I gave a scammer my Social Security number. What now?

1. 1

   Stop all contact

   Hang up and block the number or email. If the scammer calls back as the police, the FTC, or Social Security to "fix" it, hang up again. Real agencies won't call out of the blue asking for your number.

2. 2

   Freeze your credit at all three bureaus

   Equifax (1-800-685-1111), Experian (1-888-397-3742), and TransUnion (1-888-909-8872). A freeze means nobody can open a new credit account in your name. It's free to place and lift, and you must contact each bureau separately.

3. 3

   Add a fraud alert, too

   Contact one bureau and it must tell the other two. An initial alert lasts up to one year. Businesses should check with you before opening an account. The FTC suggests a fraud alert even if you already have a freeze.

4. 4

   Get an IRS Identity Protection PIN

   Sign in to your IRS online account at irs.gov/ippin. The PIN has to be on any tax return filed with your number, which makes it much harder for a thief to file first.

5. 5

   Create your my Social Security account

   Go to ssa.gov/myaccount. Claiming your own account lets you review your earnings history and spot misuse, and it means a thief can't set one up in your name.

6. 6

   Report it at IdentityTheft.gov

   The FTC's IdentityTheft.gov gives you a personal recovery plan and pre-filled letters. You can also call 1-877-438-4338.

7. 7

   Pull your free credit reports

   Use AnnualCreditReport.com or call 1-877-322-8228. Look for accounts, addresses, or inquiries you don't recognize.

8. 8

   Tell your bank to watch your accounts

   Call the number on your card. Ask them to note that your Social Security number was exposed and to add extra checks before changes, new payees, or large withdrawals. Options vary by bank.

9. 9

   Watch your mail and your earnings record

   Missing bills, surprise bills, or a letter about income you didn't earn are warning signs. The SSA says someone using your number for a job can make it look like you underreported income to the IRS.

10. 10

    Report the scam itself

    File at ReportFraud.ftc.gov. If you're 60 or older, the National Elder Fraud Hotline (1-833-372-8311) can help you report and plan next steps.

What a scammer can and can't do with your Social Security number

Your Social Security number is a key that opens other doors. It works best for a thief when it's paired with your name, date of birth, and address, which scammers often already have. Here is a plain look at the risk.

• Can: Apply for new credit cards or loans in your name. A credit freeze blocks most of this.
• Can: File a fake tax return to steal your refund. An IRS IP PIN blocks this.
• Can: Use your number to get a job, which can show up as income you didn't report.
• Can: Try to get medical care or benefits in your name.
• Can't: Take money out of your existing bank accounts with the number alone. They usually need your login, card, or a bank employee they can fool. That's why the bank call matters.
• Can't: "suspend" your Social Security number or cut off your benefits. That threat is a common government impersonation script.

More about the IRS Identity Protection PIN

Anyone with a Social Security number or ITIN who can verify their identity can get one. The IRS says the fastest way is through your IRS online account. A new PIN is issued every calendar year, and if you enrolled online, the IRS won't mail it to you. You have to look it up each year before you file.

If you can't verify online, you can file Form 15227 if your income is under the IRS limit ($84,000 for individuals or $168,000 for married filing jointly, based on your last return). The IRS calls to verify you and mails the PIN in four to six weeks. You can also book an in-person appointment at a Taxpayer Assistance Center with photo ID plus one more ID.

Free recovery checklist

Get the step-by-step plan in your inbox

Email addressEmail me the checklist

The printable C.A.L.M. checklist and who to call. No sales pitch. Or open the checklist now (PDF).

Freeze or fraud alert? Do both

• Credit freeze: Blocks new credit accounts until you lift it. Free. You contact Equifax, Experian, and TransUnion one by one.
• Lifting a freeze: When you request it by phone or online, the bureau must lift it within one hour. By mail, within three business days. So a freeze won't stop you from getting a loan later.
• Fraud alert: Asks businesses to check with you before opening an account. Contact one bureau and it notifies the others. It lasts up to a year.

Can I get a new Social Security number?

Only in rare cases. The SSA will consider it after you've reported the theft, tried to fix the problems, and someone is still using your number in a way that keeps hurting you. You'll need to meet with a representative and bring proof. A lost or stolen card alone isn't enough.

The SSA also warns that a new number "won't guarantee you a fresh start." Your old records still exist, and a brand-new number can leave you with no credit history. For most people, the freeze, IP PIN, and monitoring above are the better path.

What to say if they call back

For the bigger picture on other details you may have shared, see I gave a scammer my personal information.

Questions people ask