Employment Identity Theft, How It Occurs And What To Do

Someone may be using your Social Security number to work without your knowledge. You might find out when you receive a W-2 from an employer you never worked for, see unfamiliar wages on your Social Security earnings record, or get an IRS notice about income you never earned.

This is employment identity theft: using another person’s Social Security number (SSN) or other identifying information to get a job or have wages reported under that person’s identity without permission. It is different from tax identity theft, where a thief files a fake return to steal a refund, and from Social Security identity theft in general, although the three can overlap.

The key point is that an unfamiliar wage record does not automatically mean you owe tax or lost money. What you should do depends on which records are affected: your IRS tax account, your Social Security earnings record, your credit, or only the employer’s payroll records.

Employment Identity Theft: Quick Facts

Question	Answer
What is it?	Using someone’s SSN or identifying information to get or report work without permission
Information misused	SSN, name, date of birth, identity documents
Who can be a victim?	Workers, retirees, children and people who never file tax returns
Common warning signs	Unfamiliar W-2 or 1099, IRS notice about income you did not earn, unfamiliar wages on your Social Security record
First agency to contact about wrong earnings	Social Security Administration (SSA), 1-800-772-1213
Where to report identity theft	IdentityTheft.gov (Federal Trade Commission)
Must I pay tax on wages I never earned?	No. Follow the notice and dispute the income
Should everyone file IRS Form 14039?	No. See the guide on IRS Form 14039, the Identity Theft Affidavit
Can I lock my SSN for E-Verify?	Yes, through myE-Verify Self Lock
Does it automatically create a tax debt?	No. The facts and the specific notice matter

What Is Employment Identity Theft?

Employment identity theft happens when a person uses someone else’s SSN to apply for a job, complete hiring paperwork or appear authorized to work, and the employer reports wages and withholding under the victim’s number.

For example, Maria has never worked for a certain construction company. Someone applies there using Maria’s SSN, works for several months, and the employer reports the wages to the IRS and SSA under Maria’s number. Maria later receives a W-2 from a company she has never heard of. The wages belong to the person who did the work, but the records now point to her.

This can happen even if the victim has never applied for a job, is retired, is a child, or does not file taxes.

It is also not always the work of organized criminals. A thief may be using a stolen number, but some cases come from a payroll clerk’s typing mistake, a person reusing a number they were once given, or an SSN supplied without the owner’s knowledge. Government agencies often treat these as possible misuse and warn the true SSN owner as a precaution, so an unfamiliar wage record is a reason to investigate, not proof of a crime.

How Does Employment Identity Theft Occur?

A person needs enough information to make hiring paperwork look real. Common sources include:

Data breaches. Employers, hospitals, schools, banks and government agencies hold SSNs and dates of birth. A breach does not prove misuse, but stolen data may be sold or used.
Stolen documents or mail. A Social Security card, tax form, pay stub or wallet can supply everything needed. Keep your card in a safe place instead of carrying it.

Phishing and fake job scams. Fake recruiters and phony job posts ask applicants for an SSN, address and ID “for screening.” Verify any employer through an official website or phone number you found yourself.
Compromised accounts. A hacked email or cloud account can hold photos of IDs and tax forms.
Insider theft. A person with access to personnel or payroll records can copy and sell SSNs.

Dark web purchases and synthetic identities. Stolen numbers are traded online, and some thieves combine a real SSN with a made-up name.

If you have already suffered a breach or theft, start with Identity Theft Victim? Do These Steps First.

How the fraud works in practice

Hiring paperwork. The worker gives the stolen SSN, often with a fake or borrowed ID, on Form I-9 and tax withholding forms. Employers must examine documents that appear genuine, but they are not expected to be forgery experts.
E-Verify. Many employers use E-Verify, which checks whether the name and SSN match government records and show work authorization. It does not prove the person in front of the employer is the true owner of the number.
Payroll. The employer withholds taxes and files a W-2 (or sometimes a 1099) under the SSN.
Mismatch detection. The SSA and IRS compare names, numbers and wages. The IRS may flag your account with an employment-related identity theft indicator and send a CP01E notice. Wages with a name that does not match the SSA’s records may land in the SSA’s Earnings Suspense File.

