Child Identity Theft: How to Protect Your Kid’s SSN

By Tye | Last updated: May 21, 2026 Category: Online Safety Basics

Your 8-year-old doesn’t have a credit card. They’ve never applied for a loan. But their Social Security number could already be financing someone else’s new car — and you wouldn’t know until they turn 18 and get denied for a student loan.

I’m a parent and an IT guy. I started looking into child identity theft because of my own kid, and what I found surprised me: the most effective protection costs nothing, takes about an hour spread across three bureaus, and most parents have never been told to do it. This article walks you through what’s actually happening, how to check if your kid is already a victim, and the one free step that stops most of it.

Why kids are the perfect target

Identity thieves love a child’s Social Security number for the same reason a burglar loves an empty house: nobody’s watching it.

Your kid has no credit history, no existing accounts, no fraud alerts set up, and no reason to check anything for the next decade. A thief can open accounts in their name and run up debt for years before anyone notices. By the time your teenager applies for their first credit card or student loan, the damage is done — and untangling it can take months.

According to Javelin Strategy & Research’s 2022 Child Identity Fraud Study, about 915,000 U.S. children — roughly 1 in 80 — were targeted by identity theft in the year ending July 2022, and families lost a combined $680 million dealing with it. That’s down from prior years, but the number of kids exposed in data breaches actually went up.

Here’s how their information typically gets out:

School and medical breaches. Your kid’s SSN sits in school enrollment systems, the pediatrician’s office, the orthodontist, the summer camp from three years ago. When those organizations get breached — and they do — your child’s data ends up for sale. The K12 SIX 2022 State of K-12 Cybersecurity report cataloged 166 publicly disclosed cyber incidents at U.S. schools in 2021 alone, and the report notes the real number is likely 10 to 20 times higher because schools aren’t required to disclose most incidents.

Family members with access. This one’s uncomfortable to say, but most child identity theft is committed by someone the family knows. A relative with money problems sees an opportunity. They have the kid’s SSN, date of birth, and address — often from a holiday card or a school form they helped fill out — and they open credit in the child’s name.

Synthetic identity fraud. This is the one that genuinely worries me. A thief takes your kid’s real SSN and pairs it with a fake name and birthdate. The credit bureaus see it as a brand-new person and start building a file. The thief slowly builds credit over years, then maxes it out and disappears. Because the fraudulent accounts are under a fake name, they won’t show up if you search for your child’s name — only the SSN.

Warning signs your kid might already be a victim

You won’t get a fraud alert. Your kid doesn’t have credit monitoring. So you have to know what to watch for:

• Pre-approved credit card offers in your child’s name. If your 10-year-old is getting mail from a credit card company, someone has used their SSN to establish a credit file.
• IRS notices about unpaid taxes or duplicate returns. A thief filed using your kid’s SSN to claim a fraudulent refund.
• Calls from debt collectors about accounts you never opened. Someone ran up credit in your child’s name and walked away.
• Denial of government benefits. Your child’s SSN is flagged as already having income or benefits attached.
• Utility or bank account notices in your child’s name. Thieves often start with low-risk accounts to test whether the SSN is being watched.

If you see any of these, check your child’s credit immediately. The FTC’s guide on protecting children from identity theft walks through the verification process, and I’ll cover it next.

How to check if your child already has a credit file

Most kids under 18 shouldn’t have a credit file at all. If one exists, that’s the red flag.

You can’t just pull a child’s credit report online the way you would for yourself. Each of the three bureaus has its own process for parents requesting a manual check, and all three need documentation. Generally you’ll need:

• A copy of your driver’s license or government ID
• Proof of your address (utility bill, bank statement)
• Your child’s birth certificate
• Your child’s Social Security card
• If you’re not the child’s parent, you’ll also need documents showing legal guardianship.

Mail those to each bureau (the FTC’s identity theft site has the current mailing addresses for child requests). If a bureau writes back saying “no file found,” that’s the answer you want. If they send back a credit report, your kid is a victim, and you skip to the recovery section at the bottom of this article.

The free step that stops most child identity theft

This is the one most parents don’t know about, and it’s the single most effective thing you can do: freeze your child’s credit at all three bureaus.

A credit freeze tells the bureaus that no new credit can be opened under that SSN, period. Federal law requires the bureaus to offer this for free for any child under 16, and the freeze stays in place until you (or your kid, once they turn 16) lift it. When your kid is ready to apply for their first credit card or student loan, you unfreeze it — also free.

