After the massive data breaches of the past decade — Equifax alone exposed 147 million Social Security numbers — there’s a very real chance your SSN is floating around on the dark web right now. And if it is, criminals can use it to open credit cards, file tax returns, take out loans, and commit fraud in your name.
The question isn’t whether you should worry. The question is whether you’ve taken steps to protect yourself. This guide shows you how to check if your SSN has been exposed, what to do if it has, and how to prevent damage even if it’s out there.
In this guide:
- How to check if your SSN is on the dark web
- What criminals can do with your SSN
- Immediate steps to take if your SSN is exposed
- Why data broker removal matters even more when your SSN is compromised
- Long-term protection plan
First step right now: Even if your SSN is compromised, criminals need additional personal details — your name, address, date of birth — to actually use it. Those details are sitting on data broker sites. Run a free Optery scan to see how much supporting information is publicly available about you.
How to Check If Your SSN Is on the Dark Web
There are several ways to check if your SSN has been exposed:
Google’s Dark Web Report (free). If you have a Google account, go to myaccount.google.com and look for “Dark Web Report” under the Security section. Google scans the dark web for your personal information — including your SSN if you provide it — and shows you what was found.
Have I Been Pwned (free — email only). Visit haveibeenpwned.com and check if your email was in any breaches that also exposed SSNs. While this tool doesn’t search for SSNs directly, it can tell you if you were part of a breach that included Social Security numbers.
Credit bureau monitoring. All three credit bureaus (Equifax, Experian, TransUnion) offer dark web monitoring services — some free, some paid. These specifically scan for your SSN on the dark web.
Check if you were in a major breach. If you had an account with any company that suffered a major breach — Equifax (2017), Anthem (2015), OPM (2015), T-Mobile (2021, 2023), or any of dozens of others — your SSN may have been exposed. Many breach notification letters specifically state whether SSNs were compromised.
The honest truth: Given the scale of breaches over the past decade, security experts estimate that a significant percentage of all American SSNs have been exposed at some point. If you’ve ever had a credit report, health insurance, or government record, your SSN has been in databases that have been breached.
What Criminals Can Do with Your SSN
A stolen SSN is the master key to identity theft. Here’s what criminals can do with it:
Open credit accounts. Credit cards, loans, lines of credit — all opened in your name, with bills and collection notices eventually finding their way to you.
File fraudulent tax returns. Criminals file a tax return with your SSN early in the season and claim your refund before you file. You discover it when the IRS rejects your legitimate return.
Steal your benefits. Unemployment benefits, Social Security benefits, and other government assistance can be claimed using your SSN.
Get medical care in your name. Medical identity theft — using your SSN to receive healthcare — can contaminate your medical records with someone else’s conditions, blood type, and medications. This is potentially life-threatening.
Commit crimes under your identity. If someone arrested gives your SSN and name to police, you could end up with a criminal record you know nothing about.
But here’s the critical point: An SSN alone usually isn’t enough. Criminals also need your name, date of birth, and address to actually open accounts and commit fraud. And that supporting information is often freely available on data broker sites. Removing your data from those sites makes a stolen SSN significantly harder to exploit.
What to Do If Your SSN Is on the Dark Web
If you’ve confirmed — or even suspect — that your SSN is compromised, take these steps immediately:
Step 1: Freeze Your Credit (Do This NOW)
This is the single most important action. Freeze your credit with all three bureaus immediately:
- Equifax: 1-800-349-9960 or equifax.com/personal/credit-report-services/credit-freeze/
- Experian: 1-888-397-3742 or experian.com/freeze
- TransUnion: 1-888-909-8872 or transunion.com/credit-freeze
A credit freeze prevents anyone from opening new accounts in your name — even if they have your SSN. It’s free and takes 10 minutes. Do it right now before reading the rest of this guide.
Step 2: Remove Your Data from Data Broker Sites
This step is especially critical when your SSN is compromised. Your SSN is dangerous on its own — but it becomes devastating when combined with your name, address, date of birth, and family details from data broker sites. Criminals need those supporting details to pass identity verification when opening accounts.
Removing your personal information from data broker sites makes it significantly harder for criminals to exploit your stolen SSN.
Optery — Our top recommendation. Free scan to see your exposure across 350+ data broker sites. Paid plans automate removal with continuous monitoring. When your SSN is compromised, reducing your public data footprint is urgent. Read our full Optery review →
Incogni — Best budget option. Covers 180+ data brokers for $6.49/month billed annually. Read our full Incogni review →
Step 3: Set Up an IRS Identity Protection PIN
The IRS offers a free Identity Protection PIN (IP PIN) that prevents anyone from filing a tax return using your SSN without this PIN. Apply at irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin. This is one of the most effective protections against tax-related identity theft.
Step 4: Place a Fraud Alert
In addition to a credit freeze, place a fraud alert with the credit bureaus. A fraud alert requires creditors to take extra steps to verify your identity before opening new accounts. You only need to contact one bureau — they’re required to notify the other two.
Call Equifax (1-800-525-6285), Experian (1-888-397-3742), or TransUnion (1-800-680-7289) to place a fraud alert.
Step 5: Monitor Your Credit Reports
Pull your free credit reports from annualcreditreport.com and review them for any accounts, inquiries, or addresses you don’t recognize. You’re entitled to free weekly reports from each bureau. Set a reminder to check monthly for the next year.
