Someone who has your Social Security number can open credit cards and loans in your name, file a tax return to steal your refund, get medical care or a job under your identity, collect government benefits you’re entitled to, and even hand your number to police during an arrest so the criminal record attaches to you. What someone can do with your Social Security number stretches across nearly every part of your financial and legal life, because the nine-digit number links your credit history, tax records, employment data, and federal benefits to a single identity. The Federal Trade Commission received more than 1.1 million identity theft reports in 2024, and a stolen SSN is the thread that runs through most of them.1Federal Trade Commission. New FTC Data Show a Big Jump in Reported Losses to Fraud to $12.5 Billion in 2024
Financial Fraud in Your Name
The fastest hit is new-account fraud. A thief uses your SSN to open credit cards, take out personal loans, or set up lines of credit. You often don’t learn about it until a collector calls about a debt you never took on, or you check your credit report and see accounts that aren’t yours. Unpaid balances tank your credit score, and clearing them takes months of disputes with creditors and the three credit bureaus.
Tax Refund Theft
A thief who has your SSN can file a tax return early in the season and claim a refund before you do. When you file your real return, the IRS rejects it as a duplicate. Sorting out a fraudulent filing often delays your legitimate refund for six months or longer while the IRS investigates.
Medical Identity Theft
Medical identity theft is harder to spot and, in some ways, more dangerous than credit fraud. Someone uses your SSN to receive treatment, fill prescriptions, or submit insurance claims. Their medical history gets tangled into yours, and wrong blood types, allergies, or diagnoses can end up in your chart. Those errors can drive treatment decisions in an emergency.
Federal privacy rules give you the right to ask a healthcare provider to amend incorrect information in your medical file, and the provider must act on that request within 60 days.2eCFR. 45 CFR 164.526 – Amendment of Protected Health Information Proving which records are yours and which belong to the impostor is slow work, and the provider can deny the amendment if they believe the existing record is accurate.
Working and Collecting Benefits Under Your Number
Employment fraud happens when someone takes a job using your SSN. The wages get reported to the IRS and Social Security Administration as yours, which can push you into a higher tax bracket or trigger an IRS notice about income you never earned. If unfamiliar wages appear when you check your earnings record in your my Social Security account, that’s direct evidence someone is working under your number.3Internal Revenue Service. Guide to Employment-Related Identity Theft
Benefits fraud is the same pattern in a different system. A thief can use your number to collect unemployment insurance, Social Security disability, or other public assistance, which can disqualify you from benefits you actually need.
Synthetic Identity Theft
Not every thief pretends to be you. In synthetic identity theft, a fraudster pairs your real SSN with a fake name, date of birth, or address to build a new persona from scratch. That fabricated identity slowly opens accounts and builds credit over months or years before the thief maxes everything out and disappears. Because the new accounts and inquiries don’t show up under your name, the fraud is extremely hard to detect. You may only spot it when the SSA shows earnings from an employer you’ve never heard of, or when your SSN triggers unexpected flags on a credit application.
Criminal Impersonation
Perhaps the most alarming use: someone gives your SSN during an arrest or traffic stop, and the criminal record attaches to your identity. That can produce warrant issues, background-check failures, or even a wrongful arrest for something you had nothing to do with. Undoing a criminal record left by an impostor means working with law enforcement and sometimes petitioning courts directly.
How Thieves Get Your Number in the First Place
Large-scale data breaches are the single biggest source of exposed SSNs. When a company or government agency holding your number is hacked, millions of records can end up for sale on dark web marketplaces. You don’t have to do anything wrong for this to happen, and you often won’t know until a breach notification letter arrives weeks or months later.
Phishing is the most common individual-level attack. A text, email, or phone call impersonates the IRS, your bank, or the Social Security Administration and pressures you to “verify” your number. The real SSA and IRS almost never call or email asking for your full SSN. If someone does, hang up.
Physical methods still work. Stolen mail during tax season, when W-2s and 1099s are in transit, is a classic route. So are documents pulled from trash, stolen wallets, and someone reading over your shoulder while you fill out paperwork.
What to Do If Your SSN Is Exposed
Speed matters. The faster you act after learning your number is out, the less damage a thief can do.
