Disclosure: The article may contain affiliate links from partners who may compensate us. However, the words, opinions, and reviews are our own. Learn how we make money to support our mission.
A stolen Social Security number can feel scary because it connects to taxes, credit, benefits, employment records, and identity verification. But the right response depends on one important question: was your number only exposed, or has someone already used it?
If your Social Security number was exposed in a data breach or lost document, you may need to monitor and protect your credit. If someone used it to open accounts, file taxes, or make purchases, you need to report identity theft and begin recovery steps.
In this guide, you’ll learn what to do if your Social Security number was stolen, exposed, or misused.
Not every stolen or exposed Social Security number means identity theft has happened. The response is different if your number was only exposed versus actually used.
The Social Security Administration says that if someone used your SSN to open a new account or make a purchase, you should report it at IdentityTheft.gov and get an FTC Identity Theft Report and recovery plan.
What to do:
Start by asking:
If your SSN was exposed but not misused, focus on prevention. If it was misused, move into recovery.
👉 Compare: Identity Protection Tools in the Marketplace →
If your Social Security number is stolen, a credit freeze is one of the strongest steps you can take. It limits access to your credit report, making it harder for someone to open new credit in your name.
A freeze does not hurt your credit score and does not stop you from using current credit cards or loans. The FTC says credit freezes and fraud alerts can help protect against identity theft by making it harder for scammers to open new credit accounts in your name.
What to do:
Freeze your credit with each bureau separately:
Do not freeze only one. A lender may check any of the three. Save your confirmation details so you can temporarily lift the freeze when you need to apply for credit.
Smile Money Tip: A stolen SSN does not mean you are powerless. A credit freeze helps close one of the biggest doors identity thieves try to use.
A fraud alert tells lenders to take extra steps to verify your identity before opening new credit. It is helpful if you think someone may try to use your information.
You only need to contact one credit bureau to place an initial fraud alert. That bureau must notify the other two. Fraud alerts and freezes are different: a freeze restricts access, while an alert asks for extra verification.
What to do:
Place a fraud alert if:
If identity theft already happened, file at IdentityTheft.gov and consider an extended fraud alert.
👉 Related: How to Place a Fraud Alert on Your Credit Report →
Your credit reports can show whether someone used your SSN to apply for credit. Your bank and card accounts can show whether existing accounts were accessed.
What to do:
If you find accounts you did not open, dispute them with the credit bureaus and contact the company that opened the account.
A stolen SSN can be used to file a fraudulent tax return. You may not know this happened until your tax return is rejected or you receive an IRS notice about income, filing, or refund activity you do not recognize.
The IRS says an Identity Protection PIN, or IP PIN, is a six-digit number that helps prevent someone else from filing a federal tax return using your SSN or ITIN. The IP PIN is known only to you and the IRS.
What to do:
An IP PIN is especially useful if your SSN was stolen or you are worried about tax-related identity theft.
If someone used your SSN to open an account, make purchases, file taxes, or commit fraud, report identity theft.
IdentityTheft.gov provides step-by-step advice to help limit damage, report identity theft, and fix your credit. USA.gov also directs identity theft victims to report to the FTC at IdentityTheft.gov or by calling 1-877-438-4338, contact credit reporting agencies, and notify fraud departments at banks and other accounts.
What to do:
👉 Related: How to Dispute Fraudulent Accounts on Your Credit Report →
If suspicious activity continues:
The SSA directs people to report a stolen Social Security number to the FTC if they think they are a victim of identity theft.
In rare cases, SSA may assign a new number, but it is not a simple fix and does not erase old records. Most people should first focus on credit freezes, fraud alerts, disputes, and identity theft recovery.
If your SSN was only exposed, you may not need a full identity theft report yet. But you should freeze your credit, monitor accounts, and watch for signs of misuse.
Respond to IRS notices, consider requesting an IP PIN, and follow IRS identity theft guidance. An IP PIN helps prevent someone else from filing a return using your SSN.
A stolen Social Security number is serious, but it does not mean your identity is ruined. The key is to act early, freeze your credit, monitor for misuse, and report identity theft if someone uses your information.
Start with the risk you know, then protect the doors someone might try next.
Next Steps:
Share the knowledge: