What should I do if my Social Security card is stolen or identity theft is suspected?

1. Report first to the FTC and build a recovery plan

The Federal Trade Commission (FTC) is the central portal for identity-theft victims: file a report at IdentityTheft.gov so the FTC can generate an Identity Theft Report and a personalized recovery plan that explains next steps and provides documentation to give to banks, creditors, and credit bureaus ^{[1] [4]}. The Social Security Administration’s guidance explicitly directs people who think they are victims of identity theft to report a stolen SSN to the FTC, underlining that the FTC report is the foundational record ^{[2] [6]}.

2. Notify the Social Security Administration and its Inspector General

Contact the Social Security Administration (SSA) when wages, benefits, or account records suggest unauthorized use of an SSN, and reach out to the SSA Office of the Inspector General (OIG) for suspected fraud—Mass.gov points to the OIG fraud hotline (1-800-269-0271) and recommends following up in writing and asking about eligibility to change an SSN in extreme cases ^{[7] [8]}. The SSA also publishes guides and blog posts directing victims to report suspected identity theft to the FTC or 1-877-IDTHEFT and to use SSA publications on protecting SSNs ^{[3] [9]}.

3. Alert the IRS and protect tax filings

Because thieves often use stolen SSNs to file fraudulent tax returns or report phantom wages, the IRS recommends filing early when possible and submitting Form 14039, the Identity Theft Affidavit, to flag tax records and stop refund fraud ^{[10] [11]}. The IRS provides an Identity Theft Central with steps for employment-related identity theft and instructions on when to contact the SSA about suspicious wage postings ^{[11] [8]}.

4. Freeze or place fraud alerts on credit reports and check bureaus

Immediate credit controls reduce the chance thieves open new accounts: contact Equifax, Experian, and TransUnion to place an initial fraud alert or freeze credit files—an initial alert lasts one year but can be extended to seven years with documentation such as an FTC report or police report ^[5]. Obtain current credit reports and monitor them frequently for new accounts, inquiries, or unexpected changes; victims are entitled to free reports and should review them carefully ^{[7] [5]}.

5. Contact financial institutions, creditors and any agency that shows fraud

Notify banks, credit card companies, phone carriers, and any creditor where fraudulent accounts were opened; request account closures, dispute charges, and demand written confirmation of steps taken ^{[10] [5]}. Keep copies of all communications and documentation—the FTC report, police reports, and letters from companies are essential when disputing fraudulent debt and clearing records ^[4].

6. Consider filing a police report and replacing the card only if necessary

Filing a local police report can be useful when identity theft leads to financial loss or if a creditor requires a police report to resolve disputes; bring the FTC Identity Theft Report and supporting ID when filing ^[4]. The SSA allows replacement of lost or stolen cards when needed for work or benefits, but changing an SSN is rare and typically reserved for serious, documented cases—ask the SSA OIG about eligibility if compromised identity continues to cause harm ^{[6] [7]}.

7. Monitor, document, and take preventative measures

Ongoing vigilance matters: subscribe to credit or identity monitoring if possible, check Social Security earnings records for unrecognized wages, and secure personal documents (SS card, tax records) in a safe place; the SSA and USA.gov both advise safeguarding personal information and using secure .gov sites when reporting ^{[3] [12]}. If uncertainty remains about what to do next, follow the FTC recovery plan and the SSA’s published resources that outline proactive steps and contacts ^{[1] [9]}.