How to Protect Your Social Security Number From Theft

To protect your Social Security number from theft, share it only when a law actually requires it, freeze your credit at all three bureaus, get an IRS Identity Protection PIN, lock your number in E-Verify, and check your credit reports and earnings record on a regular schedule. Those five moves shut down the most common ways thieves turn a nine-digit number into new credit cards, stolen tax refunds, and wages reported under your name.

Share It Only When You Have To

Federal, state, and local government agencies that ask for your SSN have to tell you whether giving it is mandatory or voluntary, what law authorizes the request, and how the number will be used.¹ Absent a specific federal statute, an agency generally can’t deny you a benefit just because you declined to share it.

A few requesters genuinely need it. Employers use it to file W-2 wage reports and process Form W-4 withholding under the Internal Revenue Code.² Banks and other financial institutions collect it when you open an account under rules implementing Section 326 of the USA PATRIOT Act.³ Motor vehicle agencies typically require it for driver’s licenses, and the Social Security Administration uses it to manage your benefits.

Private businesses are a different story. A gym, a cable company, or a doctor’s office may put an SSN field on the form out of habit, but they usually have no legal authority to demand it. Ask why they need it, whether another ID will do, and what happens if you refuse. The last four digits or an internal account number often satisfies their systems. Getting comfortable saying no is one of the cheapest forms of identity protection you have.

Freeze Your Credit at All Three Bureaus

A credit freeze is the single strongest tool for preventing new-account fraud. While it’s in place, no one, including you, can open a new credit card, loan, or line of credit, because lenders can’t pull your credit report.⁴ Place it separately with Equifax, Experian, and TransUnion. All three freezes are free and stay active until you lift them.

When you need to apply for credit, rent an apartment, or clear a background check, you temporarily lift the freeze. By law, the bureau must lift it within one hour if you request online or by phone, or within three business days by mail. Then you put it back. Toggling it on and off is a minor hassle compared with cleaning up fraudulent accounts.

A fraud alert is a lighter option that flags your file so businesses are supposed to verify your identity before granting credit; it doesn’t block report access. An initial alert lasts one year, is free, and only requires contacting one bureau (which notifies the other two). An extended alert lasts seven years if you’ve already been a victim and filed an FTC or police report.⁴

Get an IRS Identity Protection PIN

A credit freeze doesn’t stop someone from filing a fraudulent tax return in your name and pocketing your refund before you file. The IRS Identity Protection PIN does. An IP PIN is a six-digit number known only to you and the IRS, and any return filed without it gets rejected.⁵

Anyone with an SSN or ITIN can request one as a proactive measure, even if you’ve never been a victim and even if you’re not required to file. Parents and legal guardians can request one for dependents. The fastest route is your IRS online account. If you can’t verify online and your adjusted gross income is below $84,000 (or $168,000 for married filing jointly), you can submit Form 15227 and receive the PIN by mail within four to six weeks. As a last resort, verify your identity in person at a Taxpayer Assistance Center.⁵

Lock Your SSN in E-Verify

A thief who uses your SSN to get a job creates wage records under your number, which produces tax problems that can take years to unwind. E-Verify Self Lock places a lock on your SSN inside the E-Verify system, so when an employer runs it the system flags a mismatch and the hire doesn’t go through.⁶ When you start a new job with an E-Verify employer, you log in and temporarily unlock the number. Setup takes a few minutes: create a myE-Verify account, choose three challenge questions, and activate the lock.

Protect the Physical Card and Paper Trail

Don’t carry your Social Security card in your wallet. If the wallet goes, so does the card. Store it in a fireproof safe or a locked bank safe deposit box alongside anything else that shows your full or partial number: old tax returns, benefit statements, insurance paperwork.

Thieves still fish SSNs out of trash and recycling. A cross-cut shredder handles W-2s, medical statements, and preapproved credit offers. Strip-cut shredders can be reassembled with patience, so the cross-cut matters. Many banks and community groups hold free shredding events a few times a year if you don’t own one.

