Protecting Your Child's Social Security Number: A Proactive Identity Theft Guide
Table of Contents

Protecting Your Child's Social Security Number: A Proactive Identity Theft Guide

Children's SSNs are stolen years before victims discover it. Learn how to check if your child's SSN has been used, place free credit freezes at all 3 bureaus, and respond to fraud.

A young woman applies for her first credit card at 19. The application is denied. She’s never had credit, so she requests her credit report to understand why. What she finds is a 12-year credit file — full of accounts she never opened, addresses she never lived at, and debt she never incurred. Someone had been using her Social Security number since she was 7 years old. The Identity Theft Resource Center estimates that child identity theft goes undetected for an average of 7 years. In many cases, the breach that exposed the SSN happened at a school, hospital, or government database — places parents trusted and had no visibility into. The protection that works — a credit freeze — is free, takes 20 minutes, and can be placed before any theft occurs. Most parents have never heard of it.

Key Takeaways

  • Children’s SSNs are valued by identity thieves because they come with no existing credit history and won’t be checked for years
  • Child identity theft is detected on average 7 years after it begins, typically when the child tries to open their first credit account
  • A credit freeze (security freeze) on a minor’s credit file is free, reversible, and prevents all new credit from being opened
  • Freezes must be placed at all three bureaus separately: Equifax, Experian, and TransUnion
  • Common exposure sources: school data breaches, medical records, tax fraud, and COPPA-violating apps that collected SSNs
  • If fraud is found: dispute accounts with bureaus, report to FTC at identitytheft.gov, and file a police report

Why Children’s Social Security Numbers Are Valuable

An adult’s SSN typically comes with an existing credit file — active accounts, credit score, payment history. A thief using an adult’s SSN inherits that history, including any negative marks. A child’s SSN is a blank slate.

Identity thieves use children’s SSNs for:

Synthetic identity fraud: Combining a child’s real SSN with a fabricated name and birthdate to create a new identity that can build credit over years. Because the SSN belongs to a real person (the child) and the credit bureaus don’t cross-reference SSNs against birth certificate records for age, fraudulent accounts can be opened and run for years.

Tax fraud: Filing fraudulent tax returns claiming refunds using a child’s SSN. The IRS began seeing this pattern in the early 2010s and has taken steps to reduce it, but it remains a significant problem.

Employment fraud: Using a child’s SSN to work (typically for an adult who cannot pass an employment background check) — creating tax liability in the child’s name.

Benefits fraud: Applying for government benefits (Medicaid, food assistance, housing) using a child’s SSN, creating records that can complicate the child’s eligibility for those programs as an adult.

How Children’s SSNs Get Exposed

Understanding the source of exposure is important for both prevention and response. The most common breach pathways:

SourceWhy it’s high riskPrevention
School data breachesSchools collect SSNs for enrollment, federal programs, lunch subsidiesAsk your school district what data they collect and their breach notification policy
Medical recordsHospitals and pediatricians use SSNs for billing and insurance verificationRequest records after visits; monitor EOB (explanation of benefits) statements
Tax returnsJoint returns list dependent children with SSNs; paper returns are especially vulnerableFile early each year; consider e-filing to reduce paper exposure
Apps violating COPPASome apps collected SSNs in enrollment flows, violating COPPACheck app privacy policies; FTC COPPA complaints are searchable
Family membersA significant percentage of child identity theft is committed by family membersNot pleasant, but worth knowing — access to a child’s SSN card increases risk
Data broker aggregatesData brokers compile SSNs from public recordsOpt-out requests at major data brokers (Spokeo, BeenVerified, etc.)
Landlord / rental applicationsSome landlords collect SSNs for background checks on all household membersAsk specifically if children’s SSNs are required; they typically aren’t

How to Check If Your Child’s SSN Has Been Used

Step 1: Request a credit file from all three bureaus.

For children under 16, credit bureaus maintain what’s called an “inquiry-only” file if any credit activity has occurred. You can request to check whether a file exists — and what’s in it.

