I Gave a Scammer My Social Security Number. What Do I Do Now?
TL;DR
- If you gave a scammer your Social Security number, freeze your credit at all three bureaus first: it’s free and it stops new accounts cold.
- File at IdentityTheft.gov to get an official FTC Identity Theft Report, which unlocks a seven-year extended fraud alert and other legal rights.
- Request an IRS Identity Protection PIN so nobody can file a tax return under your Social Security number.
- Call SSA at 1-800-772-1213 to block electronic access to your Social Security record, and lock your number in E-Verify if you’re worried about employment fraud.
- Your Social Security number does not get suspended, cancelled, or deactivated, so any call telling you it has is a second scam.
You gave a scammer your Social Security number. You read it out loud on the phone, hung up, and about four seconds later your stomach dropped. Or you typed it into a form on a site that looked like the IRS. Either way you know now, and you want to know how bad it is.
Here’s the honest version. A Social Security number by itself is not a password to your bank account. It’s a key that lets someone open things in your name: credit cards, loans, phone plans, tax refunds, jobs. Almost all of that damage is preventable, and most of the prevention happens in the next hour. So let’s do the hour.
What someone can actually do with your Social Security number
The realistic list is shorter and more specific than the panic version.
They can apply for credit in your name. New cards, auto loans, store financing, buy-now-pay-later accounts. This is the most common outcome by a wide margin, and it’s the one a credit freeze shuts down completely.
They can file a tax return before you do and collect the refund. The IRS catches a lot of this, but the cleanup takes months if it lands.
They can work under your number, which means someone else’s wages get reported to the IRS and SSA in your name. Messy, and it usually surfaces a year later as a tax notice you don’t understand.
They can try to take over your Social Security account on ssa.gov, redirect benefits, or pull your earnings record. This is rarer, and there’s a direct fix for it below.
What they generally cannot do with the number alone is drain an existing bank account. That takes credentials, a phone number, or a person on the line talking you into moving money yourself. If you also gave up bank logins or moved money during the call, stop reading and call your bank’s fraud line on the number printed on your card. Our guide on what to do after losing money to a scam covers that path.
Step 1: Freeze your credit at all three bureaus
Do this before anything else. A credit freeze means nobody can open a new credit account in your name, including you, until you lift it. It’s free, it lasts until you remove it, and it does not affect your credit score. The FTC lays out the rules in its credit freezes and fraud alerts guide.
You have to do it separately at each bureau. Freezing at Experian does not freeze the other two.
Set up an account at each one, save the PIN or login somewhere you’ll actually find it later, and confirm the freeze is active before you close the tab. Fifteen minutes, tops.
One caveat worth knowing up front: if you’re about to apply for a mortgage, a car loan, or an apartment, you’ll need to temporarily lift the freeze at whichever bureau the lender pulls from. That’s a two-minute job online. It’s not a reason to skip the freeze.
Step 2: File a report at IdentityTheft.gov
IdentityTheft.gov is the FTC’s official site, and filing there generates an FTC Identity Theft Report. That document is not just paperwork. It gives you specific legal rights under federal law, including the ability to place an extended fraud alert that lasts seven years, get fraudulent accounts removed from your credit report, and stop debt collectors from chasing debts that aren’t yours.
The site also builds you a personal recovery plan based on exactly what was exposed, and it drafts the letters you’ll need to send. Free. No account required beyond an email.
If you want the extended alert, place it after you file. Contact any one of the three bureaus and that bureau is required to notify the other two.
Step 3: Get an IRS Identity Protection PIN
This is the step almost nobody takes, and it’s the one that closes the tax-refund door.
An IRS Identity Protection PIN is a six-digit number known only to you and the IRS. Once you have one, a federal return filed under your Social Security number without that PIN gets rejected. The program is open to anyone with an SSN or ITIN who can verify their identity, and you can opt out later if you decide you don’t want it.
Fastest route is through your IRS online account, in the profile section. You’ll go through identity verification, which takes a few minutes and a photo ID. The PIN regenerates every year, so make a note to grab the new one each January before you file.
Step 4: Lock down the Social Security side
Two separate things here, and they do different jobs.
Block electronic access at SSA. Call 1-800-772-1213 and ask them to block electronic access to your Social Security record. Once it’s on, nobody can view or change your information through the ssa.gov website or the automated phone system, including you. That last part is the tradeoff: if you need to check benefits or change an address later, you’ll have to call and speak to a representative or go into an office with ID. For most people who just handed their number to a stranger, that tradeoff is worth it. You can call back and remove the block whenever you want.
