Someone using your Social Security number (SSN) may open credit or utility accounts, obtain a job, file a tax return or use medical coverage in your name. But an exposed SSN, a breach notice or a frightening phone call does not by itself prove that any of those things happened. Look for evidence in your financial, tax, medical and Social Security records, then use the agency that handles the specific type of misuse.
If you find an unfamiliar account, debt, tax filing, employer or earnings entry, report the identity theft at IdentityTheft.gov and follow its recovery plan. Check your Social Security earnings record, contact the IRS for tax or work-related misuse, review your credit reports and reserve SSA’s Inspector General channel for fraud involving Social Security or SSI programs.
As an Amazon Associate I earn from qualifying purchases.
What Social Security identity theft means
Social Security identity theft is the misuse of personal information, including an SSN, to impersonate someone for financial, employment, tax, medical or government-benefit purposes. A criminal might use the number to apply for a loan, establish a utility account, report wages to an employer, submit a tax return, obtain medical services or alter an account.
The distinction between exposure and confirmed misuse matters. A company may tell you that your information was involved in a data breach, or you may lose an SSN card, without any evidence that a thief has used the number. Those events justify protective monitoring, but they are not proof of fraud. Confirmed misuse means you can point to an unfamiliar account, transaction, tax filing, medical record, earnings entry or other action tied to your identity.
#1 Best Overall
The Federal Trade Commission (FTC) lists common clues at IdentityTheft.gov’s warning-sign page. SSA also advises checking your Social Security Statement for wages that do not belong to you.
Common warning signs of identity theft
Credit, banking and bills
- A credit report shows an account, balance or hard inquiry you do not recognize.
- A debt collector contacts you about a debt you never incurred.
- Your bank account has an unexplained withdrawal or transfer.
- Merchants begin refusing checks even though your account should be in good standing.
- Expected bills or other mail suddenly stop arriving, which can indicate that an address was changed.
Do not assume an unfamiliar entry is fraud until you check whether it belongs to a joint account, authorized user, household member or creditor using a different business name. If you still cannot identify it, preserve the statement or report and include it in your FTC report.
Medical identity clues
- You receive a medical bill for a service, prescription or appointment you did not receive.
- A health plan denies a claim or reports coverage problems because of records that are not yours.
- A provider’s file contains a diagnosis or treatment history that does not match you.
Ask the provider or insurer for the disputed record and correction process. Medical information can affect both billing and future care, so keep copies of correspondence and explanations of benefits.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Tax and employment notices
- The IRS tells you that more than one tax return was filed for you.
- You receive a notice about income from an employer you do not know.
- Your Social Security earnings record contains wages you never earned.
An incorrect earnings entry can affect future benefit calculations as well as taxes. SSA’s FAQ, published October 17, 2022, explains how to review and report suspected SSN use at its SSN-use guidance.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
Breach notices and account alerts
A company may notify you that information was exposed in a data breach. That message is a warning to increase monitoring and secure accounts, not evidence that an account has already been opened in your name. Treat a breach notice differently from an actual unfamiliar charge or account: take protective steps in the first case and begin the full identity-theft recovery process in the second.
What to do when you see a sign
Use this order when you have concrete evidence of misuse. Keep a dated log of notices, account numbers, calls, reports and every agency reference number.
- Stop engaging with suspicious contacts. Do not reply to an unexpected call, text or email, click its link or use a phone number it supplies. Contact a bank, provider or agency through a statement, card or official website you locate independently.
- Report the identity theft to the FTC. Go to IdentityTheft.gov, answer the questions about what happened and follow the personalized recovery plan. SSA’s stolen-number guidance directs people with identity-theft concerns to the FTC: SSA’s report-a-stolen-number page.
- Check your Social Security earnings record. Review the earnings shown on your Social Security Statement. Report wages or employers that are not yours so SSA can review the record. Use the instructions in SSA’s SSN-use FAQ.
- Contact the IRS for tax or work misuse. If someone filed a return, claimed a refund or reported employment under your SSN, use the IRS contact instructions referenced by SSA’s FAQ. The IRS—not SSA—is the agency for unauthorized federal tax filings and related refunds.
- Review your credit reports. Obtain your reports through AnnualCreditReport.com, the official source referenced in SSA’s FAQ, and mark unfamiliar accounts and inquiries. Follow each bureau’s dispute and fraud process and retain copies of what you send.
- Handle each account directly. Call the bank, card issuer, lender, utility, insurer or medical provider using a verified number. Ask what documentation it needs to close or correct the account and change credentials on any related online account.
- Escalate only the right kind of SSA fraud. If the suspected conduct involves Social Security or SSI program payments, eligibility or an SSA impersonation connected to program fraud, report it to the SSA Office of the Inspector General. Ordinary identity theft merely involving an SSN belongs with the FTC, not the Inspector General.
