudulent employment, or cause you to receive harassing calls from debt collectors for accounts you never opened.
Children are also vulnerable targets, as their SSNs can be exploited for years before detection. This type of theft often originates from data breaches exposing personal information, successful phishing attacks, or the physical theft of documents containing sensitive data.
Benefit Diversion
For individuals unable to manage their own Social Security benefits due to age or disability, the SSA may appoint a representative payee to handle the funds on their behalf. Benefit diversion occurs when this appointed payee misuses the beneficiary’s funds for their own personal gain instead of for the beneficiary’s essential needs like housing, food, and medical care.
This type of fraud particularly harms vulnerable groups, including children and adults with significant disabilities. The SSA takes allegations of payee misuse seriously and encourages beneficiaries or concerned individuals to report suspected misuse directly to the agency for investigation.
Lies and Concealment
Fraud can also be committed by individuals applying for or receiving benefits. This involves deliberately providing false information or concealing facts that would affect their eligibility. Common examples include:
- Making false statements on applications, such as exaggerating or fabricating a disability to qualify for disability benefits
- Concealing work activity while receiving disability benefits
- Failing to report changes in circumstances that affect eligibility for Supplemental Security Income (SSI), such as marriage, changes in living arrangements, or acquiring assets or resources above the program limits
- Failing to notify the SSA about the death of a beneficiary and continuing to collect the deceased person’s benefits
SSN Misuse Beyond Benefits
The misuse of SSNs extends beyond attempts to fraudulently claim Social Security benefits. Because SSNs are widely used as identifiers in many sectors of American life, they are valuable tools for various criminal activities.
This includes using someone else’s SSN (whether stolen, borrowed, or counterfeit) to gain unauthorized employment, obtain loans or credit, commit financial crimes, or facilitate other illegal acts. The widespread reliance on SSNs for identification purposes, far beyond their original intent of tracking earnings for Social Security, essentially turns the number into a “master key” for an individual’s identity.
This broad utility significantly increases the potential damage if an SSN is compromised and underscores the critical importance of protecting it vigilantly.
The SSA OIG has the authority to investigate various forms of SSN misuse. However, if the misuse primarily results in identity theft impacting credit reports, financial accounts, or services outside of SSA programs, the Federal Trade Commission (FTC) is the primary agency for reporting and recovery assistance.
Additionally, the buying or selling of legitimate or counterfeit Social Security cards is a federal crime investigated by the SSA OIG.
Safeguarding Your Social Security Number
Your Social Security number is a valuable piece of confidential information. Protecting it requires conscious effort in both the physical and digital realms. Treat it as the key to your financial identity, because in many ways, it is.
Secure Your Social Security Card
The official guidance from government agencies is unequivocal: Do not routinely carry your Social Security card or number in your wallet or purse. If your wallet is lost or stolen, your SSN shouldn’t be compromised along with it.
It’s best to memorize your number if you can. Keep the physical card itself stored in a secure location at home, such as a locked file cabinet or a safe deposit box.
Be a Gatekeeper
Resist the urge to provide your SSN automatically whenever it’s requested. Develop the habit of questioning why your number is needed, how it will be used and protected, and what the consequences are if you refuse to provide it. Crucially, ask if an alternative identifier can be used instead.
While certain entities have legitimate, often legally mandated, needs for your SSN – such as employers for wage and tax reporting, financial institutions for account opening and credit checks, and government agencies for benefits and tax administration – many other requests may be unnecessary or optional.
Be particularly cautious about unsolicited requests for your SSN. It’s helpful to know that official best practices actually encourage organizations to limit their collection and use of SSNs and to utilize alternative identifiers whenever feasible.
Understanding this can empower you to more confidently question requests and refuse when the need isn’t justified, reinforcing your role as the primary guardian of your own sensitive information.
Digital and Physical Vigilance
Protecting your SSN requires vigilance across all environments:
Online: Be constantly on guard against phishing scams. These are deceptive emails, text messages, phone calls, or social media messages crafted to trick you into revealing your SSN, passwords, or financial details.
Never click on suspicious links or open unexpected attachments, as they can install malware or lead to fake login pages. Before entering sensitive information on a website, ensure it is secure by looking for “https://” at the beginning of the web address (URL).
Avoid conducting financial transactions or accessing sensitive accounts while connected to public Wi-Fi networks, which are often unsecured. Remember, the SSA has stated it will never ask for sensitive information through social media channels because they are not secure platforms for such communication.
Offline: Avoid saying your SSN aloud in public places where conversations might be overheard. When disposing of documents that contain your SSN or other personal information (like bank statements, medical bills, or old tax forms), destroy them thoroughly, preferably by shredding.
Be aware of the risk of mail theft; if you frequently receive sensitive documents by mail, consider using a locking mailbox.
Special Care for Children’s SSNs
Children’s SSNs are exceptionally valuable to identity thieves because the fraud can often go undetected for many years, only coming to light when the child applies for their first job, loan, or apartment.
Apply the same rigorous “need-to-know” standard when asked for your child’s SSN by schools, healthcare providers, sports leagues, or other organizations. Always ask why it is necessary and how it will be protected.
Keep documents bearing your child’s SSN, like their birth certificate and Social Security card, in a secure location. Shred any documents containing their personal information before discarding them.
Most importantly, strongly consider placing a security freeze (also known as a credit freeze) on your child’s credit report if they are under the age of 16. This service is free and makes it significantly harder for identity thieves to open new fraudulent accounts using your child’s information.
You must contact each of the three major credit bureaus (Equifax, Experian, TransUnion) individually to request a freeze for a minor; they provide specific instructions on their websites.
Recognizing Scams
Scammers often follow predictable patterns. The SSA OIG and FTC highlight a common four-part structure used in many imposter scams:
- Pretend: Scammers impersonate someone from a familiar and trusted agency or organization (like SSA) to gain your trust.
- Problem/Prize: They present a fake problem (e.g., your SSN is suspended, there’s suspicious activity on your account) or offer a fake prize (e.g., an unexpected benefit increase requiring a fee).
- Pressure: They pressure you to act immediately, often using threats or creating a sense of urgency to prevent you from thinking clearly or consulting others.
- Payment: They dictate a specific, often unusual, method for you to send money – typically one that is difficult to trace or reverse.
Recognizing these core elements can help you identify a potential scam early on.
Communication Channels Used by Scammers
Scammers will use any available communication channel to reach potential victims. Be wary of suspicious contact through:
Phone: Unsolicited calls are a primary tool, often using automated robocall messages or live agents. A common and deceptive tactic is “caller ID spoofing,” where scammers manipulate the caller ID display to show a legitimate SSA phone number (like the official 1-800-772-1213), the name “Social Security Administration,” or even the number of your local police department.
Because caller ID can be easily faked, you should never trust it as proof of the caller’s identity.
Email & Text Messages: Watch out for messages containing urgent warnings about your account, fake benefit notifications, or requests to verify information. These often include malicious links designed to steal your login credentials or attachments containing malware.
Look closely for grammatical errors, misspellings, or awkward phrasing, which are frequent red flags in scam communications.
U.S. Mail: Scammers may send official-looking letters that mimic SSA correspondence. These letters might use SSA logos or government jargon but often contain threats, demands for immediate payment via unusual methods, or requests for sensitive personal information.
They might also contain subtle errors or instructions inconsistent with legitimate SSA practices.
Social Media: Be cautious of fake profiles or pages impersonating the SSA or its officials on platforms like Facebook or Twitter. Scammers might send direct messages (DMs) asking for personal information or demanding payment.
Verify official SSA social media accounts by checking the list provided on the SSA website. Red flags for imposter pages include very low follower counts, poor grammar/spelling, links directing you away from the official ssa.gov domain, or any request for sensitive data.