There is no downside to doing this proactively. Your child isn’t using their credit anyway, so freezing it doesn’t block anything they’re trying to do. It just blocks anyone else from using it.

Each bureau handles minor freezes a little differently. All three are mail-only because of the documentation requirements:

Equifax — Download the Minor Freeze Request Form and follow the mailing instructions. Equifax’s security freeze page covers what documents you need.

Experian — See Experian’s child credit freeze instructions. Same general documentation: parent ID, proof of address, child’s birth certificate and Social Security card.

TransUnion — TransUnion calls this a “Protected Consumer Freeze.” Important: TransUnion does not accept these by phone or online — it’s mail-only. See TransUnion’s credit freeze page for the address and document list.

If your child doesn’t already have a credit file (which is usually the case), the bureau will create one specifically to freeze it. Equifax notes this can take up to three business days after they receive your documents.

Block out an evening, gather the documents once, and mail to all three bureaus the same week. It’s tedious. It’s also the single most effective thing you can do.

How to think about paid identity-monitoring services

Once you’ve frozen your child’s credit, paid monitoring is optional. I’ll be straight about this: a freeze does most of the job, for free. Monitoring services tell you after fraud happens; a freeze prevents it from happening in the first place.

That said, monitoring can catch things a freeze can’t — like your child’s SSN showing up on a dark web data dump, which means it’s been stolen and is for sale even if no one’s used it yet. If you’ve gotten a breach notification involving your kid’s school, doctor, or insurance company, adding monitoring on top of a freeze is reasonable.

If you decide to evaluate a paid service, here’s what to actually look for:

Three-bureau monitoring, not one. A thief can open an account that only reports to one bureau. Single-bureau services miss it. If the service only watches Experian, for example, fraud at a TransUnion-reporting lender slips through.

Dark web monitoring that includes children’s data. Many services monitor adult identities but don’t extend dark web scanning to enrolled children. Read the fine print.

Family coverage, not individual add-ons. Per-person pricing gets expensive fast for families with multiple kids. Look for plans that cover the whole household.

Identity theft insurance and recovery support. If fraud does happen, cleanup is brutal: police reports, creditor disputes, months of paperwork. Services that include a dedicated recovery specialist (not just a phone tree) are worth more than the ones that only send alerts.

What to skip. Don’t pay for “credit monitoring” alone — that’s just watching the file, which a free freeze already protects. Don’t pay extra for “SSN monitoring” that only covers one bureau. And don’t pay for child monitoring as an add-on if your kid’s credit is already frozen and you have no reason to think their data is in the wild.

If I were starting from scratch with my own kid today, I’d freeze first, sign up for free annual checks with each bureau, and only add paid monitoring if a school or medical breach put my child’s data at known risk.

What to do if your child is already a victim

If a credit check turns up fraudulent accounts in your kid’s name, act fast. The longer fraud sits, the harder cleanup gets.

1. File an identity theft report at IdentityTheft.gov. This is the FTC’s official site and the report it generates gives you legal standing when you dispute fraudulent accounts. It’s free.
2. File a police report. You’ll need it to dispute charges with creditors. Bring your IdentityTheft.gov report, your child’s birth certificate, and copies of any fraudulent bills.
3. Contact every company where fraud occurred. Call each creditor’s fraud department, provide the FTC report and police report, and demand the account be closed and removed from your child’s record. Get written confirmation that your kid isn’t responsible.
4. Freeze the credit at all three bureaus immediately. Even while you’re disputing the existing fraud, freeze the file so no new accounts can be opened.
5. Keep records of everything. Date-stamped letters, call logs, names of representatives. Cleanup can stretch for months, and you’ll need the paper trail.

A note on what you can’t outsource

The temptation with identity protection is to pay a service to handle it so you don’t have to think about it. I understand the appeal. But the most effective protection — the free credit freeze — is something only you can do, because the bureaus require parental documentation. No service does this part for you.

Every kid is different, and every family’s risk profile is different. If your child has been in a known breach, if you’ve seen warning signs already, or if a family situation makes you specifically worried, lean toward more protection rather than less. If something here doesn’t fit your situation, the FTC’s consumer advice site has resources for specific scenarios.

Your kid’s Social Security number is a 9-digit key to their financial future. Freeze it now, before someone else uses it.

All guides