How Child Identity Theft Occurs, Warning Signs, Credit Freeze Steps and How to Protect Your Child (2026)

Child identity theft happens when someone uses a minor’s personal information without permission to get credit, benefits, medical care, a job, or a tax refund. A child’s Social Security number (SSN) is attractive because children usually have no credit history, and no one is watching for activity, so misuse can go unnoticed for years. Many families find out only when the child applies for a student loan, first credit card, apartment or job.

The person responsible can be a stranger who got data in a breach, a scammer, or someone the family knows. Schools, doctors’ offices and other organizations that hold children’s records can also expose information.

The key point: a data breach, a duplicate dependent claim or an unexpected credit file is a warning sign, not proof of identity theft. This guide explains how it occurs, the signs, your legal rights and what to do.

Quick Facts About Child Identity Theft

Question	Answer
What is it?	Unauthorized use of a minor’s personal information for fraud
What is stolen?	SSN, name, date of birth, address, insurance and school information
Who commits it?	Strangers, online scammers, people the family knows, or people with access to records
Does a child normally have a credit report?	No. A file usually exists only if an account was opened, information was reported, or a record was created or mixed in error
Can parents freeze a child’s credit?	Yes. Parents or guardians can request a free freeze for a child under 16. Children aged 16 and 17 generally can place their own
Early warning signs	Unexpected bill, collection call, IRS letter, benefit denial, or credit offers addressed to the child
Where to report	IdentityTheft.gov (Federal Trade Commission)
Cost of a freeze	Free under federal law

What Is Child Identity Theft?

It is the unauthorized use of a minor’s identifying information to get money, credit, services, work or benefits. Information that can be misused includes:

• The child’s SSN, full name and date of birth.
• Home address and contact details.
• Birth certificate or passport details.
• Health insurance or medical ID numbers.
• School, financial or government records.

A thief does not always need every detail. An SSN with a name and date of birth may be enough to try fraud.

Not every mismatch is theft. A credit bureau can accidentally merge a child’s information with an adult who has a similar name. Investigate before assuming a crime.

The FTC explains these risks in its guide on protecting children from identity theft. See the Sources section for the link.

How Does Child Identity Theft Occur?

1. Someone steals the child’s Social Security number

An SSN can come from a card, a medical or school form, a benefits application, or papers kept at home. Store cards and documents securely and avoid carrying a child’s card or emailing unprotected copies. Simply having a child’s SSN is not identity theft. The risk arises when someone obtains or uses it improperly.

2. A data breach exposes children’s records

Schools, pediatric offices, hospitals, insurers, daycares, camps, youth sports leagues and education software vendors store children’s names, birth dates, addresses and sometimes SSNs. If one is breached, the data may be sold or used later. A breach notice means information may be exposed, not that fraud has happened. Read the notice, find out what was taken, and follow the protective steps offered.

3. A family member or someone close to the child misuses the information

It does not always involve an unknown criminal. A relative, caregiver or acquaintance with access to documents may use a child’s SSN to open accounts, turn on utilities or claim benefits. Studies on child identity fraud commonly report that many cases involve someone the child knows, though published percentages vary and should be checked at the source. An unfamiliar account does not tell you who did it, so first protect the child’s information and document everything.

4. Phishing and fake forms

Scammers pose as schools, doctors, government agencies or delivery companies and ask parents to confirm a child’s SSN, birth date or documents. Red flags include urgent deadlines, links that do not match the real website, and requests for sensitive documents by email. Contact the organization using a phone number or website you find yourself.

Children and teens can also be targeted directly through games and social media, with offers of free in-game currency or fake jobs that ask for personal details.

5. School, daycare or activity forms that ask for too much

Some forms ask for an SSN when it is not needed. Ask:

• Why is the SSN necessary, and is it legally required or optional?
• Can another identifier be used instead?
• Who can see it, how is it protected and how long is it kept?

The FTC specifically recommends asking why a school needs a child’s SSN and whether another identifier can be used.

6. Oversharing on social media (“sharenting”)

Birthdays, full names, school names, hometowns and photos of documents can help a thief answer security questions or make a scam message believable. Never post SSNs, birth certificates, passports or insurance cards. Check backgrounds of photos for addresses, badges or paperwork.

7. Employment identity theft

A person may use a child’s SSN to get a job. Parents may learn of it from an IRS notice about wages the child never earned. This type of misuse is described in our guide on employment identity theft.

8. Government benefits fraud

A thief may use a child’s information to apply for programs such as health coverage or food assistance. A denial because the child is “already receiving” benefits may be a clue, but it can also result from clerical errors or duplicate records. Contact the agency through verified contact information.