Fake Websites: Criminals create fraudulent websites designed to look like the official SSA site (which is always https://www.ssa.gov) to trick people into entering usernames, passwords, SSNs, or other personal data. Always double-check the website address in your browser bar to ensure it ends in “.gov” before entering any information.
Scammers sometimes use multiple channels in coordination – for instance, following up a threatening phone call with an email containing falsified documents to seem more credible. This multi-pronged approach means you need to maintain a healthy skepticism toward any unsolicited contact claiming to be from the SSA, regardless of how it arrives or if it seems corroborated by communication through another channel.
Common Scam Tactics and Red Flags
Be alert for these specific tactics and claims commonly used by Social Security scammers:
False Claims & Threats:
- Telling you your SSN has been suspended, blocked, canceled, or compromised due to suspicious activity or involvement in a crime. Fact: The SSA does not suspend SSNs.
- Threatening you with arrest, legal action, deportation, or having your benefits cut off if you don’t immediately pay a fine, fee, or debt. Fact: SSA representatives will not make these kinds of threats.
- Claiming you need to pay a fee or provide personal information to receive a Cost-of-Living Adjustment (COLA) or other benefit increase. Fact: COLAs are automatic for eligible beneficiaries, and no payment or action is required to receive them.
- Offering to move your money to a supposedly “protected” bank account to safeguard it from seizure. Fact: This is a common ploy to steal your funds.
- Demanding that you “confirm” or “verify” your full SSN, bank account number, mother’s maiden name, or other sensitive personal details. Fact: Do not provide this information to anyone who contacts you unexpectedly.
Pressure & Manipulation:
- Insisting that you must act immediately or face dire consequences. This is designed to create panic and prevent you from verifying their claims.
- Demanding secrecy, telling you not to talk to anyone (family, friends, advisors) about the call or request. This isolates you and prevents you from getting a second opinion.
- Using aggressive, intimidating, or overly technical language to confuse or frighten you.
Impersonation Tricks:
- Using the real names of actual SSA or OIG employees to sound legitimate. Fact: Knowing a real employee’s name doesn’t prove the caller is who they claim to be.
- Sending official-looking but fake documents, letters, reports, or even photographs of government ID badges or credentials via mail, email, text, or social media message as “proof” of their identity. Fact: Real federal law enforcement officers and government employees will never send pictures of their credentials to demand payment or information. Reproducing federal badges is illegal.
Payment Demands (MAJOR RED FLAG):
Instructing you to pay using specific, untraceable methods. This is one of the most reliable indicators of a scam. Be extremely wary if anyone claiming to be from the government demands payment via:
- Retail gift cards (e.g., Apple, Google Play, Amazon, Target, Walmart) – they will ask you to buy cards and read the numbers off the back.
- Wire transfers (e.g., through services like Western Union or MoneyGram).
- Cryptocurrency (e.g., Bitcoin, Ethereum).
- Prepaid debit cards.
- Mailing physical cash.
Fact: Legitimate government agencies, including the SSA, will NEVER demand payment through these methods. These payment forms are favored by scammers precisely because they are difficult to trace and almost impossible to recover once sent. Any request for payment using these methods is virtually guaranteed to be a scam.
Legitimate SSA Contact vs. Scams
Understanding how the Social Security Administration genuinely communicates is your best defense against imposter scams. While scammers try hard to appear authentic, their methods often contain tell-tale signs of fraud.
How SSA Actually Reaches Out
The SSA primarily communicates through official channels:
U.S. Mail: This is the most common way SSA sends official letters regarding your benefits, application decisions, requests for information, or notifications about your record. If you need to submit payments to SSA, they will mail you a letter with instructions and approved payment options.
Phone Calls (Limited Circumstances): SSA employees do make phone calls for legitimate business purposes, but typically only under specific circumstances. They might call if:
- You recently applied for Social Security benefits and they need more information.