Why people commit it

Motives include working without authorization, hiding a criminal record or child support obligations, avoiding background checks, or simply needing income. The motive does not change the harm to the victim.

Employment Identity Theft, How It Occurs, Warning Signs and What to Do If Someone Uses Your SSN to Get a Job (2026)

Where Does Employment Identity Theft Show Up?

Where	What you may see	What it may mean
IRS notice CP01E	Notice about possible employment-related identity theft	IRS flagged your SSN used for work. It is informational and typically has no current effect on your account
IRS notice CP2000 or similar	Proposed tax on income you did not report	The IRS matched wages under your SSN to your return and assumes they are yours
Form W-2 or 1099	Form from an employer or payer you do not recognize	Payroll reported income under your number
Rejected e-file	Duplicate SSN message	Another return or wage record already uses your SSN
SSA earnings record	Wages from jobs you never held	Earnings credited to your record
State unemployment office	Benefits denied because “you are working”	Someone is on a payroll under your SSN
Background or credit checks	Unfamiliar employment entries	The fraud may extend beyond payroll

Before assuming theft, check whether the unfamiliar name is a payroll provider, staffing agency, former employer or a business operating under a different name.

Laws and Rules Behind Employment Identity Theft

This is general information, not legal advice.

Criminal laws

Identity theft (18 U.S.C. § 1028(a)(7)). Knowingly using another person’s identification with intent to commit a federal crime, or a state or local crime, is a federal offense.
Aggravated identity theft (18 U.S.C. § 1028A). Using another person’s identity during certain felonies adds a mandatory consecutive prison term.
Misuse of a Social Security number (42 U.S.C. § 408(a)(7)(B)). Falsely representing an SSN as one’s own is a federal crime.
False statements and document fraud (18 U.S.C. § 1001 and 8 U.S.C. § 1324c). Using false documents in the hiring process can violate these laws. Related immigration document fraud provisions may also apply.

These are not always charged, and prosecutions for employment-only misuse are uncommon, but the conduct can be criminal.

Employer rules

Form I-9 and the Immigration and Nationality Act (8 U.S.C. § 1324a). Employers must verify identity and work authorization and examine documents that reasonably appear genuine. They are not required to detect every forgery.
Wage reporting (26 U.S.C. § 6051). Employers must furnish W-2s and report wages to the government under the number the employee gives them. Reporting penalties for errors appear in 26 U.S.C. §§ 6721 and 6722.
E-Verify. A federal program run by the Department of Homeland Security and the SSA to confirm work authorization.

Social Security and tax rules

Earnings records (Social Security Act § 205(c), 42 U.S.C. § 405(c)). The SSA maintains each person’s lifetime earnings history. Time limits apply for correcting records, generally about three years, three months and fifteen days after the year in question, with exceptions for fraud and obvious errors. Check your record early.
Tax confidentiality (26 U.S.C. § 6103). Your return information is confidential, which is why agencies may ask you to prove identity.
Taxpayer rights (26 U.S.C. § 7803(a)(3)). You have the right to challenge the IRS’s position and be heard.
Taxpayer Advocate (26 U.S.C. § 7811). Provides help in cases of significant hardship.

Credit rules

Fair Credit Reporting Act (15 U.S.C. §§ 1681c-1 and 1681c-2). Lets you place free credit freezes and fraud alerts, and request blocking of identity theft information from credit reports with an identity theft report.

A common misconception: the Red Flags Rule

The FTC’s Red Flags Rule (16 C.F.R. § 681.1) requires financial institutions and creditors with covered accounts to run identity theft prevention programs. It is not a general rule for employers hiring workers, so do not assume an employer broke it simply because an imposter was hired.

State laws also exist. Many states have identity theft statutes, credit freeze laws and record-correction procedures that may help you.

What Are the Warning Signs?

A W-2 or 1099 from an employer or payer you do not recognize.
Wages on your Social Security record from a job you never held.
An IRS notice about income you did not earn.
An IRS CP01E notice. According to the IRS, it is informational and notes potential employment-related identity theft with no known effect on your tax account at that time.
A tax return rejected because an SSN is already in use.
State unemployment benefits denied because you appear to be employed.
Notice from the SSA that benefits were adjusted or denied because of wages you do not recognize.
Exposure of your SSN in a breach or scam.

