Can Someone Use Your SSN Without You Knowing?
Yes. If your Social Security number (SSN) was leaked in a data breach or stolen in a phishing attack, scammers may be able to use it without your knowledge.
A single massive data breach in 2024 leaked over 272 million Social Security numbers — the largest SSN exposure ever recorded.
Identity thieves can use your leaked SSN to open bank accounts in your name, take out credit cards and payday loans, or steal your tax refunds and Social Security benefits.
Most people aren’t eligible tochange their SSNs — which means it’s important that you look for warning signs that yours is being used without your permission, and then quickly take action.
{{show-toc}}
How To Check If Someone Is Using Your SSN
Social Security identity theft is almost impossible to spot until after criminals have already used your SSN. The more proactive you are about checking for SSN misuse (or leaks), the better.
Start by scanning recent data breaches: The safest way to scan for leaked records is by using a Dark Web monitoring service. Unlike free scanners, these tools can securely scan for your leaked SSN and other sensitive information found in data breaches and on the Dark Web.
If your SSN has been leaked, you’ll want to follow these steps to secure it as effectively as possible. It’s also important to remember that if your SSN doesn’t appear in data breaches, you’re not automatically safe. Make sure to follow these cautionary steps recommended by the Social Security Administration (SSA):
Review the earnings listed in your Social Security statement
Your Social Security statement details your earnings record and your Social Security benefits. If scammers have used your SSN to gain illegal employment or take out benefits in your name, it will show up here.
Your statement is provided by the SSA, and is available by mail or via your my Social Security account.
- Claim your online SSA account. This gives you easy access to your Social Security statement online (and prevents scammers from opening an account in your name). Sign up online at ssa.gov/myaccount. You can also print and mail in a completed Form SSA-7004 — but this can take up to 4–6 weeks.
- Look for unauthorized changes or inaccuracies. Your statement should list your name and date of birth, along with reported earnings, benefits, and taxes. Report any incorrect or unexpected information to the SSA by calling 1-800-772-1213.
Examine your credit reports for fraudulent activity
Scammers can use stolen SSNs (and other personal data) to open new accounts and credit cards, or to take out loans in their victims’ names. One of the only places you can check for this type of financial fraud is on your credit report.
- Order your free credit reports from AnnualCreditReport.com. Every American is entitled to free copies of their credit reports from all three of the major credit bureaus (Experian, Equifax, and TransUnion) each week — online or by calling 1-877-322-8228.
- Review your personal information. Scammers may change your contact information on your credit file to prevent you from receiving fraud alerts.
- Check your credit history for suspicious activity. Be especially cautious if you see any unrecognized hard inquiries, which signal that a financial institution or other credit provider has checked your accounts in anticipation of providing new credit. These inquiries can also impact your credit score.
📚 Related: How To Read a Credit Report (and Dispute Errors) →
Take note of unexpected mail and calls — especially credit offers
Sometimes, proof of identity theft can come in the form of junk mail, strange emails, or calls from debt collectors. Don’t assume these are always mistakes — they may be signs of identity theft.
- Query unfamiliar bills in your name (or someone else’s). Rather than discarding these letters, call the companies issuing them to investigate. In particular, watch out for credit offers, which typically come to your mailbox after someone has set up a new credit account or filed a credit application in your name.
- Validate alleged debts. When asked, legitimate debt collectors need to provide a validation notice that explains and proves the debt is owed. This will either get them to leave you alone, or potentially act as proof of identity theft.
- Opt out of junk mail. Visit optoutprescreen.com (which is run by the three major credit bureaus), or call 1-888-5-OPT-OUT to opt out of prescreened credit and insurance offers. You can also visit dmachoice.org to manage offers sent via direct mail.
Follow up on notices from the IRS and other government agencies
If scammers have used your SSN to create an account in your name, file a tax return, or misappropriate your health insurance, you could receive a notification from the Internal Revenue Service (IRS) or another government agency.
