Stop contact and do not pay the person to delete, protect, or replace your Social Security number. Save the message, website, email, phone number, and any form you submitted. Write down exactly what else you disclosed — birth date, address, driver’s license, bank details, passwords, or identity-document images — because each item changes the recovery steps.
An exposed SSN is serious, but it is not proof that an account has already been opened. Your immediate job is to make new-account fraud harder, secure accounts the scammer could use to impersonate you, and watch for actual misuse. IdentityTheft.gov provides a situation-specific plan, while SSA directs people with stolen or exposed numbers to FTC identity-theft resources.
Freeze your credit with all three bureaus
Place a security freeze separately with Equifax, Experian, and TransUnion using contact information you find from IdentityTheft.gov or the bureaus’ official sites. A freeze restricts access by potential new creditors; contacting only one bureau does not freeze the other two. Store each confirmation or PIN somewhere secure and outside the compromised email account.
A freeze is prevention, not cleanup. It does not remove fraudulent accounts that already exist and it does not stop every kind of identity misuse. Review your credit reports for names, addresses, inquiries, and accounts you do not recognize, and dispute specific errors through the recovery steps IdentityTheft.gov gives you.
Match the FTC step to exposure or actual misuse
If the SSN was shared or exposed but you have not found misuse, SSA says you do not need to file an FTC Identity Theft Report solely for the exposure. You should still follow the lost-or-stolen-information steps at IdentityTheft.gov, including checking, freezing, and monitoring your credit. Keep notes in case suspicious activity appears later.
If someone used your identity to open an account, make a purchase, obtain a service, or claim a benefit, report the identity theft at IdentityTheft.gov. The site can create an FTC Identity Theft Report and recovery plan based on what happened. Give copies only to organizations that need them, and keep originals with your timeline and supporting records.
Protect Social Security, email, and financial access
Create or review your personal my Social Security account through ssa.gov and look for information you do not recognize. SSA describes optional eServices and direct-deposit fraud-prevention blocks for higher-risk situations; those blocks can also restrict your own access and changes, so discuss the consequences with SSA through an official channel before adding one.
Change any password you gave the scammer, along with reused passwords, starting with email and financial accounts. End unfamiliar sessions, verify recovery addresses and phone numbers, and enable multi-factor authentication. Contact banks or card issuers about unrecognized activity immediately. If the incident involves impersonation of SSA or misuse of Social Security programs, report it to SSA’s Office of the Inspector General.
Watch for misuse and follow-up scams
Review credit reports, bank and card statements, benefits records, collection notices, and unexpected mail over time. Do not ignore a bill or denial for an account you never opened; contact the organization through a verified number, document the dispute, and add the incident to your IdentityTheft.gov recovery plan. Keep a dated log of calls, letters, report numbers, and deadlines.
Expect follow-up contact from people claiming to be investigators, credit-repair experts, or government agents. Verify every caller independently and never move money to a so-called protected account. No private service can make an exposed SSN secret again, and an upfront fee does not prove someone can repair identity theft faster than the official, free process.
Frequently asked questions
Should I freeze my credit after sharing my Social Security number?
A security freeze with each of Equifax, Experian, and TransUnion can make new-account fraud harder. A freeze does not remove existing fraudulent accounts or prevent every form of identity misuse.
Does sharing my SSN mean identity theft has already happened?
No. Exposure is serious, but it is not proof of misuse. Check your credit and important accounts, secure access, and use IdentityTheft.gov if you discover that someone used your identity.
Can I get a new Social Security number?
SSA issues replacement numbers only in limited circumstances, and a new number does not erase the old record or automatically solve identity theft. Start with SSA and IdentityTheft.gov guidance rather than a private service.
Sources and further help
Reviewed