9. Medical identity theft

Someone uses a child’s insurance or identity to get care or prescriptions. This can put wrong information in the child’s medical record. Ask the provider and insurer for an investigation and correction.

10. Credit and service accounts

Thieves may try to open credit cards, loans, phone, utility or rental accounts. A child may not find out until a bill, a collector or a loan denial arrives years later.

11. Synthetic identity fraud

A criminal pairs a real child’s SSN with a made-up name, birth date or address to create a new “person” and builds credit over time before defaulting. Regulators have described synthetic identity fraud as a fast-growing financial crime, and unused children’s SSNs are attractive. It is one pattern among many, not necessarily the most common.

12. Stolen mail, documents or compromised accounts

Mail, tax forms, medical and school papers can be stolen or thrown out carelessly. A hacked parent email or cloud account may also hold copies of IDs and forms. Shred papers, use unique passwords and multi-factor authentication, and secure the email account used for password resets. For broader steps after a theft or breach, see Identity Theft Victim? Do These Steps First.

13. Criminal identity theft

In rare cases, a person gives a minor’s identifying details to police, which can lead to a record or warrant tied to the child’s identity. This is uncommon but serious, and a lawyer can help clear it.

Why Criminals Target Children

Children often have limited or no credit history, and nobody checks their credit. That gives fraud time to grow. Still, not every child whose information is exposed becomes a victim, so respond to specific warning signs and take steps proportionate to what was exposed.

Warning Signs of Child Identity Theft

1. Unexpected bills or collection notices for accounts the family never opened.
2. Benefits denied because the child’s SSN is already linked to another record.
3. An IRS notice about wages, taxes or a return connected to the child.
4. A tax return rejected because the child was already claimed. First confirm you can claim the child, since a duplicate claim is not automatically identity theft.
5. A credit report exists for a child under 18.
6. A student loan, bank account or apartment is denied because of credit history the young person does not recognize.
7. Unfamiliar medical bills, claims or prescriptions.
8. Credit card offers, account notices or collection mail addressed to the child. An offer alone does not prove an account exists.
9. A notice from a school, hospital or government agency about a breach involving the child’s data.

How to Check Whether a Child Has a Credit Report

A parent or guardian can ask Equifax, Experian and TransUnion to search for a file in the child’s name. The bureaus usually ask for proof of your identity and address, the child’s birth certificate and SSN card, and proof of guardianship if applicable. Tell each company you are requesting a search for a minor’s file, and submit documents only through each bureau’s official secure process. The FTC and the Consumer Financial Protection Bureau explain how in their guides (see Sources).

If a file exists for a young child, it is a reason to investigate, and it may reflect fraud, an authorized-user account or a record mix-up.

How to Freeze a Child’s Credit

A security freeze stops the bureau from releasing the file to most new creditors, making it harder for a thief to open accounts in the child’s name.

Under federal law, a parent or guardian can place a free freeze for a “protected consumer,” which covers a child under 16. Teens aged 16 and 17 generally can request or lift a freeze themselves. You must contact each of the three bureaus. A freeze at one does not cover the others.

Steps:

1. Visit each bureau’s official website and find the process for a minor’s freeze.
2. Prove your identity and authority (parent ID, address, child’s birth certificate and SSN).
3. Submit documents securely and keep copies and confirmation numbers.
4. If the child has no file, ask how the bureau creates a protected file and freezes it.
5. If fraudulent accounts exist, a freeze does not remove them, so dispute them separately.
6. Remember the PIN or password you receive, and lift the freeze temporarily when the child later applies for credit.

A freeze is a strong tool, but it does not stop tax, employment, medical or benefits misuse.

What to Do If Someone Stole Your Child’s Identity

Step 1: Report to the FTC

Go to IdentityTheft.gov, describe what happened and get a personal recovery plan. Save your report. For other reporting options, read Where Is the Best Place to Report Identity Theft?

Step 2: Contact the company or agency involved

Use the fraud department. Explain that the account involves a minor who did not authorize it. Ask them to investigate, close or restrict fraudulent accounts, stop collection while they investigate, correct records, explain whether they reported the account to a credit bureau, and confirm the outcome in writing. Keep notes, reference numbers and copies.

Step 3: Request a search and dispute fraud with all three credit bureaus

If credit is involved, ask each bureau to search for the child’s file. Dispute any fraudulent accounts with the bureau and with the company that reported them, and attach your FTC report. A lack of a credit file does not rule out tax, employment, medical or benefits fraud.

