Table of Contents
Why Your Child Is a Prime Identity Theft Target
Children's clean credit histories make them ideal identity theft targets. Learn how to find out if your child's SSN is already compromised and how to freeze their credit.
Imagine your daughter turns 18, applies for her first college loan, and discovers she has a credit score in the low 400s. She’s never borrowed money in her life. Someone else has—using her Social Security number for the past six years. By the time it surfaces, there’s a maxed-out credit card, an apartment lease with thousands in unpaid rent, and two utility accounts in collections—all in her name. Child identity theft affects an estimated 1.25 million American children each year, according to a Javelin Strategy & Research study, and it goes undetected on average for over six years. Why so long? Because children don’t check their credit reports. Neither do most parents.
Key Takeaways
- Children are preferred targets because their SSNs are “clean”—no existing credit history means fraud can run for years undetected
- Child identity theft goes undetected an average of six or more years, often discovered only when the child tries to open their first bank account or apply for student loans
- A child credit freeze at all three bureaus (Equifax, Experian, TransUnion) is free, takes about 30 minutes, and is the only guaranteed prevention method
- School data breaches, medical records, and family members are the three most common sources of a child’s SSN exposure
- Victims spend an average of 200 hours resolving fraudulent accounts—prevention is categorically better than recovery
Why Children Are the Perfect Identity Theft Target
A child’s SSN is uniquely valuable to criminals. Here’s why: the number exists, it’s valid, and it has no credit history attached to it. This means a criminal can use it to open lines of credit, take out loans, sign leases, and even file fraudulent tax returns—and there is no existing credit record to create inconsistencies that would trigger fraud alerts. Everything looks clean because it is new.
Adult identity theft often triggers automated detection because the fraud conflicts with established patterns: an unusual purchase in a different city, a new account opened far from home. With a child’s SSN, there are no patterns to conflict with. The thief has years to operate before anyone looks.
The FTC reports that child identity theft accounts for approximately 5% of all identity theft complaints—a number that is almost certainly an undercount, since most cases go unreported precisely because they’re undiscovered. The Identity Theft Resource Center found that in family-related identity theft cases (where a family member used a child’s identity), the median time to detection was over seven years.
Where Children’s Information Gets Stolen
School data breaches: Schools collect an extraordinary amount of personal information—SSNs (often required for free/reduced lunch applications), home addresses, parent financial information, and more. Schools are frequent targets because their cybersecurity infrastructure is often underfunded. The K-12 Security Information Exchange documented 1,619 cyber incidents at US schools between 2016 and 2022.
Medical records: Pediatric medical records contain SSNs and are a high-value target. A medical record sells for $250–$1,000 on dark web markets—significantly more than financial account credentials—because it contains everything needed to commit multiple types of fraud.
Tax-related theft: The IRS processes tax returns based on SSNs. Criminals file fraudulent returns claiming refunds before the legitimate family files. This is often how parents first discover their child’s SSN is compromised.
Family member theft (synthetic identity fraud): The Consumer Financial Protection Bureau (CFPB) notes that a significant proportion of child identity theft involves a family member—a parent, older sibling, or other relative who uses the child’s clean SSN because their own credit is too damaged. This is particularly difficult to detect and address.
Data breaches of consumer services: Any business that collects SSNs can be breached. In 2023 alone, the Identity Theft Resource Center tracked 3,205 data breach events affecting over 350 million records.
How to Find Out If Your Child’s Identity Is Already Compromised
Step 1: Check for an Existing Credit File
Children should not have a credit report. If one exists, it’s a sign of fraud.
- Equifax: Visit equifax.com or call 1-800-685-1111. Request a manual search for a credit file under your child’s SSN.
- Experian: Visit experian.com or call 1-888-397-3742. They have a specific “Minor’s Credit Report” process.
- TransUnion: Visit transunion.com or call 1-800-916-8800. Request a credit file inquiry for a minor.
If any bureau finds a credit file in your child’s name, request the full report and dispute every account. The Fair Credit Reporting Act (FCRA) gives you the right to dispute fraudulent accounts.
Step 2: Check with the IRS
Contact the IRS to request whether a tax return has been filed using your child’s SSN. Call 1-800-908-4490. If a return was filed before yours, you’ll need to file a paper return and include Form 14039 (Identity Theft Affidavit).
Step 3: Check for Utility and Rental History
The credit bureaus don’t capture everything. Utility companies and rental agencies use separate reporting services. You can check LexisNexis (a data aggregator) for a broader view of what information exists under your child’s SSN by submitting a consumer disclosure request.
How to Freeze Your Child’s Credit
A credit freeze—also called a security freeze—prevents anyone from opening new credit using your child’s SSN. It does not affect any existing accounts. It’s free at all three bureaus. It can be lifted temporarily if your child ever legitimately needs credit. It is the single most effective protection available.
| Bureau | Process | What You Need |
|---|---|---|
| Equifax | Mail or in-person only for minors | SSN, birth certificate, your ID, proof of address |
| Experian | Mail for minors under 16; online after 16 | SSN, birth certificate, your ID |
| TransUnion | Mail or online portal for protected minors | SSN, birth certificate, your ID, your SSN |
| ChexSystems | SSN, birth certificate, your ID |
ChexSystems is often overlooked—it’s the system banks use when you open a checking or savings account. Freezing there as well closes another potential attack surface.
