What to do about child identity theft
Something arrived with your child’s name on it that shouldn’t exist. A collections notice for a utility account. A letter from the IRS about unpaid income tax on wages your eight-year-old never earned. A denial of benefits because the Social Security number is already in use. Or your seventeen-year-old applied for a student loan and was turned down for bad credit before ever having any.
Child identity theft is quiet by design. A minor almost never has a credit file, so nobody is watching, no statement arrives, and the fraud can run for a decade before anyone notices. That delay is the hard part, not a sign that you missed something you should have caught. What follows is a straightforward sequence, and most of it you can do yourself in an afternoon of phone calls and paperwork.
First, find out whether a credit file exists
Because children under eighteen normally have no credit report at all, the existence of one is itself the finding. You can’t look this up through the usual annual-credit-report route. Instead, contact each of the three bureaus — Equifax, Experian, and TransUnion — and ask specifically for a manual search of your child’s Social Security number. Contact details for all three are listed at IdentityTheft.gov.
Each bureau will want proof before it discusses a minor’s file, so gather these before you start: your own government-issued photo ID, proof of your address such as a utility bill or insurance statement, your child’s birth certificate, and their Social Security card. If you are a guardian rather than a parent, you’ll need the documents establishing that. Making one packet and photocopying it three times saves a lot of repeat effort. If all three bureaus come back with nothing, that is good news, and the single most useful thing you can then do is freeze the file anyway so it stays that way.
Close the fraudulent accounts
If a file does exist, it will show you which companies extended credit or service. Call each one’s fraud department, say plainly that the account was opened using a minor’s stolen information, and ask them to close it. Then ask for something people often forget to request: written confirmation that your child is not responsible for the debt. That letter is what settles the argument years later when a collector resurfaces, and it is much easier to get now than to reconstruct in 2031.
Separately, tell each credit bureau that the accounts are fraudulent and ask them to remove the entries from your child’s report. The mechanics here are close to what an adult goes through, and our guide on what to do when someone opened accounts in your name covers the dispute process and the follow-up in more detail.
Freeze your child’s credit
This is the step that actually stops the bleeding. For a child under sixteen, a parent or guardian can place a free credit freeze, sometimes called a protected consumer freeze, and it stays in place indefinitely until you ask for it to be lifted. It is not automatic and it is not the same process as an adult freeze — each bureau has its own minor-specific form and document requirements, and most still want them by mail.
Two details worth knowing. A sixteen- or seventeen-year-old can request and lift their own freeze, which matters if they are about to apply for a first job, a phone plan, or student aid. And a freeze is not a permanent lock on their future: it can be temporarily lifted whenever there is a legitimate application, then put back. There is no cost either way.
Report it, and handle the tax side separately
File the report at IdentityTheft.gov, the FTC’s system. It generates an Identity Theft Report and a written recovery plan, and that report is the document banks, utilities, and collectors will ask you for. Include every detail you have: the account numbers, the company names, the dates, and how you found out.
If the discovery came through an IRS notice, that runs on its own track and needs a separate filing with the IRS rather than a mention in your FTC report. Our post on what to do when someone filed a tax return in your name walks through Form 14039 and how the IRS process works, and the same route applies when the affected taxpayer is your child.
Where it usually came from
Parents often assume a stranger guessed a number, but in practice a child’s Social Security number most often escapes through a place that had a legitimate reason to hold it: a school or district system, a pediatric practice or hospital, a summer camp, an insurer, or a benefits program. Health-sector breaches in particular tend to expose exactly the combination a fraudster needs — name, date of birth, and SSN. If a breach letter naming your child has ever crossed your desk, our guide on what a data breach notification letter actually means is worth a read.
Uncomfortably, a meaningful share of child identity theft is committed by someone in the household or extended family, often under financial pressure and often without thinking of it as theft. If that is your situation, the same steps still apply, but the choices about reporting and about the relationship are yours to weigh, and you are allowed to take them one at a time. The freeze and the written no-liability confirmations protect your child either way.
Then set a reminder
Once the file is frozen and the fraudulent accounts are closed, this stops being urgent. Put a note in your calendar to run the manual search again in a year or two, and again in the months before your child turns eighteen, since that is when a dormant problem tends to surface at the worst possible moment. Keep the confirmation letters and the FTC report somewhere you’ll find them.
Finding this at all means your child starts adult life with a clean file instead of discovering the damage at a mortgage application. The paperwork is tedious, but it is finite, and it works.
— Gus