Step 4: Freeze the credit file

Use the steps above. This is a good idea even before a loss occurs if there is a concrete reason to suspect misuse.

Step 5: Follow IRS instructions if the child’s tax information was misused

Read any IRS notice and follow the instructions that apply. For unfamiliar wages, see the guide on employment identity theft. If someone claimed the child as a dependent without permission, follow the IRS’s guidance on identity theft and dependents. See also What Is Tax Identity Theft and How Can It Occur?

Do not automatically file IRS Form 14039 for every child identity theft case. The IRS says most people do not need it, and the right step depends on the notice and the situation. Our guide to the IRS Form 14039 Identity Theft Affidavit explains when it applies.

Step 6: Correct Social Security and employment records

If wages appear under the child’s SSN, contact the Social Security Administration (1-800-772-1213) about correcting the earnings record, and follow any IRS notice. Do not assume the child must file a tax return just because someone else used the number to work. For how SSN misuse works more broadly, see What Is Social Security Identity Theft? How It Happens and What to Do About It.

Step 7: Fix medical records and insurance claims

Contact the provider’s privacy or billing department and the insurer. Identify services the child did not receive, ask for an investigation and correction, and get written confirmation. Federal health privacy rules (HIPAA) give patients, or parents acting for minors, the right to request access to records and to ask for corrections.

Step 8: Consider a police report

A police report can help if there is documented fraud, a financial loss, or a need to support a dispute. Explain that the victim is a minor. A report does not guarantee that a creditor or agency will resolve the issue. See How to Report Identity Theft to Police, and When You Actually Need To.

Step 9: Secure the child’s information and your accounts

Change compromised passwords, enable multi-factor authentication, secure your email, and review where the child’s documents are stored and who can see them.

Step 10: Keep a recovery file

Save the FTC report, notices, dispute letters and responses, fraudulent statements, police report, confirmation of closed or corrected accounts, and dates and names for every contact.

Laws and Rules That Matter

This is general information, not legal advice.

• Federal identity theft crimes (18 U.S.C. § 1028 and § 1028A). Knowingly using another person’s identification to commit a federal crime, or a state or local crime, is an offense, and aggravated identity theft carries mandatory added prison time.
• Misuse of an SSN (42 U.S.C. § 408(a)(7)(B)). Falsely using an SSN as one’s own is a federal crime.
• Fair Credit Reporting Act (FCRA), 15 U.S.C. § 1681 et seq. Gives you the right to dispute inaccurate information with bureaus and with the companies that furnish it (§§ 1681i and 1681s-2), to place fraud alerts and freezes (§ 1681c-1), and to ask bureaus to block information that resulted from identity theft when you submit an identity theft report (§ 1681c-2).
• Free credit freezes for minors. Section 301 of the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018 amended the FCRA to make freezes free and to let parents and guardians freeze the files of children under 16, called protected consumers.
• Fair Debt Collection Practices Act (15 U.S.C. § 1692 et seq.). Limits how debt collectors may contact you and lets you dispute a debt in writing. A child is generally not responsible for debts created by fraud.
• FERPA (20 U.S.C. § 1232g). Protects student education records at schools that receive federal funds and gives parents rights to inspect and request corrections, with limits on disclosure.
• COPPA (15 U.S.C. § 6501 et seq.). Restricts online services from collecting personal information from children under 13 without verifiable parental consent. It helps limit data collection online but does not itself prevent identity theft.
• HIPAA (45 C.F.R. Parts 160 and 164). Governs health information privacy and gives rights to access and amend medical records.
• Tax confidentiality and taxpayer rights (26 U.S.C. § 6103 and § 7803(a)(3)). Protect return information and the right to challenge the IRS’s position.
• State laws. Many states have identity theft statutes, child credit freeze laws and procedures to correct records, so check your state’s rules.

Can Parents Prevent Child Identity Theft?

Nothing guarantees prevention, but you can reduce risk:

1. Limit who gets the SSN. Ask why it is needed, whether it is mandatory and whether an alternative is acceptable.
2. Lock up documents. Birth certificates, passports, SSN cards and medical records should be stored securely, and should not be photographed and posted.
3. Read school and medical forms before completing them.
4. Secure online accounts and devices with unique passwords, updates and multi-factor authentication.
5. Share less about your child online. Avoid full names with birth dates, school names and documents.
6. Respond to breach notices by finding out what was exposed and what the organization recommends.
7. Consider a credit freeze early. Many parents freeze a child’s file before any problem appears.
8. Teach older kids about phishing, fake game offers and why not to share their SSN.
9. Shred old papers with identifying information.
10. Check yearly. Look for a credit file around the time a teen starts thinking about loans or jobs, and review it as the child approaches adulthood.