Place a Fraud Alert or Credit Freeze
A fraud alert tells lenders to take extra steps to verify your identity before opening new credit. An initial alert lasts one year and can be renewed. You only need to contact one of the three major bureaus, Equifax, Experian, or TransUnion, and that bureau must notify the other two. If you’ve filed an FTC identity theft report or a police report, you qualify for an extended fraud alert that lasts seven years.4Federal Trade Commission. Credit Freezes and Fraud Alerts
A credit freeze is stronger. It blocks access to your credit report entirely, so no one, including you, can open new accounts until you lift it. Freezes are free under federal law. Bureaus must place one within one business day of an online or phone request and lift it within one hour when you ask. Unlike a fraud alert, you contact each bureau separately.4Federal Trade Commission. Credit Freezes and Fraud Alerts Some bureaus also sell commercial “credit lock” products with similar features, but those are paid services rather than legal rights. For most people, the free statutory freeze is the better choice.
Report It at IdentityTheft.gov
File a report at IdentityTheft.gov, the federal government’s central resource for identity theft victims. The site generates an FTC Identity Theft Report and builds a personalized recovery plan with step-by-step checklists and pre-written letters you can send to creditors, debt collectors, and credit bureaus.5Federal Trade Commission. IdentityTheft.gov That report also works as proof of your claim when you dispute fraudulent accounts or apply for an extended fraud alert.
Handle Tax-Related Theft With the IRS
If someone has filed a return using your SSN, or the IRS sends you a notice about income you didn’t earn, file Form 14039, the Identity Theft Affidavit. The IRS assigns your case to a specialized unit that removes the fraudulent return from your records, releases any refund you’re owed, and flags your account with an identity theft indicator.6Internal Revenue Service. How IRS ID Theft Victim Assistance Works Don’t submit duplicate forms or call to check the status; that causes delays.
To block tax fraud going forward, apply for an IRS Identity Protection PIN. This six-digit number is required on your return each year, and without it no one can file using your SSN. Anyone with an SSN or ITIN can enroll through their IRS online account. Parents can also request an IP PIN for dependents.7Internal Revenue Service. Get an Identity Protection PIN
Notify the Social Security Administration
If you suspect someone is using your SSN to work, collect benefits, or defraud Social Security programs, report it to the SSA’s Office of the Inspector General at oig.ssa.gov or by calling 1-800-269-0271.8Social Security Administration. Fraud Prevention and Reporting The OIG has authority to conduct criminal investigations and make arrests.9Office of the Inspector General. Report Fraud Log into your my Social Security account at ssa.gov and review your earnings record while you’re at it.
Monitor Your Credit Reports
Federal law entitles you to a free credit report from each of the three major bureaus every 12 months, and the bureaus have permanently extended a program that lets you check all three weekly at no cost through AnnualCreditReport.com.10Federal Trade Commission. Free Credit Reports Identity theft victims with a fraud alert on file get additional free reports beyond the standard allotment. Look for accounts you don’t recognize, hard inquiries you didn’t authorize, and addresses where you’ve never lived.
File a Police Report
A police report creates an official record of the theft. Some creditors and insurance companies require one before they’ll investigate or reverse fraudulent charges. It can also help when you dispute accounts with credit bureaus and may be necessary to support an extended fraud alert. Many police departments now accept identity theft reports online.
Federal Penalties for SSN Misuse
Using someone else’s SSN is a federal crime. Under the main federal identity fraud statute, misusing another person’s identification to obtain anything of value worth $1,000 or more in a year carries up to 15 years in prison, and other forms of identity document fraud carry up to five years.11Office of the Law Revision Counsel. 18 U.S. Code 1028 – Fraud and Related Activity in Connection With Identification Documents If the theft is tied to drug trafficking or a violent crime, the maximum rises to 20 years; terrorism-related identity fraud carries up to 30.
Federal law also imposes a mandatory two-year sentence for aggravated identity theft, which is using stolen identification during any other felony. That sentence runs consecutively, meaning it’s tacked on after the punishment for the underlying crime.12Office of the Law Revision Counsel. 18 U.S. Code 1028A – Aggravated Identity Theft If the underlying felony is terrorism-related, the mandatory add-on rises to five years.