Child Identity Theft: How to Protect Your Child's Identity Online (2026)
1 in 50 children in the United States fall victim to identity theft each year — roughly 1 to 1.7 million children annually. The total cost to families exceeds $1 billion per year, and the average household spends $1,128 and 16 hours resolving a single case. Children are 51 times more vulnerable than adults because their Social Security numbers have no credit history attached, making fraud nearly invisible until the child turns 18.
The most disturbing part: 75% of child identity theft victims know the perpetrator. It is usually a parent, relative, or trusted adult — not a faceless hacker.
Why Children Are Prime Targets
A child’s Social Security number is a blank slate. No credit history. No fraud alerts. No one checking. That makes it the perfect foundation for fraud that can run undetected for years.
The average child identity theft victim is 12 years old when the theft occurs but does not discover it until age 18 to 21 — when they apply for a student loan, try to rent an apartment, or undergo a background check for a first job. That is a 6-to-9-year window where a thief can build credit, take loans, file tax returns, and rack up debt in a child’s name with virtually zero risk of detection.
FTC data shows child identity theft reports surged 40% between 2021 and 2024. And in 2024, the ITRC reported a 612% spike in stolen birth certificate reports — one of the key documents used to commit child identity fraud.
How Child Identity Theft Happens
Familiar Fraud (75% of Cases)
The most common source is someone the child knows. A parent going through financial hardship uses their child’s SSN to open a utility account. A relative takes out a credit card. A family friend applies for benefits. Because these adults have direct access to the child’s documents — birth certificate, Social Security card, medical records — no hacking is required.
Over half of child identity fraud victims are age 9 or younger, precisely because younger children have the longest window before anyone checks their credit.
Data Breaches Targeting Schools
The PowerSchool breach in December 2024 exposed 62 million student records and 9.5 million teacher records — including SSNs, birthdates, and health information — making it the largest-ever breach of U.S. K-12 student data. A single compromised credential gave the attacker access through a customer support portal. By May 2025, extortion demands were being sent directly to individual school districts.
School cyberattacks doubled from 45 incidents in 2022 to 108 in 2023. Every time a school district is breached, thousands of children’s SSNs enter circulation on the dark web — where stolen SSNs sell for as little as $2.
Phishing and Social Engineering
Children are less equipped to recognize phishing emails, fake login pages, and social engineering. A scammer posing as a peer on a gaming platform or social media app can extract a child’s full name, birthday, address, school name, and even their parent’s information — all the building blocks needed for identity theft.
Apps and Platforms That Collect Too Much Data
The FTC has levied major fines against companies that mishandle children’s data:
| Company | Fine | Violation |
|---|---|---|
| Epic Games (Fortnite) | $520 million | Collected children’s data without consent; dark patterns |
| Cognosphere (Genshin Impact) | $20 million | Collected children’s data without parental consent |
| Disney | $10 million | Enabled unlawful data collection from children under 13 |
| NGL Labs | $5 million | Marketed anonymous messaging app to children; COPPA violations |
The updated COPPA Rule (effective June 2025, full enforcement April 2026) now classifies biometric data — voiceprints, faceprints, and gait patterns — as personal information, and requires separate consent before sharing a child’s data with third parties.
7 Warning Signs Your Child’s Identity Has Been Stolen
- A credit file exists in your child’s name — Children should not have credit reports. If one exists, someone has used their SSN.
- Pre-approved credit offers arrive in your child’s name — Lenders only send these when a credit file exists.
- You cannot claim your child as a tax dependent — The IRS rejects your return because someone already filed using your child’s SSN.
- Debt collectors call about your child — Someone has opened accounts and defaulted.
- Your child is denied student loans or government benefits — Their SSN is tied to existing debt or benefits claims.
- IRS notices arrive in your child’s name — Someone used their SSN for employment or tax fraud.
- Your child receives medical bills for services they never received — Medical identity theft can also corrupt your child’s health records.
8 Steps to Protect Your Child from Identity Theft
Step 1 — Freeze Your Child’s Credit
This is the single most effective protection. A credit freeze prevents anyone — including a thief with your child’s SSN — from opening new accounts. Federal law allows parents to freeze credit for children under 16. You must contact each bureau separately by mail:
- Equifax: Will create and freeze a minor’s file regardless of state law
- Experian and TransUnion: Will create a file only if your state has a minor freeze law or a file already exists
You will need: your child’s birth certificate, their SSN, your government-issued ID, and proof of address. Twenty-three states have additional laws strengthening these protections.
Step 2 — Check Whether a Credit File Already Exists
Before freezing, request a manual search at each bureau. If a credit file exists under your child’s SSN and they have never applied for credit, their identity has already been compromised. File a report at IdentityTheft.gov immediately.
Step 3 — Guard Your Child’s SSN
The IRS is the only entity that truly needs your child’s Social Security number. When school registration forms, pediatric offices, or activity sign-ups ask for it, leave it blank — there is rarely a legal requirement to provide it. If you must share it, ask who will have access and how it is stored.
SSN misuse accounts for approximately 66% of child identity theft cases. Every form you hand it to is a potential breach point.