Step 6: File an FTC Report
If you discover actual fraud resulting from your compromised SSN, file a report at IdentityTheft.gov. The FTC creates a personalized recovery plan and generates documents you need to dispute fraudulent accounts.
Step 7: Secure All Your Accounts
Change passwords on all important accounts using a password manager. Enable two-factor authentication with an authenticator app — not SMS, which is vulnerable to SIM swapping. Start with email, then banking, then everything else.
Why Data Broker Removal Is Critical When Your SSN Is Compromised
Most guides about SSN exposure focus on credit freezes and monitoring. Those are important — but they miss the bigger picture.
When your SSN is on the dark web, criminals need supporting information to use it effectively. They need to know your full name, date of birth, current address, and other details to pass identity verification. And that information is sitting on data broker sites for anyone to access.
Think of it this way:
SSN alone = a key without knowing which door it opens
SSN + data broker info = a key with the exact address, apartment number, and your name on the mailbox
By removing your personal information from data broker sites, you take away the supporting details that make a stolen SSN actionable. It doesn’t un-steal your SSN — but it makes it dramatically harder to use.
Run a free Optery scan to see exactly what supporting information is available about you on data broker sites right now. Then remove it.
Can You Get a New Social Security Number?
In extreme cases of identity theft, you can request a new SSN from the Social Security Administration. However, this is rarely recommended because:
It doesn’t erase your history. Your old SSN remains associated with your credit history, tax records, and other government records. A new SSN starts with a blank credit history, which creates its own problems.
It’s extremely difficult to get approved. The SSA only issues new SSNs in cases of severe, ongoing identity theft where all other remedies have failed.
The old SSN is still out there. Criminals still have your old number. And without a credit freeze on both the old and new SSN, you’re potentially vulnerable on both.
For almost everyone, the better approach is a credit freeze + IRS IP PIN + data broker removal + ongoing monitoring. This combination provides effective protection without the complications of a new SSN.
Long-Term Protection Plan
If your SSN has been compromised, these ongoing measures keep you protected:
Keep your credit frozen permanently. Only temporarily lift the freeze when you need to apply for credit. Refreezing is free and takes 5 minutes.
Renew your IRS IP PIN annually. The IP PIN changes each year. Make sure you get a new one before tax season.
Monitor your credit reports monthly. Check for unfamiliar accounts, inquiries, and addresses. Free weekly reports are available at annualcreditreport.com.
Keep your data off broker sites. Continuous monitoring through Optery or Incogni ensures your personal information stays removed from data broker sites — keeping the supporting details criminals need away from them.
Set up Google Alerts for your name, phone number, and email address to catch new appearances of your information online.
Review your Social Security statement annually. Check my Social Security at ssa.gov to review your earnings record. Unfamiliar earnings could indicate someone is working under your SSN.
Protect Yourself Starting Now
Whether or not your SSN is confirmed to be on the dark web, the smart move is to act as if it is — because statistically, it probably has been exposed at some point. The protective measures cost nothing (credit freeze) or very little (data broker removal), and they provide significant peace of mind.
- Freeze your credit with all three bureaus (10 minutes, free)
- Run a free Optery scan to see what personal data is publicly available about you on data broker sites
- Remove your data from broker sites using Optery or Incogni — make your stolen SSN harder to exploit
- Get an IRS IP PIN at irs.gov to prevent tax fraud
- Secure your accounts with a password manager and 2FA
You can’t un-steal a Social Security number. But you can make it nearly useless to criminals.
Frequently Asked Questions
How likely is it that my SSN is on the dark web?
Very likely. The Equifax breach alone exposed 147 million SSNs. Combined with dozens of other major breaches over the past decade, security experts believe a significant percentage of all American SSNs have been compromised. The safest assumption is that yours has been exposed at some point.
Can I check if my SSN is on the dark web for free?
Yes. Google’s Dark Web Report (myaccount.google.com) scans the dark web for your personal information including your SSN. You can also check Have I Been Pwned for breach exposure, though it doesn’t search for SSNs directly.
What’s the first thing I should do if my SSN is compromised?
Freeze your credit immediately with Equifax, Experian, and TransUnion. This prevents anyone from opening new accounts in your name. It’s free, takes 10 minutes, and is the single most effective protection.
Why does data broker removal matter if my SSN is stolen?
Criminals need more than just your SSN — they need your name, address, and date of birth to pass identity verification. Data broker sites provide those details freely. Removing your data makes a stolen SSN much harder to exploit. Run a free Optery scan to see your exposure.
Should I get a new Social Security number?
Almost never. A new SSN doesn’t erase your old one and creates complications with credit history and government records. A credit freeze + IRS IP PIN + data broker removal is more effective for nearly everyone.
Will a credit freeze protect me if my SSN is on the dark web?
A credit freeze prevents new credit accounts from being opened, which blocks the most common form of SSN-based fraud. But it doesn’t prevent tax fraud, medical identity theft, or other non-credit fraud. That’s why you also need an IRS IP PIN and data broker removal.
How do I get an IRS Identity Protection PIN?
Apply at irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin. The IP PIN prevents anyone from filing a tax return with your SSN without this PIN. It’s free and renews annually.
This post contains affiliate links. If you purchase through our links, we may earn a commission at no extra cost to you. See our affiliate disclosure for details.