How to Protect Your Social Security Number: A Free Checklist

Your Social Security number never expires, and you can't easily swap it for a new one. That makes it one of the most valuable pieces of data a thief can get. If you're wondering how to secure your Social Security number, the good news is that most of the protection is free and takes an afternoon. This checklist covers the warning signs, the locks worth setting up, and what to do if your number is already out there.

Red flags that someone wants (or is using) your SSN

Some signs show up before any damage. Others mean your number is already being misused. Watch for both.

• A call, text or email asking for your number. The FTC says the IRS, your bank and your employer won't contact you that way to ask for it.
• Someone claiming to be from Social Security with a problem or a prize. The Social Security Administration lists this as one of its four signs of a scam, along with pressure to act right now and being told to pay in a specific way.
• A "transfer" to Social Security. In a July 2026 alert, SSA warned that real companies and other agencies can't transfer your call directly to SSA or its Inspector General.
• Messages on social media. SSA says it will never ask for sensitive personal information through social media, email or text.
• Bills that stop arriving. The FTC notes this can mean someone changed your billing address.
• Charges, bills or accounts you don't recognize, including unfamiliar accounts on your credit report.
• A rejected tax return because a return was already filed under your SSN.

Your step by step checklist to lock down your number

Work through these in order. The first few take minutes; the rest are one time setups that keep working in the background.

Stop handing it out

1. Leave your Social Security card at home. Even SSA's own guidance for organizations says never to carry the card. SSA adds that in most cases a physical card isn't needed at all.
2. When a doctor's office, landlord or business asks for your SSN, ask the FTC's four questions: why do you need it, how will you protect it, can you use a different identifier, and can you use just the last four digits?
3. Never read your number to someone who called you. Hang up and call the agency or company back using a number you look up yourself.
4. Shred old tax returns, pay stubs and medical forms that show your full number once you no longer need them.

Claim your accounts before a thief does

1. Create a my Social Security account at ssa.gov/myaccount. SSA says the account lets you review your earnings record and get an alert if someone tries to change your address or direct deposit. Most people in the US sign in through Login.gov, which needs an email address, a government issued photo ID and a phone number.
2. Check your earnings history inside that account once a year. Wages you never earned can mean someone is working under your number.
3. Set up an IRS online account too, since it's the fastest way to request the IRS PIN in step 9. If you want a stronger defense for your login, our guide to protecting your online accounts in 10 minutes has more ways to harden your logins.

Add the three free locks

1. Freeze your credit at Equifax, Experian and TransUnion. A freeze stops new lenders from pulling your report, which blocks most new account fraud. Our walkthrough on how to freeze your credit has the links for each bureau.
2. Get an IRS Identity Protection PIN. According to the IRS IP PIN page, anyone with an SSN or ITIN who can verify their identity qualifies, and parents can request one for dependents. The PIN goes on your federal return, so a thief with only your SSN can't file in your name. It's valid for one calendar year, and a new one is generated each year. If you can't verify online and your adjusted gross income is under $84,000 (single) or $168,000 (married filing jointly), you can use Form 15227 and get the PIN by mail, usually within four to six weeks.
3. Turn on E-Verify Self Lock. The E-Verify Self Lock page explains that it places a lock on your SSN inside E-Verify, so an employer that runs your number gets a mismatch. You need a myE-Verify account, and you set three challenge questions. The lock stays active as long as your account is valid, so remember to unlock it before starting a job with an E-Verify employer.

Keep watching

1. Review your credit reports from all three bureaus and scan for accounts you don't know.
2. Know the limits of credit monitoring. The FTC points out that it won't alert you to tax refund fraud tied to your SSN, which is exactly why the IP PIN matters.
3. Treat breach notices seriously. If a company tells you your number was exposed, our guide on what to do after a data breach walks through the next moves.

If your Social Security number was already stolen

Move quickly, but don't panic. Most of the fixes are the same locks above, applied right away.

1. Report it at [IdentityTheft.gov](https://www.identitytheft.gov/). The FTC site builds a free personal recovery plan and creates an official report you can use with banks and creditors. Spanish speakers can use RobodeIdentidad.gov, and help in other languages is available at 877-438-4338 (press 3).
2. Freeze your credit or place a fraud alert. The FTC says an initial fraud alert is free, lasts one year, and you only need to contact one bureau because it must tell the other two.
3. Sign in to my Social Security and check your address, direct deposit and earnings record.
4. Request an IP PIN if you haven't, so a fake tax return gets rejected.
5. Report scam calls or messages that pretended to be Social Security to the SSA Office of the Inspector General at oig.ssa.gov/report.
6. Replace a lost card only if you need it. SSA says replacement cards are free, but a stolen card doesn't change your number, so the locks matter more than the plastic.

For a fuller recovery plan, see identity theft: what to do first. More guides like this live in our Tech section.

Common questions about locking your SSN

Can I lock my Social Security number for free?

Yes. There isn't one master switch, but the three pieces are all free: credit freezes at each bureau, the IRS IP PIN and E-Verify Self Lock.

Does freezing my credit lock my Social Security number?

Not entirely. A freeze blocks new credit accounts, but it doesn't stop someone from filing taxes or getting a job with your number. That's why the IP PIN and Self Lock are part of the checklist.

A final check: once the freezes, IP PIN and Self Lock are in place, put a yearly reminder in your calendar for mid-January. The IRS makes each year's IP PIN available online starting then, so you can grab your new IP PIN and review your earnings record before tax season starts.