- You are already receiving payments and they need to update your record (e.g., review your disability status).
- You specifically requested a phone call from the agency.
If SSA calls you, the employee will identify themselves clearly. However, if you receive an unexpected call claiming to be from SSA and feel unsure or suspicious, the safest course of action is to hang up. Do not rely on caller ID.
Independently find the SSA’s official public inquiry number, 1-800-772-1213 (TTY 1-800-325-0778), and call them directly to verify if they need to speak with you. SSA representatives are generally available on weekdays between 8 a.m. and 7 p.m. local time.
Online: You can securely conduct business and access information through the official SSA website, which is https://www.ssa.gov. Your personal “my Social Security” account on this site is a secure portal for managing your information. The SSA will not use social media platforms (like Facebook Messenger or Twitter Direct Messages) to request your SSN, bank account details, or other sensitive personal information.
Actions SSA Will NEVER Take
Memorizing these actions that the real SSA will never take can help you instantly recognize a scam:
- Threaten you with arrest, legal action, deportation, or benefit suspension if you don’t immediately pay a fine or fee.
- Suspend your Social Security number. SSA simply does not do this.
- Demand immediate payment using specific, untraceable methods like gift cards, wire transfers, cryptocurrency, prepaid debit cards, or mailed cash.
- Call, email, or text you unexpectedly to pressure you for personal information like your full SSN, date of birth, mother’s maiden name, or bank account numbers.
- Promise to increase your benefits, approve a claim faster, or provide other special assistance in exchange for payment.
- Demand secrecy or tell you not to discuss the call or request with family, friends, or financial advisors.
- Send unsolicited pictures of employee credentials or law enforcement badges via email, text, or mail as “proof” of identity, especially when demanding payment or information.
SSA Communication: Real vs. Scam
Feature | Legitimate SSA Communication | Scam Communication |
---|---|---|
Primary Method | U.S. Mail for official notices and payment instructions | Unsolicited phone calls, emails, texts, social media messages |
Phone Calls | May call if you applied, receive benefits, or requested contact. Will identify self. | Frequent unsolicited calls, often robocalls. May use spoofed caller ID |
Tone & Language | Professional, informative. | Urgent, threatening, intimidating, high-pressure |
Reason for Contact | Specific issue related to your benefits or application. | Vague “problem” with SSN/account, threat of arrest, unexpected prize/benefit increase |
Information Request | May ask to verify identity info you provided on application, but not full SSN out of blue. | Demands full SSN, bank account, passwords, mother’s maiden name |
Payment Request | Sends instructions via mail for legitimate debts; accepts standard payment methods. | Demands immediate payment via gift cards, wire transfer, crypto, prepaid card, mailed cash |
Threats | Will NEVER threaten arrest, legal action, SSN suspension, deportation | Frequently uses threats of arrest, SSN suspension, legal action |
Secrecy | Does not demand secrecy. | Often tells victim not to talk to anyone. |
Credentials | Will NEVER send photos of badges/IDs to demand payment. | May send fake documents or photos of badges as “proof”. |
Website | Official site is https://www.ssa.gov. | May use fake websites designed to mimic SSA site; URLs often slightly different or not ending in .gov. |
Social Media | Uses official channels (listed at www.ssa.gov/socialmedia) for info; NEVER asks for sensitive data. | May use fake pages/DMs to solicit personal info or payment. |
The most effective defense against impersonation scams is independent verification. Never trust contact information (like a phone number or website link) provided by someone who contacts you unexpectedly.
If you have any doubt about whether a communication is genuinely from SSA, disengage from the contact and initiate communication yourself using the official phone number (1-800-772-1213) or website (https://www.ssa.gov) that you look up independently. This bypasses any deception the scammer has set up.
Using “my Social Security” Online Account
One of the most valuable tools the SSA provides for monitoring your record and enhancing security is your personal “my Social Security” online account. Setting up and regularly using this free account is a highly recommended step in protecting yourself against fraud and errors.