Allow 3–5 business days for freeze processing. Keep the PINs you receive; you’ll need them to temporarily lift the freeze when your child is old enough to open legitimate accounts.
What to Do If Your Child’s Identity Has Already Been Stolen
Recovery is possible but time-consuming. Here’s the sequence:
- File an FTC identity theft report at identitytheft.gov. This generates a personalized recovery plan and an official report you’ll need for disputes.
- File a police report with your local department. Some creditors and government agencies require this.
- Place fraud alerts at all three credit bureaus. An initial fraud alert lasts one year and requires creditors to verify identity before extending credit.
- Dispute fraudulent accounts in writing with each credit bureau and each creditor. Send letters via certified mail, return receipt requested. Include your FTC report and police report as documentation.
- Contact the IRS if tax fraud is involved. File Form 14039 and request an Identity Protection PIN (IP PIN) for your child.
- Contact your state’s attorney general if a family member is involved. Familial child identity theft may require a restraining order or other legal intervention.
Recovery typically takes 6–18 months and several hundred hours of documentation and follow-up. This is why prevention—specifically the credit freeze—is so important.
What to Watch For Over 3 Months
- Month 1: Freeze your child’s credit at all four agencies (Equifax, Experian, TransUnion, ChexSystems). This is the single highest-impact action you can take. Document the freeze PINs in a secure location.
- Month 2: Request a manual check for existing credit files at all three bureaus. If any bureau returns a report, begin the dispute process immediately.
- Month 3: Check whether your child’s SSN appears in any known data breaches. Tools like Have I Been Pwned (haveibeenpwned.com) can check email addresses; for SSNs, the Identity Theft Resource Center (idtheftcenter.org) maintains breach records and can advise.
Also stay alert to: unexpected mail addressed to your child from financial institutions, collection agency calls mentioning your child’s name, or IRS notices about a return filed under your child’s SSN.
Frequently Asked Questions
At what age should I freeze my child’s credit?
As soon as possible, regardless of age. The younger the child, the more years a criminal has to exploit an unprotected SSN. The Freeze is free and has no downside for children—they won’t need credit for many years, and you can lift it when they’re ready.
Will a credit freeze hurt my child when they need to open their first bank account?
No, if you also freeze ChexSystems (which banks use). Standard credit bureaus are used for loans and credit cards, not checking/savings accounts—but ChexSystems is. Freeze both. When your child is ready, you can lift each freeze temporarily with your PIN.
Can I freeze my child’s credit online?
For children under 16, Equifax and Experian require a mail process because they need physical documentation. TransUnion has an online option for parents of protected minors. After a child turns 16, they can typically handle this themselves online.
Is child identity theft covered by homeowner’s or renter’s insurance?
Some homeowner’s and renter’s insurance policies include identity theft coverage as an endorsement. Read your policy carefully. Coverage typically reimburses expenses related to recovery (notary fees, mailing costs) rather than the fraudulent debt itself.
Can identity thieves use a child’s SSN to get a job?
Yes. This is called synthetic identity fraud for employment purposes. Some thieves use a child’s SSN to establish work history, claim Social Security credits, or evade legal status checks. This can create tax complications that surface only when the child reaches adulthood.
About the author
Ricky Flores is the founder of HiWave Makers and an electrical engineer with 15+ years of experience building consumer technology at Apple, Samsung, and Texas Instruments. He writes about how kids learn to build, think, and create in a tech-saturated world. Read more at hiwavemakers.com.
Sources
- Javelin Strategy & Research. Child Identity Fraud Study. javelinstrategy.com. https://javelinstrategy.com/research/2021-child-identity-fraud-study
- Federal Trade Commission. Child Identity Theft. consumer.ftc.gov. https://consumer.ftc.gov/articles/child-identity-theft
- Consumer Financial Protection Bureau (CFPB). Protecting Your Child’s Identity. consumerfinance.gov. https://www.consumerfinance.gov/consumer-tools/identity-theft/
- Identity Theft Resource Center. 2023 Annual Data Breach Report. idtheftcenter.org. https://www.idtheftcenter.org/publication/2023-annual-data-breach-report/
- K-12 Security Information Exchange. State of K-12 Cybersecurity Year in Review 2022. k12six.org. https://www.k12six.org/resources
- Internal Revenue Service. Identity Theft and Your Child’s Social Security Number. irs.gov. https://www.irs.gov/identity-theft-fraud-scams/identity-theft-and-your-childs-social-security-number
- Fair Credit Reporting Act (FCRA). 15 U.S.C. § 1681 et seq. https://www.ftc.gov/legal-library/browse/statutes/fair-credit-reporting-act