These signs mean different things. An unfamiliar W-2 may need an SSA correction. An IRS notice about unreported income needs an IRS response.

What to Do If Someone Uses Your SSN to Get a Job

Step 1: Read any IRS notice carefully

Check that the notice is real, and follow its instructions and deadlines. If you receive a CP2000 notice listing wages you did not earn, contact the IRS using the phone or fax number on the notice. Do not add the unfamiliar wages to your return, and do not file an amended return just because those wages appear. If you receive CP01E, it is informational. Follow its suggestions to protect your accounts and review your records.

Step 2: Check and correct your Social Security earnings record

Sign in to your my Social Security account and review your earnings history. Note the years and employers you do not recognize. If wages are not yours, ask the SSA to correct the record, online if available, by phone at 1-800-772-1213, or at a local office. The SSA may ask you to complete Form SSA-7008, Request for Correction of Earnings Record, with supporting information. Act promptly because of the time limits on corrections.

Step 3: Report the identity theft to the FTC

Use IdentityTheft.gov to file a report and get a personal recovery plan. The report can serve as an identity theft report when you dispute information with credit bureaus and creditors. It does not itself correct IRS, SSA or employer records, so you may still have to contact each agency. For more places to report, read Where Is the Best Place to Report Identity Theft?

Step 4: Contact the employer when appropriate

If you can identify the employer, contact its payroll or HR department through a verified phone number or email, not a number from a suspicious message. Explain that the wages were reported under your SSN but you never worked there, and ask what the process is to correct the wage report. Keep copies. Contacting the employer alone does not fix government records.

Step 5: Decide whether you need IRS Form 14039

Not automatically. The IRS says most people do not need the affidavit, and it is designed for certain tax-related identity theft situations. In many pure employment cases it is not required, particularly if the IRS has sent you a notice with its own instructions. Do not file it if you already filed for the same incident or if the IRS tells you to use its verification service. For details on when to use it, read the guide to IRS Form 14039, the Identity Theft Affidavit.

Step 6: Get an IRS Identity Protection PIN

An IP PIN is a six-digit number that helps stop someone from filing a federal return under your SSN. It protects against certain tax return fraud, but it does not stop someone from applying for a job with your SSN.

Step 7: Lock your SSN in E-Verify

The Department of Homeland Security’s myE-Verify service offers a Self Lock feature that blocks use of your SSN in E-Verify and Self Check. It generally expires after a year and can be renewed. If you apply for a job that uses E-Verify, you must unlock first. It does not erase wages already reported and does not block every possible use of your number.

Step 8: Consider a credit freeze or fraud alert

If the misuse may be broader, freeze your credit with Equifax, Experian and TransUnion. Freezes are free. A fraud alert asks creditors to verify your identity before opening new credit. These tools do not correct employment records, but they reduce the risk that the same stolen information is used to open accounts.

Step 9: Check state unemployment and benefits

If a state agency denied benefits because you appear to be working, contact the state workforce agency and report that the wages are not yours.

Step 10: Keep records

Save copies of notices, letters, dates, phone call details and confirmation numbers.

Can Employment Identity Theft Affect Your Taxes or Benefits?

Taxes. The IRS may see income in its records that you did not report because you never earned it. You are generally not required to pay tax on wages that are not yours, but you must respond to the notice and explain the discrepancy. This differs from refund fraud, where a thief files a return in your name. See What Is Tax Identity Theft and How Can It Occur?

Social Security. Incorrect earnings on your record can distort the history the SSA uses to calculate benefits if they are not corrected. Employment identity theft does not automatically reduce or cancel retirement, disability or survivor benefits.

Credit and finances. Employment fraud may stay limited to payroll records, but if the same information was used for credit, benefits or tax fraud, address those separately and check your credit reports.

How to Prevent Employment Identity Theft

No step is a guarantee, but these help:

Protect your SSN. Keep your card safe and ask why someone needs your number before giving it.
Verify recruiters. Be wary of any unknown recruiter asking for an SSN or ID before you have verified the employer.
Watch for phishing by email, text, phone and fake websites.
Secure accounts with unique passwords and multi-factor authentication, especially email, payroll and tax accounts.
Review your earnings record in your my Social Security account at least once a year.
Review IRS account transcripts for unfamiliar wage information.
Use an IRS IP PIN even if you have never been a victim.
Use myE-Verify Self Lock if it fits your situation.
Freeze your credit, and consider freezing a child’s credit file too, since children’s SSNs are attractive to thieves.
Act quickly after a breach. Follow the notice and FTC guidance.