Creating and Securing Your Account
To create your account, go only to the official SSA website: https://www.ssa.gov/myaccount. Follow the on-screen instructions. You will need to provide certain personal information, which SSA uses to verify your identity against their records before granting access.
Once your account is established, securing it is paramount. Choose a strong, unique password that you don’t use for any other online accounts. If available, enable multi-factor authentication (MFA) or two-step verification. This adds a significant layer of security by requiring a second form of identification (like a code sent to your phone) in addition to your password when logging in.
Proactive Monitoring
Creating the account is just the first step; regularly logging in and reviewing your information transforms it into an early warning system. Make it a habit to periodically check:
Your Earnings Record: Review the year-by-year summary of your earnings that SSA has recorded. Look for any earnings listed that you didn’t actually receive. Incorrect or unfamiliar earnings could be a sign that someone else is illegally using your SSN for employment. Catching this early is crucial.
Your Social Security Statement: This statement provides estimates of your future retirement, disability, and survivor benefits based on your current earnings record. It also shows your history of taxed Social Security earnings. Review these estimates and the earnings history for accuracy.
Account Activity and Notices: Check for any changes made to your contact information or direct deposit details that you didn’t authorize. Review any messages or notices posted to your account.
By actively monitoring your account online, you shift from passively receiving occasional paper statements to being an engaged observer of your own record in near real-time. This allows for much earlier detection of potential fraud or inaccuracies compared to waiting for mailed documents.
Furthermore, establishing your own legitimate “my Social Security” account can prevent a fraudster from creating a fake one in your name later.
eServices Block
For individuals seeking an even higher level of security for their online information, SSA offers the option to request an “eServices block” on their account. This block prevents anyone, including you, from accessing or making changes to your personal information through the “my Social Security” online portal.
If an eServices block is in place, any changes to your record or requests for information normally available online would require contacting your local SSA office directly, either in person or by phone. You or your authorized representative would also need to contact the local office to request the removal of the block.
This feature significantly enhances security against unauthorized online access but comes at the cost of online convenience. It represents a deliberate choice to prioritize maximum protection over the ease of online self-service.
How to Report Fraud and Identity Theft
If you encounter a scam, suspect Social Security fraud, or discover your identity has been compromised, reporting it promptly is essential. Your report helps protect you from further harm, provides valuable information to law enforcement agencies investigating these crimes, and contributes to data that helps warn and educate others.
Knowing where to direct your report based on the type of incident is key to getting the right help quickly.
Reporting Social Security Scams & Program Fraud
If your concern relates specifically to Social Security programs or personnel, the SSA Office of the Inspector General (OIG) is the correct agency to contact. Report to the SSA OIG if you suspect:
- Impersonation Scams: Receiving calls, emails, texts, letters, or social media messages where someone falsely claims to be from SSA or OIG.
- Benefit Fraud: Someone making false statements on benefit applications, concealing work or other eligibility factors (like income, assets, living arrangements, marital status) while receiving benefits, or continuing to receive benefits for a deceased person.
- Representative Payee Misuse: An appointed payee stealing or improperly using a beneficiary’s funds.
- SSN Card Fraud: Buying or selling legitimate or counterfeit Social Security cards.
- Employee Fraud: Crimes or misconduct involving SSA employees.
- SSN Misuse: Using an SSN improperly in connection with obtaining or maintaining Social Security benefits.
How to Report to SSA OIG:
- Online (Preferred Method): Use the secure OIG Fraud Reporting Form available at https://oig.ssa.gov/report/.
- Phone: Call the OIG Fraud Hotline at 1-800-269-0271. The hotline is staffed from 10:00 a.m. to 4:00 p.m. Eastern Time. TTY users can call 1-866-501-2101.