Equifax: Call 1-888-298-0045 or mail a request to Equifax Minor Credit Freeze, PO Box 105139, Atlanta, GA 30348. Request a manual search of your child’s SSN.

Experian: Call 1-888-397-3742. Ask specifically for a “minor’s credit report” check. If a file exists, they’ll tell you.

TransUnion: Call 1-800-916-8800 and request a manual review of any file associated with your child’s SSN.

Step 2: Check the Social Security Administration’s earnings record.

If someone has used your child’s SSN for employment, those wages appear in the SSA’s earnings records. Create or log in to a my Social Security account at ssa.gov/myaccount for your child (you can create one for a child using their SSN) and review the earnings history. Any wages you don’t recognize indicate SSN misuse for employment.

Step 3: Check for IRS issues.

If someone filed a fraudulent tax return using your child’s SSN, the IRS will reject your legitimate return when you try to claim the child as a dependent. If this happens, file IRS Form 14039 (Identity Theft Affidavit) and request an IP PIN (Identity Protection PIN) for your child from the IRS at irs.gov/ippin.

How to Place a Credit Freeze on a Minor’s Credit File

A credit freeze (also called a security freeze) prevents any new credit from being opened in your child’s name. It has no effect on existing accounts (there are none for most children). It’s free to place and free to lift. It does not affect the child’s future ability to open credit — you simply request a lift when they’re ready.

What you’ll need for each bureau (same documentation for all three):

  • Your government-issued ID (driver’s license or passport)
  • Proof of your address (utility bill, bank statement, or pay stub dated within 90 days)
  • Child’s Social Security card or a document containing the full SSN
  • Child’s birth certificate (to prove parental relationship)
  • Child’s government-issued ID if they have one (school ID, passport)

Each bureau may request these as mailed copies — they do not accept the originals, and you should not mail originals. Make photocopies.

Equifax

Online: equifax.com/personal/child-credit-freeze/ — This is the most streamlined online process of the three bureaus.

By mail: Mail to Equifax Security Freeze, PO Box 105139, Atlanta, GA 30348-5139

Include a signed letter requesting a security freeze for your minor child, along with all documentation above. Equifax will mail a PIN for the freeze within 3 business days of processing.

Experian

Online: experian.com/help/child-identity-protection.html — Experian’s process starts online and may require mail follow-up with documentation.

By mail: Send to Experian, PO Box 9554, Allen, TX 75013. Mark the envelope “Security Freeze — Minor.”

By phone: 1-888-397-3742

Experian will mail a confirmation within 3 business days.

TransUnion

Online: transunion.com/credit-freeze/child-identity-theft

By mail: TransUnion, PO Box 380, Woodlyn, PA 19094

By phone: 1-800-916-8800

TransUnion will provide a PIN confirmation. Store this PIN with your other important documents.

After all three are placed: You’ll receive confirmation letters from each bureau. Store these in a secure, physical location — ideally with your child’s birth certificate and Social Security card. The PINs in these letters are required to lift the freeze later.

If You Find Fraudulent Activity

Step 1: File a report with the FTC at identitytheft.gov/ChildIdentityTheft. The FTC’s site generates a personalized recovery plan based on what was found.

Step 2: File a police report with your local police department. This is often required by credit bureaus and creditors when disputing fraudulent accounts.

Step 3: Send dispute letters to each credit bureau that shows fraudulent accounts. Attach your police report, the FTC identity theft report, proof of the child’s age, and documentation of why you didn’t open the account. Under the Fair Credit Reporting Act (FCRA), bureaus must investigate and respond within 30 days.

Step 4: Contact the creditors directly for each fraudulent account. Request that accounts opened fraudulently be closed and that any negative information be removed from the credit file. Send all correspondence by certified mail with return receipt.

Step 5: If the fraudulent activity involved a company collecting your child’s SSN in violation of COPPA, file a complaint with the FTC’s COPPA enforcement team.

