What Can Someone Do With Your Social Security Number? (2026)

Protect Your SSN With Aura — 68% OFF →

Your SSN Sells for $2 on the Dark Web

A stolen Social Security number sells for as little as $2 on dark web markets. That price might seem shockingly low for something you’ve been told to guard your entire life — but there’s a reason.

Years of massive data breaches have flooded criminal markets with SSNs. The National Public Data breach alone exposed 2.7 billion records in 2024. Supply is high, which drives the price down.

But here’s the important part: a Social Security number by itself is not enough to steal your identity. A criminal cannot call your bank and open a credit card with just an SSN. They need additional pieces of information — and with those additional pieces, the value of your stolen data goes up dramatically.

A complete identity package — SSN plus name, date of birth, address, and mother’s maiden name — sells for $15 to $200 depending on the victim’s credit score and data completeness.

What Criminals Need Besides Your SSN

To commit most forms of identity theft, a criminal needs your SSN plus three or four additional pieces of information:

• Your full legal name
• Your date of birth
• Your mother’s maiden name
• Your home address

This is why the majority of identity theft is actually perpetrated by family members. Think about it — who in your life has all of this information? A close family member, your tax preparer, possibly your dentist’s office. Hopefully nobody else. Seniors are especially vulnerable because their SSNs are paired with established credit histories and savings — see our guide on how to protect seniors from identity theft for specific steps.

If a criminal has your SSN along with these other data points, they have everything they need to do serious damage.

How Your SSN Gets Exposed

Your Social Security number can end up in criminal hands through both legitimate and illegitimate channels.

Legitimate Exposures (That Become Risks)

Your tax preparer’s inbox. There’s a decent chance your SSN is sitting in plain text in someone’s email inbox right now — your accountant, HR department, or even your own sent folder.

Data breaches at companies that store it. Even if you were careful about who you shared your SSN with, the companies you shared it with may not have been careful about protecting it. The MOVEit file-sharing system hack, for example, compromised data from organizations that used the platform to transfer sensitive documents securely.

Medical and dental offices. A receptionist might ask for your SSN to bill your insurance company. In most cases, they don’t actually need it — there are other ways to bill insurance successfully. If a secretary asks for your SSN, tell them they don’t need it.

Scams Designed to Steal Your SSN

Fake rental applications. You find an attractively priced, below-market rental on Craigslist. The application requires your SSN. Except the listing is fake — the scammers are just extracting as much personal information as they can.

Fraudulent job offers. A job offer that seems too good to be true, with an above-market salary doing exactly what you love — after a suspiciously short five-minute interview. The “onboarding” paperwork asks for your SSN, and sometimes even money. You end up out of both.

Phishing attacks. A link to “paypals.com” or “PayPal” spelled with a capital I instead of a lowercase L. You land on a convincing fake site that asks for your SSN, driver’s license, or passport upload. The criminals now have everything.

What Someone Can Actually Do With Your Stolen SSN

Once a criminal has your SSN and enough supporting information, here is what they can do:

Open Credit Cards and Loans in Your Name

This is the most common form of identity theft. With your SSN, name, date of birth, and address, a criminal can apply for credit cards and loans. You won’t know until the bills start arriving — or until a debt collector calls about accounts you never opened.

How to prevent it: Freeze your credit at all three major bureaus — Equifax, Experian, and TransUnion. A credit freeze blocks anyone from opening new credit in your name. It’s free, doesn’t affect your credit score, and takes about 10 minutes per bureau.

Open Bank Accounts in Your Name

Criminals can open checking and savings accounts to use as drop accounts for money laundering or fraudulent deposits.

How to prevent it: Freeze your file at ChexSystems, the consumer reporting agency used by banks when opening new accounts.

File a Fraudulent Tax Return

A criminal can file a tax return using your SSN and claim your refund before you file. You won’t know until the IRS rejects your legitimate return because “one has already been filed.”

How to prevent it: Get an IRS Identity Protection PIN. Once set up, anyone filing taxes in your name — including you — must provide this PIN. This effectively blocks fraudulent tax filings. The IRS issues a new PIN each year. This is recommended for everyone, not just identity theft victims.

Apply for Unemployment Benefits

Criminals can file unemployment claims using your SSN. This was especially common during the pandemic-era benefit expansions, but it continues today.

How to prevent it: If this happens, notify the Department of Labor at the federal level and your state unemployment department at the state level immediately.

Commit Utilities Fraud

Criminals can open utility accounts — electric, gas, phone, internet — in your name, rack up bills, and disappear.

How to prevent it: Freeze your file at NCTUE (National Consumer Telecom and Utilities Exchange) to reduce the likelihood of this happening.

Sell It on the Dark Web

Even if a criminal doesn’t use your SSN directly, they can sell it — along with your other personal information — on dark web marketplaces. From there, it circulates indefinitely and can be purchased by any number of bad actors.

How to monitor it: A dark web monitoring service scans criminal markets for your personal information and alerts you when it appears. This gives you the earliest possible warning to take protective action. If you receive an alert, follow the step-by-step dark web exposure response — the right action depends on what type of data was found.

If Your SSN Is Already Being Used

If you have discovered suspicious activity — unfamiliar accounts, rejected tax returns, or collection notices for debts you never took on — these are the immediate steps to stop the damage.

Place a Fraud Alert

Contact any one of the three credit bureaus — Equifax, Experian, or TransUnion — and request a fraud alert. It propagates to all three automatically. A fraud alert requires lenders to take extra steps to verify your identity before approving new credit. Unlike a credit freeze, a fraud alert does not block inquiries entirely — it adds a verification layer. Use both for maximum protection.

File a Report at IdentityTheft.gov

The FTC will generate a personalized recovery plan tailored to your situation, with step-by-step guidance on disputing fraudulent charges and accounts. This report also serves as official documentation that creditors and credit bureaus accept when you dispute unauthorized activity.

File a Police Report

If your identity theft has resulted in significant financial loss or criminal activity in your name, file a police report with your local department. Creditors take disputes more seriously when you have both an FTC report and a police report on file. Bring your FTC report, a government-issued ID, and any evidence of the fraud (account statements, collection notices, credit report entries).

Secure Your Accounts

If someone has your SSN, there is a high likelihood they have already accessed — or are attempting to access — other parts of your digital life.

• Change passwords on banking, email, and financial accounts immediately. Use strong, unique passwords for each account — the one password you created years ago and reuse everywhere has to go.
• Use a password manager to generate and store complex passwords so you do not have to remember them.
• Enable two-factor authentication on every account that supports it. Use an authenticator app instead of SMS when possible.
• Set up verbal passcodes with your banks and financial institutions. These create an additional verification layer for phone transactions — a step most people skip that blocks a common attack vector.

The Bottom Line

Your Social Security number might only sell for $2 on the dark web — but combined with a few other basic pieces of your personal information, it’s worth far more to criminals. The good news: freezing your credit, getting an IRS PIN, and monitoring the dark web are all free or inexpensive steps that dramatically reduce the damage a stolen SSN can cause.

If your SSN has already been compromised, follow our step-by-step identity theft recovery checklist. To understand the full scale of the problem, see the latest identity theft statistics.

Related: How to Prevent Identity Theft | Famous Identity Theft Cases