- Mail: Send your report to: Social Security Fraud Hotline, P.O. Box 17785, Baltimore, MD 21235.
- Fax: Send your report to (410) 597-0118.
What Information to Provide: The success of an investigation often depends on the details provided. Include as much information as possible about the alleged suspect(s) and/or victim(s), such as names, addresses, phone numbers, dates of birth, and Social Security numbers (if known).
Describe the suspected fraud clearly: what happened, where and when it occurred, how it was committed, why you believe the person committed fraud (if known), and if anyone else has knowledge of the situation.
If reporting a scam communication (call, email, text, mail, website), try to capture specific details like the caller ID number, callback number, email address, website URL, screenshots of web pages or messages, or save the entire physical mailing including the envelope.
What Happens Next: The SSA OIG carefully reviews every allegation received and takes appropriate investigative or administrative action. However, due to federal privacy laws and law enforcement regulations, the OIG cannot provide updates on the status or outcome of an investigation, even to the person who submitted the report.
Unless an investigator contacts you directly for more information, you will likely not hear back from the OIG after submitting your report.
Reporting Identity Theft
If your SSN or other personal information has been misused to commit identity theft – meaning someone has used your information without permission to, for example, open fraudulent credit accounts, file fake tax returns, get medical services, or rent an apartment – you should report it immediately to the Federal Trade Commission (FTC).
The FTC is the primary federal agency for helping identity theft victims. You should also contact the FTC if your SSN card was lost or stolen, or if your SSN was exposed in a data breach, even if you don’t yet have evidence it has been misused.
How to Report to FTC:
- Online (Primary Resource): Go to the official federal government resource for identity theft victims: IdentityTheft.gov. This website will guide you through the process of filing an official FTC Identity Theft Report and will generate a personalized recovery plan with step-by-step instructions.
- Phone: You can also report identity theft by calling the FTC at 1-877-IDTHEFT (1-877-438-4338). TTY users can call 1-866-653-4261.
What Happens Next: The IdentityTheft.gov website provides comprehensive recovery assistance. Your personalized plan will include specific steps to take, such as contacting credit bureaus, closing fraudulent accounts, disputing debts, and potentially filing reports with other agencies.
It also provides pre-filled letters and forms to help you communicate with businesses and credit bureaus. Your report to the FTC also contributes to a secure database used by law enforcement agencies nationwide to investigate and prosecute identity thieves.
Reporting Scam Attempts: Even if you recognized a scam attempt (like an imposter phone call or phishing email) and did not lose money or provide sensitive information, you can still report the incident to the FTC at ReportFraud.ftc.gov. These reports help the FTC identify emerging scam trends, issue public alerts, and support law enforcement actions against scammers.
Reporting Other Specific Types of Fraud
Because a stolen SSN can be used in many ways, you might need to report the issue to other specific agencies in addition to or instead of the SSA OIG and FTC:
Tax-Related Identity Theft: If you suspect someone used your SSN to file a fraudulent federal tax return (e.g., the IRS rejects your e-filed return because one was already filed using your SSN), contact the IRS Identity Protection Specialized Unit. Visit the IRS identity theft resource page or call 1-800-908-4490. You will likely need to file IRS Form 14039, Identity Theft Affidavit, to alert the IRS and invalidate the fraudulent return.
Medicare or Medicaid Fraud: Report suspected fraud involving Medicare or Medicaid benefits to the Department of Health and Human Services (HHS) Office of Inspector General. You can report online at https://oig.hhs.gov/fraud/report-fraud/ or call the HHS OIG Hotline at 1-800-HHS-TIPS (1-800-447-8477).
Direct Express® Card Fraud: If you receive your Social Security benefits via a Direct Express® Debit MasterCard and suspect fraudulent activity on your card account, immediately call the Direct Express® customer service number printed on the back of your card. You can also find contact information at https://www.usdirectexpress.com/contact.html.
Unemployment Insurance Fraud: If you believe your personal information was used to fraudulently apply for state unemployment benefits, report it to the U.S. Department of Labor Office of Inspector General (DOL OIG). You should also report it to your state’s unemployment insurance agency.
Local Police Report: Consider filing a report with your local police department, especially if you know the person who stole your information or if businesses where fraudulent accounts were opened require a police report to resolve disputes.
The reporting structure for fraud and identity theft involves multiple agencies with specific jurisdictions. Directing your report to the correct agency from the outset can save time and ensure it receives appropriate attention.
Additional Protection Tools
Beyond directly guarding your SSN, utilizing tools related to your credit report can provide additional layers of defense against financial identity theft, helping you detect misuse early or prevent it altogether.
Check Your Credit Reports Regularly
Your credit reports, maintained by the three major nationwide credit bureaus (Equifax, Experian, and TransUnion), contain detailed information about your credit history, including open accounts, loans, payment history, and credit inquiries. Regularly reviewing these reports is crucial for spotting signs of identity theft, such as accounts you didn’t open, inquiries from creditors you don’t recognize, or debts that aren’t yours.
Federal law entitles you to receive one free copy of your credit report from each of the three major bureaus every 12 months. The only official website authorized to provide these free annual reports is AnnualCreditReport.com. Make it a habit to request and review your reports at least once a year.
Place Fraud Alerts
A fraud alert is a notice placed on your credit file that flags your account for potential lenders and creditors. It signals them to take extra steps to verify your identity before issuing new credit in your name. There are three types:
- Initial Fraud Alert: Lasts for one year and can be renewed. This is a good option if you suspect your personal information might have been compromised (e.g., through a data breach or lost wallet) but haven’t confirmed misuse.
- Extended Fraud Alert: Lasts for seven years. To place an extended alert, you must provide proof of identity theft, typically an FTC Identity Theft Report or a police report.
- Active Duty Alert: Available for members of the military on active duty, lasts for one year and provides additional protections.
Placing a fraud alert is free. You only need to contact one of the three major credit bureaus (Equifax, Experian, or TransUnion) to request an alert; that bureau is legally required to notify the other two.
Placing an initial fraud alert is a recommended immediate step if you believe you’ve been targeted by a scammer or if your SSN has been lost, stolen, or exposed.
Implement Security Freezes (Credit Freezes)
A security freeze, often called a credit freeze, offers the strongest level of protection against unauthorized new accounts being opened in your name. When a freeze is active, it restricts access to your credit report, meaning most potential lenders cannot view your credit file to approve new applications for loans or credit cards.
Placing, temporarily lifting (thawing), or permanently removing a security freeze is free for all consumers nationwide under federal law.
Unlike fraud alerts, you must contact each of the three major credit bureaus individually to place a security freeze on your respective credit files. You can typically do this online, by phone, or by mail.
- Equifax: https://www.equifax.com/personal/credit-report-services/credit-freeze/
- Experian: https://www.experian.com/help/credit-freeze/
- TransUnion: https://www.transunion.com/credit-freeze
Keep in mind that if you want to apply for new credit (like a mortgage, auto loan, or new credit card), you will need to temporarily lift the freeze with the specific bureau(s) the lender uses, usually for a set period. Remember also the recommendation to place security freezes for children under 16.
It’s important to understand the distinction: security freezes primarily offer prevention by blocking access to your credit report for new account openings, while fraud alerts and credit monitoring mainly serve as detection tools, alerting you or prompting verification after activity has already occurred or been attempted.
For the specific purpose of stopping thieves from opening new lines of credit in your name, a security freeze is the most effective tool available, and it’s free.
Credit Monitoring Services
Various companies offer credit monitoring services, which are typically subscription-based (paid). These services track your credit reports across one, two, or all three bureaus and provide alerts about certain changes, such as new accounts, credit inquiries, or changes to personal information. Some services also monitor other databases for misuse of your personal information.