What Happens When the Child Turns 18?

Fraud found later can be harder to untangle. A young adult should get their credit reports, identify unfamiliar accounts, dispute them with a copy of any earlier reports, and consider a freeze or fraud alert. Check tax, employment and medical records too, because fixing credit does not correct IRS, SSA or provider records. Parents should keep documents from earlier disputes, since they help show when the problem began.

Does Child Identity Theft Affect Credit Scores?

It can. If a thief opens accounts and the activity is reported, unpaid fraudulent accounts can create negative information that surfaces when the person applies for credit. But a child’s file may also exist because of an error or an authorized-user account, so confirm what is actually on the report.

Is Child Identity Theft a Crime?

Using another person’s identifying information without authority can violate federal or state law, depending on the conduct. A suspicious account does not by itself show who committed a crime. Parents can report to the FTC, contact the affected organization, and contact law enforcement. A qualified attorney can help with significant losses, disputed liability or complex cases.

Frequently Asked Questions

How does child identity theft usually happen?

Someone gets a child’s SSN or other details through stolen documents, phishing, a data breach, unauthorized access to records, or misuse by someone who knows the family, and then tries to get credit, benefits, work or medical services.

Can a child’s identity be stolen without a credit card?

Yes. Misuse can involve jobs, taxes, benefits, medical care or new credit accounts.

Can I check if my child has a credit report?

Yes. Contact Equifax, Experian and TransUnion, ask for a search for a minor’s file, and be ready to prove your identity, address and relationship to the child.

Is a credit freeze for a child free?

Yes. Federal law makes freezes free, and parents can request them for children under 16.

Does a credit freeze stop all identity theft?

No. It helps stop new credit accounts, but not tax, employment, medical or benefits misuse.

What if someone used my child’s SSN to get a job?

Read the IRS notice and follow it, and contact the SSA about incorrect earnings. See our guide on employment identity theft.

What if someone claimed my child on a tax return?

First confirm you are entitled to claim the child. If you are and suspect unauthorized use, follow the IRS’s identity theft dependent guidance. A duplicate claim can also come from a family dispute over who qualifies.

Should I file Form 14039?

Not automatically. Check the Form 14039 filing guide and any notice you received.

Does a data breach mean my child is a victim?

No. It means information may have been exposed. Review the notice, follow recommended steps and watch for misuse.

Can a relative steal a child’s identity?

Yes. Protect the child’s information, preserve evidence and use the formal reporting and dispute channels.

Is a child responsible for debts created by identity theft?

Generally no, but you must dispute the debt in writing and provide documentation, and the creditor and bureaus must investigate.

What should I do first?

Identify the affected account or agency, report at IdentityTheft.gov, contact the organization’s fraud department, ask the bureaus to search for a file, and follow separate steps for tax, employment, benefits and medical records.

Sources

1. Federal Trade Commission: How To Protect Your Child From Identity Theft – https://consumer.ftc.gov/articles/how-protect-your-child-identity-theft
2. Consumer Financial Protection Bureau: How do I check to see if a child has a credit report? – https://www.consumerfinance.gov/ask-cfpb/how-do-i-check-to-see-if-a-child-has-a-credit-report-en-1865/
3. Federal Trade Commission: IdentityTheft.gov – https://www.identitytheft.gov
4. IRS: Identity Theft Dependents – https://www.irs.gov/identity-theft-fraud-scams/identity-theft-dependents
5. IRS: Employment-Related Identity Theft – https://www.irs.gov/identity-theft-fraud-scams/employment-related-identity-theft
6. Social Security Administration – https://www.ssa.gov
7. Experian, Equifax and TransUnion (official sites for minor credit file searches and freezes) – https://www.experian.com, https://www.equifax.com, https://www.transunion.com
8. U.S. Code and regulations: 18 U.S.C. §§ 1028, 1028A; 42 U.S.C. § 408; 15 U.S.C. §§ 1681 et seq., 1692, 6501; 20 U.S.C. § 1232g; 26 U.S.C. §§ 6103, 7803; 45 C.F.R. Parts 160 and 164 – https://www.law.cornell.edu/uscode

Disclaimer: This article provides general information about child identity theft in the United States. It is not legal, tax or financial advice. Procedures vary by type of fraud and organization. Parents and guardians should follow official agency instructions for their situation. AllAboutLawyer.com is a consumer legal information website, not a law firm.