Lock your number in E-Verify. If your concern is someone working under your identity, Self Lock is a free feature of a myE-Verify account. It flags your SSN so that if an employer runs it through E-Verify, the case comes back as a mismatch. You unlock it yourself when you start a new job. It only covers employers who use E-Verify, so it’s a partial shield, but it costs nothing.
Three things you don’t need to do
You don’t need a new Social Security number. People ask about this constantly. SSA will issue a new number in genuinely extreme cases, but it’s rare, it’s slow, and it tends to create a fresh set of problems because your entire credit, employment, and tax history is attached to the old one. Freeze, monitor, and move on.
You don’t need to pay anyone. Every step above is free. Credit freezes, IdentityTheft.gov, the IRS PIN, the SSA block, E-Verify Self Lock. If a company is charging you a monthly fee to do these four things, you’re paying for convenience, not for anything you can’t do yourself in an hour.
You don’t need to answer the call that comes next. Within days, someone may contact you claiming to be from the SSA, the FTC, or a “fraud department,” offering to secure your number or recover your identity. That’s a second scam working from a list of people who already got hit once. The FTC has been direct about this for years: your Social Security number is never suspended. Not for suspicious activity, not for unpaid taxes, not ever. Any call that says otherwise is fake, full stop.
Government impersonators pulled about $920 million out of people in 2025, up from $789 million the year before, according to FTC data released in June 2026. Total reported fraud losses hit roughly $16 billion, the highest on record. The second call is a real and well-funded business.
If you gave up a Medicare number too
A Medicare number is worth more to a fraud ring than a credit card, because it can be billed against for months before anyone notices. Call 1-800-MEDICARE (1-800-633-4227) and report it. Ask them what they can do on your account, and whether a replacement number makes sense in your case.
Then start reading your Medicare Summary Notices, or check claims at medicare.gov, looking for visits and equipment you never received. The Senior Medicare Patrol at 877-808-2468 is a free program staffed to help with exactly this, and they’ll walk through a statement with you line by line.
If this happened to your parent
Lead with the fix. Not the post-mortem.
The instinct is to ask how they fell for it, and the answer is usually that the scripts have gotten very good, the caller ID said Social Security Administration, and the person on the phone was patient and reassuring for twenty minutes before the ask. Shame is what makes people stop telling their family things, and quiet is exactly what the second-round crew needs.
Sit down and do the four steps together in one session. Credit freeze at three bureaus, IdentityTheft.gov, IRS PIN, SSA block. Log the passwords somewhere you can both reach. Then set up their phone in the same sitting so the follow-up calls don’t land. We wrote a full walkthrough for setting up a parent’s iPhone to block scam calls and texts.
If they’re 60 or older, the DOJ National Elder Fraud Hotline at 1-833-FRAUD-11 (833-372-8311) will take the call and help with the paperwork. AARP’s Fraud Watch Helpline at 877-908-3360 talks to family members too.
Cut off the channel they used
Everything above is cleanup. The thing that stops round two is closing the door they came through, which is almost always the phone.
Turn on Silence Unknown Callers under Settings, then Apps, then Phone. (On older iOS versions the path is Settings, then Phone.) Numbers not in your contacts go straight to voicemail and still show in Recents, so a real callback from your bank isn’t lost. We covered the tradeoffs of that setting in detail here.
Turn on your carrier’s free filter: AT&T ActiveArmor, Verizon Call Filter, or T-Mobile Scam Shield. Each labels suspected fraud and can auto-block confirmed bad numbers.
For texts, iOS has Filter Unknown Senders under Settings, then Apps, then Messages. It sorts unknown senders into a separate tab without blocking them, which helps a little and misses a lot. The reasons are in this piece.
That’s where a dedicated filter earns its place. Follow-up scams rotate numbers constantly, but the wording barely changes: “Social Security,” “suspended,” “case number,” “verify your identity,” “fraud department.” Not Today filters on message content rather than sender alone, checks incoming numbers against a community database of numbers people have already reported, and can flag new phrasings with optional AI detection. A number that’s brand new to you but already burned by someone else gets stopped before it rings.
Then hold one rule, permanently: you never give out your Social Security number to someone who called you. Not to confirm it, not to verify the last four, not to prove who you are. If a real agency needs it, you can hang up and call the number on their official website. Nothing is lost by making them wait ten minutes.
Not Today is a free spam-blocking app for iPhone. We built it to catch spam before it reaches you, using keyword rules, a community database of reported numbers, and optional AI detection. No account required. Download on the App Store.