For protecting your child’s online data more broadly, read our guide to what happens to kids’ data when an app shuts down. For a complete foundation in online security practices, see our overview of cybersecurity and digital literacy for kids. Our guide on kids’ online privacy and COPPA explains what data companies are legally allowed to collect.

What to Watch For Over the Next 3 Months

This week: Place credit freezes at all three bureaus for all children in your household. Mail the documentation. This takes one afternoon and provides permanent protection until you choose to lift it.

Month 1: Request a manual credit file check from all three bureaus to verify no file exists (or to review any file that does exist). If you find activity, begin the FTC dispute process.

Month 2: Check your child’s SSA earnings record if they are 12 or older — old enough that someone might plausibly use their SSN for employment. Create a my Social Security account.

Month 3: Inventory where your child’s SSN has been shared: school district, pediatrician, orthodontist, tax returns, any apps. For each, understand their data retention and breach notification policies. This inventory helps you respond faster if a breach notification arrives.

Ongoing: File your taxes as early as possible each year to prevent someone else from filing a fraudulent return using your child’s SSN first. The IRS’s IP PIN program is now available to all taxpayers and is worth enabling for children listed as dependents.

Frequently Asked Questions

My child doesn’t have credit — can they still have a credit file?

Yes. A credit file can be created by a single inquiry or account opening, even unauthorized. If a creditor ran a credit check using your child’s SSN, a file was created. This is why requesting a manual bureau check is important — you may find a file even though no legitimate credit has ever been opened.

What does it mean to “lift” a credit freeze when my child turns 18?

When your child is ready to open their first credit card, apartment application, or student loan, you request a “lift” of the freeze using the PIN you received when the freeze was placed. Most bureaus allow temporary lifts (for a specific creditor or time window) or permanent removal. The process takes 1–3 business days. If you’ve lost the PIN, each bureau has a PIN recovery process, but it may take longer.

Do I need to place a credit freeze at all three bureaus?

Yes. Each bureau maintains independent credit files and does not share freeze status with the others. A freeze at Equifax does not freeze the Experian or TransUnion file. A lender can use any bureau for a credit check — if only one or two are frozen, a fraudulent account can still be opened using the unfrozen bureau.

Is there a cost to freezing a child’s credit?

No. Under the Economic Growth, Regulatory Relief, and Consumer Protection Act (2018), credit freezes for all consumers — including minors — are free at all three major bureaus. This right is permanent. Any service charging you to place a credit freeze is either a scam or offering premium add-ons beyond the freeze itself.


About the author

Ricky Flores is the founder of HiWave Makers and an electrical engineer with 15+ years of experience building consumer technology at Apple, Samsung, and Texas Instruments. He writes about how kids learn to build, think, and create in a tech-saturated world. Read more at hiwavemakers.com.


Sources

  1. Identity Theft Resource Center. (2024). 2023 Annual Data Breach Report. https://www.idtheftcenter.org/publication/2023-annual-data-breach-report/
  2. Federal Trade Commission. (2024). Child Identity Theft. https://consumer.ftc.gov/articles/child-identity-theft
  3. Federal Trade Commission. (2024). IdentityTheft.gov Child Identity Theft Recovery. https://www.identitytheft.gov/ChildIdentityTheft
  4. Social Security Administration. (2024). my Social Security — Earnings Record. https://www.ssa.gov/myaccount
  5. Internal Revenue Service. (2024). Identity Protection PIN Program. https://www.irs.gov/identity-theft-frauds/get-an-identity-protection-pin
  6. Consumer Financial Protection Bureau. (2024). Credit Freeze for Children: Rights Under the Economic Growth, Regulatory Relief, and Consumer Protection Act (2018). https://www.consumerfinance.gov/consumer-tools/credit-reports-and-scores/
Ricky Flores
Written by Ricky Flores

Founder of HiWave Makers and electrical engineer with 15+ years working on projects with Apple, Samsung, Texas Instruments, and other Fortune 500 companies. He writes about how kids learn to build, think, and create in a tech-driven world.