Frequently Asked Questions

How does employment identity theft occur?

Someone uses another person’s SSN and identifying information to get a job or have wages reported. The information may come from a breach, phishing, stolen documents or insider theft.

How can I tell if someone is using my SSN for a job?

Look for an unfamiliar W-2 or 1099, wages on your Social Security record you did not earn, or an IRS notice about income you did not earn. Mistakes and reporting errors can also cause these, so investigate first.

Do I owe tax on someone else’s wages?

Not automatically. Follow the instructions on the IRS notice and contact the IRS. Do not report another person’s wages as your own.

What is an IRS CP01E notice?

A notice telling you the IRS identified potential employment-related identity theft involving your SSN. It is informational and does not itself change your tax account.

Should I file Form 14039?

Not in every case. Follow any IRS notice, and read the Form 14039 filing guide to see whether your situation qualifies.

Can it affect my Social Security benefits?

It can affect your earnings record if wrong wages are not corrected. Contact the SSA to review and fix the record.

Can I stop someone from using my SSN for a job?

myE-Verify Self Lock helps block use of your SSN in E-Verify and Self Check, but it does not block every use and you must unlock it to use E-Verify yourself.

What if I get a W-2 from an employer I never worked for?

First check whether it is a payroll provider or staffing agency. If the wages are not yours, follow the IRS’s instructions and contact the SSA. Do not add them to your return.

Can a child or retired person be a victim?

Yes. Anyone with an SSN can be a victim, whether or not they work or file taxes.

Does it mean my tax account is compromised?

No. The IRS may flag potential employment identity theft without any current effect on your tax account.

Where should I report it?

Report at IdentityTheft.gov, contact the SSA about wrong earnings, and follow the IRS’s instructions on notices. Each agency handles a different part of the problem.

Is this the same as Social Security identity theft?

It is one form of it. For broader coverage, read What Is Social Security Identity Theft? How It Happens and What to Do About It.

Sources

IRS: Employment-Related Identity Theft – https://www.irs.gov/identity-theft-fraud-scams/employment-related-identity-theft
IRS: Understanding Your CP01E Notice – https://www.irs.gov/individuals/understanding-your-cp01e-notice
IRS: Identity Theft Guide for Individuals – https://www.irs.gov/identity-theft-central/identity-theft-guide-for-individuals
IRS: Data Breach Information for Taxpayers – https://www.irs.gov/identity-theft-fraud-scams/data-breach-information-for-taxpayers
IRS: Identity Protection PIN – https://www.irs.gov/ippin
SSA: Correct Earnings That Are Not Yours – https://www.ssa.gov/faqs/en/questions/KA-10123.html
SSA: What to Do if You Think Someone Is Using Your SSN – https://www.ssa.gov/faqs/en/questions/KA-02238.html
SSA: my Social Security account – https://www.ssa.gov/myaccount
FTC: IdentityTheft.gov – https://www.identitytheft.gov
FTC: What to Know About Tax Identity Theft – https://consumer.ftc.gov/articles/what-know-about-tax-identity-theft
DHS: myE-Verify Self Lock – https://www.e-verify.gov/mye-verify
U.S. Code: 18 U.S.C. §§ 1001, 1028, 1028A; 42 U.S.C. §§ 405(c), 408(a)(7)(B); 8 U.S.C. §§ 1324a, 1324c; 26 U.S.C. §§ 6051, 6103, 6721, 6722, 7803, 7811; 15 U.S.C. §§ 1681c-1, 1681c-2; 16 C.F.R. § 681.1 – https://www.law.cornell.edu/uscode

Bottom line: An unfamiliar wage record or tax notice deserves attention, but it does not automatically mean you owe money or lost benefits. Review your records, follow each agency’s instructions, and report and correct any confirmed errors.

Disclaimer: This article is general information only and is not legal, tax or financial advice. AllAboutLawyer.com is a consumer legal information website, not a law firm or tax advisor.