- Contact the IRS. You should immediately notify the IRS if you believe someone is using your SSN to gain employment, get your tax refund, or commit other scams against taxpayers. In some cases, the IRS will notify you of potential fraud first by sending an identity theft letter.
- Review your Medicare claims. Look through your online account, Medicare Summary Notice, or call 1-800-MEDICARE (1-800-633-4227), and verify all claims. If you see a fraudulent claim, submit a complaint on the official website of the U.S. Department of Health and Human Services' Office of Inspector General (OIG).
📚 Related: How To Protect Yourself Against Tax Fraud →
Regularly check to see if you’re at risk after data breaches
If your SSN is leaked in a data breach, knowing you’re at risk can give you a head start before hackers target you.
Free Dark Web scanners can help you see which accounts are at risk of being hacked — but you’ll need a dedicated identity protection provider (that sends data breach notifications) to find out if your SSN was leaked.
- Check your data exposure by using a free Dark Web scanner. Tools like HaveIBeenPwned and Aura’s free Dark Web scanner let you check if your email address, phone number, or passwords are at risk after a breach. You can also find out if any companies with which you hold an account have been compromised.
- Sign up for an SSN monitoring service. These services inform you right away that suspicious activity is taking place — allowing you to stop fraud before it causes harm. Aura's AI-powered service checks billions of data points in its monitoring process.
What To Do If Someone Is Using Your SSN
- Call the SSA at 1-800-772-1213 to block electronic access to your SSN. Once you place the block, nobody can modify your personal information with the Social Security Administration online or through the automated phone service — not even you. You’ll need to call the SSA again and verify your identity when you wish to remove the block.
- Freeze your credit with all three bureaus. A credit freeze stops thieves from using your SSN to take out loans and lines of credit or open credit cards in your name. You need to initiate a credit freeze with each of the three credit reporting agencies individually — Experian, Equifax, and TransUnion.
- Review your credit report and bank statements for instances of fraud. You'll need a record of evidence for all fraudulent activity, such as unrecognized credit card account and bank account numbers — plus unfamiliar hard inquiries and changes to your personal profile details.
- File an official identity theft report with the Federal Trade Commission (FTC). Complete an affidavit online at IdentityTheft.gov to receive a personalized recovery plan. An FTC affidavit is also required in most cases when you want to dispute fraudulent charges.
- Contact your local law enforcement. If your SSN has been used in a crime or if you know the person who used it, contact your local police department to file a police report. Bring your government-issued ID, a copy of your FTC report, and supporting evidence of the fraud.
- Submit a Social Security fraud report with the SSA's Office of the Inspector General. The SSA OIG has specialized resources and expertise to investigate Social Security-related fraud, which local police or the FTC may not have. If the identity theft affects your Social Security benefits or account, you should notify the OIG to aid the overall investigation and protect yourself against future fraud. You can submit a report online or do so by calling 1-800-269-0271.
The bottom line: Using a compromised SSN is one of the easiest ways for scammers to make you a victim of identity theft. If you think someone is using your SSN, or that it’s been leaked or stolen, act quickly to protect yourself and your family.
📚 Related: 8 Reasons Why It's Important To Have Identity Theft Protection →
SSN Monitoring Can Help You Stay Safe Against Scammers
Generally, a proactive approach is the best defense — you should never share your SSN with anyone whom you can't verify. You should also be conscious of where you store your Social Security card, and make sure that you “Self Lock” your SSN on the E-Verify website (if you’re not actively looking for work).
With massive data breaches happening every year, there’s a good chance that your SSN has already been leaked.
Aura’s digital security suite monitors and protects your SSN, personal information, and financial accounts 24/7 with three-bureau credit monitoring, Dark Web monitoring, and the industry’s fastest fraud alerts3.
In the event that you fall victim, you’ll have access to Aura’s round-the-clock White Glove Fraud Resolution support, along with $1 million in identity theft insurance coverage for every adult on your Aura plan.