Step 4 — Set Up Parental Controls
A parental control app lets you monitor your child’s online activity, block age-inappropriate content, manage screen time, and review messages and friend requests. Platforms like Roblox and Snapchat have built-in parental settings, but dedicated monitoring software provides visibility across all apps and devices.
Step 5 — Teach Social Engineering Recognition
Children need to understand that online “friends” may not be who they claim. Teach your child never to share:
- Full name, birthday, or home address
- School name or daily schedule
- Photos in school uniforms or showing identifiable locations
- Parents’ names, workplace, or financial information
- Passwords — even with close friends
Explain that scammers will freely share their own (fake) information to build trust and make the exchange feel reciprocal.
Step 6 — Limit Your Child’s Digital Footprint
Be cautious about what you post about your child online. Photos in school uniforms reveal the school. Birthday posts confirm the date of birth. A full name plus birthday plus city is often enough to locate a child’s records. Review the risks of posting personal information online before sharing.
Step 7 — Secure Physical Documents
Store your child’s birth certificate, Social Security card, passport, and medical records in a fireproof safe or bank deposit box. These documents are the primary tools for familiar fraud — and 75% of child identity theft is committed by someone with physical access to them.
Shred any document containing your child’s personal information before discarding it, including school report cards, medical EOBs, and insurance correspondence.
Step 8 — Enroll in Family Identity Theft Protection
A family identity theft protection plan monitors your child’s SSN across credit bureaus, public records, and the dark web. If someone attempts to use your child’s identity, you receive an alert — potentially years before your child would discover it on their own.
Without monitoring, the average detection gap is 6 to 9 years. With it, you can catch unauthorized use within hours.
What to Do If Your Child’s Identity Has Been Stolen
Act immediately — the longer fraud runs, the harder it is to untangle.
- Freeze your child’s credit at Equifax, Experian, and TransUnion
- Request credit reports in your child’s name from all three bureaus — document everything
- File an identity theft report at IdentityTheft.gov
- File a police report — you will need this for disputes with creditors
- Contact every company where fraudulent accounts were opened and dispute them in writing
- Place a fraud alert at one bureau — it automatically propagates to all three
- If the perpetrator is a family member, consult an attorney — familiar fraud complicates both the legal and family dynamics
- Monitor your child’s credit going forward to catch any reappearance
For a complete step-by-step recovery process, see our guide on what to do if your identity is stolen.
Frequently Asked Questions
How common is child identity theft?
About 1 in 50 children in the United States fall victim to identity theft each year — roughly 1 to 1.7 million children annually. Children are 51 times more vulnerable than adults because their SSNs have no credit history attached, making fraud harder to detect. FTC data shows child identity theft reports surged 40% between 2021 and 2024.
Who commits child identity theft?
Approximately 75% of child identity theft victims know the perpetrator. The thief is typically a parent, relative, family friend, or other trusted adult with access to the child’s SSN and birth certificate. This is called “familiar fraud.” The remaining 25% involves data breaches, phishing, or dark web purchases of stolen SSNs.
How long does it take to discover child identity theft?
On average, child identity theft goes undetected for 6 to 9 years. The typical victim is around 12 years old when the theft occurs but does not discover it until age 18 to 21 — usually when applying for a student loan, renting an apartment, or undergoing a background check.
Can I freeze my child’s credit?
Yes. Federal law allows parents and guardians to request a free credit freeze for any child under 16. You must contact each bureau separately by mail with documentation. Equifax will create and freeze a file regardless of state law. Twenty-three states have additional minor credit freeze laws.
What are the signs of child identity theft?
Red flags include: a credit file exists in your child’s name, pre-approved credit offers arrive for your child, you cannot claim your child as a tax dependent, debt collectors contact you about your child’s accounts, or your child is denied student loans or government benefits.
What is synthetic identity fraud and why does it target children?
Synthetic identity fraud combines a real SSN with a fake name and date of birth to create a new identity. Children’s SSNs are prime targets because they have no existing credit history to trigger fraud alerts. The synthetic identity can build credit for years before discovery — often only when the child tries to use their own SSN as an adult.
What should I do if my child’s identity has been stolen?
Freeze your child’s credit at all three bureaus. Request copies of any credit reports in their name. File an identity theft report at IdentityTheft.gov and a police report. Contact every company where fraudulent accounts were opened. Place a fraud alert at one bureau. Monitor going forward.
The Bottom Line
Child identity theft costs U.S. families $1 billion per year, takes an average of 16 hours and $1,128 per case to resolve, and typically goes undetected for 6 to 9 years. The 62-million-record PowerSchool breach, the 40% surge in FTC reports, and the 612% spike in stolen birth certificates all point in the same direction: this problem is accelerating.
A credit freeze is the single most effective protection — it costs nothing, takes minutes per bureau, and blocks new accounts entirely. Pair it with identity monitoring that covers your child’s SSN, and you close the detection gap from years to hours.
For families with children of any age, a family identity theft protection plan provides the monitoring, alerts, and resolution support that catch fraud before it compounds into years of damage.
Related: Is TikTok Safe for Kids? | Common Search Terms Most Dangerous to Kids | Best Identity Theft Protection for Seniors | What to Do When You Lose Your Wallet
