If Someone Misuses Your Social Security Number, Here's What You Ought to Act upon:
Uncovering yet another instance of a company suffering a data breach, such as the recent cyberattack presumed to have revealed the Social Security numbers (SSNs) of countless Americans, is not all that astonishing in the year 2024. At this point, it's probably reasonable to assume that a significant portion of our personal details have been disseminated someplace, and we can only hope that the wrongdoers aren't able to connect enough of it for any substantial harm. Regrettably, there's no way to ascertain for certain if your SSN will be involved until it is—say, to establish a fresh line of credit in your name.
If that happens, you must certainly respond accordingly. Here's what to do if you find yourself a victim of identity theft:
Recollect information and document everything diligently
First things first: Stay calm. If you notice something suspicious on your credit report or bank statement, endeavor to gather as much information as you can. Evaluate all of your financial statements going back a year (or further if the unlawful activities extend back further), apply for your free credit report from each of the three credit reporting agencies, and keep an eye out for any strange debt collection notices, bills, or credit offers.
If you suspect someone is misusing your Social Security number, keep a running record of everything in a note or a proper document in your desktop or secure cloud service. Record the date and time you discovered the issue(s) and jot down every interaction you have with your banks, credit lenders, credit reporting bureaus, federal agencies like the IRS, Social Security Administration (SSA), Department of Education (DOE), as well as attorneys and other experts you hire to help. Record the numbers you call, the names of the people you talk to, and a few notes about the conversation. Send copies of anything you send via certified mail and/or get fax confirmations to ensure delivery. Take screenshots of digital documents and include them in the file.
Freeze your credit
If you haven't already, contact the three major credit reporting agencies (Equifax, Experian, and TransUnion) and freeze your credit. Frankly, there's little reason for your credit to be unfrozen in 2024 given the high frequency of data breaches. Most people don't apply for new credit frequently, so the benefit of having your file frozen so that no one can establish credit without your knowledge far outweighs the minor inconvenience of having to unfreeze it when you apply for a card or loan. You don't even need to speak with anyone—simply set up an account so you can turn freezes on and off online. Credit freezes are free, and you do not need to subscribe to a paid service offered by the credit agency or third-party provider.
Note that a credit freeze will not prevent all forms of identity theft involving your SSN. Even if your credit is frozen, establish credit alerts (often offered for free through credit card issuers) and/or regularly check your credit report to identify errors quickly.
File identity theft reports
If you have evidence that someone has opened an account using your SSN or misused your identity fraudulently, file a report with the Federal Trade Commission (FTC) at identitytheft.gov. You will need to summarize your claim, provide information about specific fraudulent activity, and sign a statement. You will need this report to support any additional claims with other agencies, so save it.
You should also file a police report with your local police department (usually online) and save it to your document file so you can provide it when disputing charges with other agencies and creditors. You may need your completed FTC report to file a police report.
Finally, you can submit a report to the SSA's Office of the Inspector General, either online or by calling 1-800-269-0271.
Set up credit fraud alerts
All three credit bureaus offer one-year and extended seven-year fraud alerts on credit files, which prompt lenders to take extra measures to verify the identity of anyone applying for credit using your information. Anyone can establish an initial one-year alert, but if you are an identity theft victim and have your FTC and/or police report, you can extend this to seven years. You only need to do this with one bureau, and they will contact the other two. You can request an initial alert online, but a seven-year extended alert requires you to send documentation by mail.
Under the Fair Credit Reporting Act, you can file a dispute and/or submit a letter to the credit bureaus outlining the fraud and requesting that they remove any incorrect information on your credit report. The FTC has a template to follow. Note that they won't remove anything they've confirmed as accurate, but this claim is part of your paper trail.
Report fraudulent activity to your bank and credit issuers
If you notice charges you don't recognize on your bank account or credit card statements, report them promptly. Credit card issuers usually don't hold you responsible for transactions you didn't approve and will cancel your card and issue a new one if there has been fraud. If you suspect someone has opened credit in your name or misused your SSN, it doesn't hurt to request updated cards even if there has been no fraudulent activity. You could even transfer your accounts to a different bank as an additional precaution.
If the fraud is related to a federal student loan, you may also need to contact the Department of Education and/or the loan servicer listed on the account and follow their process to file a claim.
Besides utilizing your details for unauthorized credit facilities, crooks might employ your Social Security Number (SSN) for job-related deceit, which could create complications for you throughout tax time. Visit the SSA's mySocialSecurity site to claim your account, where you can scrutinize the income history linked with your number. You can also "lock" your SSN electronically on e-Verify, which hinders anyone from submitting your number for employment, and "establish an identity protection PIN" with the IRS. This number will modify annually and will be necessary to submit a tax return (anybody can request an IP PIN even if you haven't been a victim of identity thievery). If you've identified deceit related to your tax return, you might also need to "file Form 14039".
Remember, the IRS usually contacts individuals by mail solely, so refrain from disclosing any personal information to anyone asserting to represent any government agency through phone, text, email, or social media.
Protect your data in the future
Though SSN-related fraud isn't necessarily the consequence of lax digital etiquette—data leaks are typically due to companies mismanaging our information—it doesn't hurt to safeguard your data meticulously moving ahead. Replace your passwords (commencing with any financial accounts) and implement multi-factor authentication wherever possible. On the extreme end, you could even "alter your email address" and phone number and request new identity documents, such as a driver's license.
Additionally, inquire whenever a company demands your SSN. If it's not essential for the service you're receiving, you can deny providing it.
Can you modify your Social Security number?
It's feasible to modify your Social Security number as a victim of identity theft provided you can substantiate that you've attempted to resolve the issue but keep on experiencing the fraud. (The SSA will issue a new number in a modest number of special situations.) To achieve this, you'll need to set up an in-person meeting at your local Social Security office. You will also require to present evidence, including a statement regarding the theft, a police report, and documentation confirming your name, age, nationality, and current SSN. Bear in mind that this should likely be your last recourse, as modifying your SSN carries some notable downsides—at the very least, you'll have to put in a considerable amount of effort to ensure you update it everywhere, and you could potentially witness adverse effects on your credit history.
If you discover suspicious activities related to your Social Security number, such as unauthorized credit card transactions or job applications, make sure to record all the details in a secure document or note. This includes the date and time of discovery, interactions with banks, credit lenders, credit reporting bureaus, federal agencies, attorneys, and other experts. Additionally, monitoring your credit report for any signs of money-related identity theft is crucial, especially after a data breach like the one mentioned, where Social Security numbers might have been exposed.
