Identity protection
What To Do If My Social Security Number Was Exposed
An exposed SSN raises the risk of new credit and tax fraud. This guide follows official U.S. steps without asking you to publish the number or hunt leak files.
What SSN exposure can lead to
IdentityTheft.gov explains the core risk in plain language: someone could try to open accounts, take out a loan, file taxes, or get a job with your number. That list is why the response is broader than changing a password. A password can be retired. A Social Security number is reused by employers, tax agencies, lenders, and benefits systems for years. You still act quickly. You just act through official channels. A notice that lists an SSN is a reason to protect credit and taxes even if nothing looks wrong yet. A notice that lists only an email is a different problem.
Confirm the notice without feeding a scam
After people search what to do if my Social Security number was exposed, impersonation attempts often increase. The script may mention the Social Security Administration, the IRS, Medicare, or the FTC. The FTC’s guidance is consistent:
The real FTC does not call to demand your SSN, threaten arrest, or ask you to move money “for protection.” If the original notice came by email, open a browser and type the company’s real domain. Match the data types named in the official notice, not the panic in a follow-up text.
- Do not give the number, a code, or money to someone who contacted you first.
- Do not use the phone number or link inside the unexpected message.
- Look up the agency or company yourself and use a contact path you already trust.
Credit first: reports, freezes, and alerts
IdentityTheft.gov puts credit work at the front of the “information lost or exposed” path.
A freeze is the stronger block on new credit. An alert is lighter and can still help. You can use both. Neither repairs an account that already exists, so review the reports.
- Get your reports at AnnualCreditReport.com, the site the FTC identifies as the authorized source for the free reports the law provides. The bureaus have also offered more frequent free online reports through that same site.
- Look for accounts, addresses, and inquiries you do not recognize.
- Place a credit freeze with Equifax, Experian, and TransUnion. The FTC says a freeze is free to place or lift, does not affect your credit score, is available to anyone, and lasts until you lift it. While it is on, lenders generally cannot open new credit in your name because they cannot see the file.
- Consider an initial fraud alert as well. Contact one bureau; it must tell the other two. An initial alert lasts one year and tells businesses to take extra steps to verify it is you.
Tax, benefits, and work records
Credit is only one door. Taxes. IdentityTheft.gov advises filing as early as you reasonably can if an SSN was exposed, and answering IRS letters through official channels. The IRS also tells people who already see tax-related identity theft to follow the letter they received, report the theft, use IdentityTheft.gov, and consider an Identity Protection PIN for the tax account. Do not add mystery W-2 income from an employer you never worked for onto a return just to make the form “balance.” Social Security account. Create or review a my Social Security account at ssa.gov by typing the address yourself. Look for earnings that are not yours. The Social Security Administration tells people facing credit problems from SSN misuse to start at IdentityTheft.gov rather than inventing a private fix. A new Social Security number is uncommon. SSA says it is not available merely because a card was lost if there is no evidence the number is being used. Jobs and benefits. Unfamiliar employment, unemployment claims, or government-benefit activity that is not yours belongs in an IdentityTheft.gov report. Depending on the situation, you may also need to contact the agency that issued the benefit, using a number from its official site.
If someone is already using the number
Exposure and identity theft are different. Exposure is the leak. Identity theft is the misuse. If you see a new credit account, a tax filing, a medical bill, or a job you did not authorize:
No consumer article can promise that every fraudulent account will vanish on a fixed date, or that a company will pay compensation. Outcomes depend on the facts. The official tools still give you a documented path.
- Report it at IdentityTheft.gov and complete the recovery plan.
- The CFPB points consumers to the same first stop, plus contact with banks and, when appropriate, local police.
- An Identity Theft Report can support an extended fraud alert, which can last seven years, and can help with disputes.
- Keep copies of notices, freeze confirmations, and letters.
What not to do with an exposed SSN
Knowing what to do if my Social Security number was exposed is mostly a sequencing problem: lock new credit, watch taxes, use federal recovery pages, and refuse the impersonators who arrive next.
- Do not paste the full number into a random “dark web” form.
- Do not buy a file that claims to contain “your” record.
- Do not pay a caller who says they can freeze the number at Social Security for a fee.
- Do not assume a paid monitoring plan replaces a freeze. Monitoring watches. A freeze blocks new credit checks.
- Do not ignore the notice because the company that lost the data is small. The number is what matters.
Practical checklist
- Verify the official notice and the data types it named.
- Do not enter the SSN into an untrusted website.
- Pull reports at AnnualCreditReport.com.
- Freeze credit at Equifax, Experian, and TransUnion.
- Add a fraud alert if you want a second layer.
- Review my Social Security earnings and IRS messages through official sites.
- File an IdentityTheft.gov report if you see misuse.
- Keep a paper or offline log of every step.
Frequently asked questions
Does an exposed SSN mean I must get a new number?
No. SSA may consider a new number only in limited cases after other fixes fail and misuse continues. A lost card alone is not enough.
Will a credit freeze stop someone from using a card I already have?
No. A freeze is aimed at new credit accounts. Watch existing cards and bank accounts separately.
Should I pay a company to “remove my SSN from the internet”?
Be skeptical of deletion guarantees. Use official freezes, official reports, and official suppression processes. Complete worldwide removal is not something a consumer guide can promise.
Sources
This guide is reviewed against official guidance. External pages may be updated by their respective owners.