Which agency handles which problem?
| What you found | Primary action | Why |
|---|---|---|
| Unfamiliar credit account, debt or bank activity | FTC IdentityTheft.gov, then the creditor or bank | The FTC recovery plan organizes identity-theft steps; the business can investigate and correct its account. |
| Wages or an employer that are not yours | SSA for the earnings record and IRS for employment or tax concerns | SSA maintains the earnings record; IRS handles tax and income-reporting misuse. |
| Duplicate tax return or stolen refund | IRS, using the contact route in SSA’s SSN-use FAQ | This is a tax-identity matter, even though the SSN is involved. |
| Medical bill, claim or treatment you did not receive | Medical provider or health plan, plus FTC IdentityTheft.gov | The provider or plan must correct its record and billing; the FTC report documents broader identity theft. |
| Fraud involving Social Security or SSI program benefits | SSA Office of the Inspector General | The Inspector General investigates SSA program fraud, a different issue from general identity theft. |
| Only a breach notice or lost card, with no known misuse | Secure documents and accounts; monitor records and follow SSA protective guidance | Exposure calls for precautions, but does not establish that a crime has occurred. |
SSA’s victim FAQ, published April 16, 2025, states that SSA does not handle general identity-theft cases and directs victims to the FTC: SSA’s identity-theft victim FAQ.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →How to tell an SSA scam from evidence of SSN misuse
An unsolicited caller who says your SSN is suspended, threatens arrest or loss of benefits, or demands money, a wire transfer, cash or gift cards is displaying scam behavior. The FTC-hosted SSA guidance says an SSN is not about to be suspended, SSA will not make those threats or demands, and caller ID can be spoofed: FTC’s SSA scam guidance.
Do not provide your SSN, date of birth, bank details, one-time code or identity documents to an unexpected contact. Hang up, block the number and report the scam through the channel described on the FTC page. A convincing caller ID, badge number or partial personal detail does not authenticate the caller.
“If you get a suspicious call, text, or email about a problem with your Social Security number or account, ignore it, hang up, and don’t respond!”
— Dawn Bystry, Social Security Administration, August 21, 2024, SSA prevention guidance
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
A scam message can arrive when no one has used your SSN, so do not treat the contact itself as proof of identity theft. Verify any real concern by checking your records and initiating contact with the agency through an official route.
Rank #4
What to do if your SSN was exposed or your card was lost
Secure the physical card and other documents, change passwords on affected accounts and turn on multifactor authentication where available. Ask any organization requesting your SSN why it needs the number, how it will protect it and whether another identifier is acceptable. Avoid routinely carrying the SSN card; store it securely and carry it only when necessary.
Monitor bank and card activity, credit reports, medical statements and your Social Security earnings record. Keep breach letters and account notices so you can connect a later problem to the original exposure.
A new SSN is not an automatic or first-line response. SSA says replacement or a different number is limited to specific circumstances, and a new number may not erase records connected to the old one. Review the requirements on SSA’s number-and-card page before considering that option. The stolen-number guidance at SSA.gov sets out protective steps for a lost or exposed number.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Prevention practices that reduce future risk
- Keep your SSN card, tax forms, medical paperwork and other identity documents in a secure place.
- Do not routinely carry the card or leave copies in an unattended vehicle, desk or bag.
- Ask why a business, employer or provider needs your SSN before supplying it; provide it through a secure channel only when required.
- Use a different, strong password for every important account and enable multifactor authentication.
- Review account activity and credit reports for unfamiliar transactions or inquiries.
- Check your Social Security earnings record periodically and report discrepancies promptly.
- Dispose of paper containing personal information securely; shredding is an optional household precaution, not a guarantee against identity theft.
- Ignore unexpected messages about suspended SSNs, arrests or urgent payments, and independently verify any legitimate-looking notice.
When to seek additional help
Use the FTC recovery plan when there is evidence of identity theft, and contact each affected business for account-specific correction. If the issue affects tax filing or reported employment, involve the IRS. If it concerns your Social Security earnings record, report the discrepancy to SSA. If the allegation is that someone committed fraud in a Social Security or SSI program, use SSA’s Inspector General channel. Keeping these routes separate prevents a general identity-theft case from being sent to the wrong office.
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
Recommendations and contact procedures can change. Before calling or submitting documents, verify the current instructions on the linked FTC, SSA and IRS pages rather than relying on a number or link supplied by an unsolicited caller.
Frequently Asked Questions
Does a data-breach notice mean someone is already using my SSN?
No. It means information may have been exposed. Increase monitoring and secure accounts, but look for an unfamiliar account, transaction, filing, medical record or earnings entry before treating the situation as confirmed misuse.
What is the first official report to make after finding an unfamiliar account?
Report the identity theft at IdentityTheft.gov and follow its recovery plan. Then contact the business involved and preserve the account and transaction records.
Should I report every SSN-related problem to the Social Security Inspector General?
No. The Inspector General handles suspected fraud in Social Security or SSI programs. General identity theft involving your SSN should be reported to the FTC, with SSA or the IRS handling earnings and tax issues respectively.
Can SSA automatically issue me a new Social Security number after exposure?
No. SSA limits replacement or new numbers to specific circumstances. Follow the protective guidance on SSA.gov and review eligibility before requesting a different number.
How can I verify a call claiming to be from Social Security?
Do not trust caller ID or return the caller’s number. Hang up and start a new contact through an official SSA or FTC webpage; never pay or disclose SSN details to an unsolicited caller.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