Digital Habits That Matter

Don’t send your full SSN through regular email or text. Neither is encrypted end-to-end, so anyone who intercepts the message reads it in plain text. If a legitimate organization needs your number electronically, look for a secure upload portal or encrypted messaging system on their site.

Turn on multi-factor authentication for every account tied to your finances or benefits: your bank, the IRS, the SSA, your health insurance portal. A stolen password alone shouldn’t be enough to get in. Phishing emails that impersonate the IRS or SSA are the most common way people accidentally hand over an SSN. The IRS won’t initiate contact by email asking for personal information, and the SSA follows the same practice. Urgency is the tell.

Watch Your Earnings and Credit Reports

Freezes and PINs block new fraud; monitoring catches anything already in motion. Your Social Security earnings record is one of the first places unauthorized work shows up, because wages earned under your SSN post to your record. Sign in to your my Social Security account at ssa.gov once a year and compare the earnings there with your own W-2s and tax returns.⁷ The SSA sends a reminder email three months before your birthday.

For credit, the three major bureaus have permanently extended a program that lets you pull a report from each one every week for free at AnnualCreditReport.com.⁸ Through 2026, Equifax is offering six additional free reports per year on top of that. Watch for accounts you didn’t open, hard inquiries you didn’t authorize, and addresses you’ve never lived at.

Protecting a Child’s Social Security Number

Children are attractive targets because no one checks their credit for years, giving a thief a long runway. A federal law that took effect in 2018 lets parents and legal guardians place a free credit freeze on a child’s file at all three bureaus.⁹ If the bureau doesn’t already have a file, it creates one solely to freeze it; that record can’t be used for credit.

You’ll need proof of your authority as parent or guardian, such as a birth certificate. Each bureau has its own submission process, and IdentityTheft.gov lists current contact details. Parents can also request an IRS Identity Protection PIN for a dependent, which blocks fraudulent tax returns filed under the child’s SSN.⁵ Those two steps cover the most common ways a child’s number gets exploited.

If Your SSN Is Already Stolen

Speed matters. The longer a thief has unchallenged access, the more accounts they can open and the longer cleanup takes. Work through these steps in order:

Call the fraud department of any business where you know accounts were opened or compromised. Ask them to close or freeze the accounts and change all login credentials.
Place a fraud alert with any one of the three credit bureaus; it will notify the other two.⁴
File an identity theft report at IdentityTheft.gov or by calling 1-877-438-4338. The site generates a personalized recovery plan and an official Identity Theft Report you can use to dispute fraudulent accounts.¹⁰
Report the fraud to the SSA Office of the Inspector General through the online fraud reporting form at oig.ssa.gov if someone is using your SSN to collect benefits or work.¹¹
File IRS Form 14039 (Identity Theft Affidavit) online at irs.gov, by fax at 855-807-5720, or by mail if someone filed a tax return using your SSN or you received an IRS notice about income you didn’t earn.¹²
Pull free reports from all three bureaus at AnnualCreditReport.com or 1-877-322-8228 and review every account and inquiry.

Once the immediate crisis is handled, upgrade the fraud alert to a full credit freeze. A freeze provides stronger protection because it blocks report access rather than just flagging it. Some states also offer identity theft passports or registries that give you documentation to show law enforcement if you’re questioned about activity that isn’t yours.

1
U.S. Department of Justice. Disclosure of Social Security Numbers
2
Internal Revenue Service. General Instructions for Forms W-2 and W-3 (2026)
3
Financial Crimes Enforcement Network (FinCEN). ORDER Granting an Exemption for All Accounts at All Banks Subject to the Jurisdiction of the Agencies From a Customer Identification Program (CIP) Rule Requirement
4
Federal Trade Commission. Credit Freezes and Fraud Alerts
5
Internal Revenue Service. Get an Identity Protection PIN
6
E-Verify. Self Lock
7
Social Security Administration. Access Your Earnings History With my Social Security
8
Federal Trade Commission. Free Credit Reports
9
Federal Trade Commission. New Protections Available for Minors
10
Federal Trade Commission. Identity Theft Steps
11
Office of the Inspector General. Contact Us
12
Internal Revenue Service. Identity Theft Affidavit Form 14039