While these services can offer convenience and potentially faster notification of certain activities, much of the core protection they provide – monitoring credit reports and being alerted to new accounts – can be achieved for free by diligently checking your own reports via AnnualCreditReport.com and utilizing free security freezes and fraud alerts.
Credit monitoring services are often offered by companies as a remedy after a data breach. Carefully evaluate the cost and specific features offered against the robust protections available for free before signing up.
If You’ve Been Scammed
Discovering that you’ve fallen victim to a scam or that your SSN has been compromised can be distressing and overwhelming. It’s important to remember that you are not to blame; the fault lies entirely with the criminals who targeted you. Focus your energy on taking immediate, concrete steps to limit the damage and start the recovery process.
Immediate Actions
Act quickly to mitigate the harm:
Cease All Contact: Immediately stop communicating with the scammer. Do not answer their calls, reply to their texts or emails, or engage with them in any way. Block their phone numbers and email addresses if possible.
Report Fraudulent Payments: If you sent money or provided payment information, contact the relevant financial institutions immediately:
- Gift Cards: Call the company that issued the gift card (e.g., Apple, Google Play, Target). Report that the card was used in a scam and ask if any remaining funds can be frozen or refunded. Keep the physical card and the purchase receipt.
- Wire Transfer: Contact the wire transfer company (e.g., Western Union at 1-800-325-6000, MoneyGram at 1-800-MONEYGRAM). Report the fraud immediately and ask them to reverse the transfer if possible. Speed is critical.
- Bank Transfer / Debit Card: Contact your bank or credit union right away. Report the fraudulent transaction and ask if they can stop the transfer or reverse the debit card charge.
- Credit Card: Call the fraud department of your credit card issuer using the number on the back of your card. Report the charge as fraudulent. Credit cards generally offer strong protections against unauthorized charges.
- Cryptocurrency: Transactions are often irreversible. Report the fraud to the cryptocurrency exchange or platform you used, as well as to the FTC (ReportFraud.ftc.gov) and the FBI’s Internet Crime Complaint Center (IC3).
Protect Your Identity: If you shared your SSN, bank account number, credit card details, or other sensitive personal information with a scammer, or if you know your information was misused: Go immediately to IdentityTheft.gov. File an official identity theft report and begin following the steps in your personalized recovery plan.
Place an Initial Fraud Alert: Contact one of the three major credit bureaus (Equifax, Experian, or TransUnion) immediately and ask them to place an initial one-year fraud alert on your credit file. This is a crucial first step in protecting against further fraudulent accounts.
Follow Your Recovery Plan
The personalized recovery plan generated by IdentityTheft.gov is your essential guide through the recovery process. It provides detailed, step-by-step instructions tailored to your specific situation, which may include:
- Contacting the fraud departments of businesses where fraudulent accounts were opened.
- Closing fraudulent accounts and disputing unauthorized charges or debts.
- Placing extended fraud alerts or security freezes on your credit reports.
- Filing reports with other relevant agencies (like the IRS for tax ID theft or local police) if necessary.
Follow the plan diligently and keep records of your communications and actions.
Getting a New SSN
Many identity theft victims wonder if getting a new SSN is the solution. However, the SSA issues new numbers only in very specific, limited circumstances. Generally, you must provide evidence that:
- Your SSN is being used, causing you ongoing harm (e.g., preventing you from getting a job, credit, or housing).
- You have exhausted all other means of resolving the problems caused by the misuse.
Getting a new SSN is not a guaranteed fresh start. Credit reporting agencies use other personal information (like your name, address, and date of birth) in addition to your SSN to track credit history.
A new number doesn’t erase your old credit history or necessarily prevent the thief from continuing to misuse your other information. If you believe your situation warrants consideration for a new SSN, you will need to apply and provide extensive documentation of the ongoing harm.
Our articles make government information more accessible. Please consult a qualified professional for financial, legal, or health advice specific to your circumstances.