Breaches & Passwords
Child Identity Theft: Warning Signs for Parents (2026)
The short version
Children are attractive targets because a child's Social Security number has no credit history and nobody is watching it, so fraud can run for a decade before anyone looks. The early signs are mail, bills, or collection calls in your child's name, a denied government benefit, or an IRS letter. The late signs arrive at 18: a rejected student loan, apartment, or first credit card. You can check for a credit file at all three bureaus with a manual search, and under federal law parents of children under 16 can freeze a child's credit for free.
What child identity theft actually is
Child identity theft is when someone uses a minor's Social Security number, name, or date of birth to get credit, services, or benefits. The FTC lists the typical uses: applying for government benefits, opening a bank or credit card account, taking out a loan, signing up for utilities, or renting a home. The child rarely finds out until adulthood.
The distinctive thing about this crime is the time lag. An adult's misused identity usually trips a declined card or a strange statement within months. A child has no such tripwires: nobody runs their credit or sends them statements, so the theft sits quietly, accruing debt and defaults, until the child's first real financial step exposes it.
Why thieves target children in the first place
A child's Social Security number is valuable precisely because it is blank. It has no credit file, no fraud alerts, and no owner checking it, so a thief can attach a different name and birth date to it and build a "synthetic" identity lenders eventually trust. The Federal Reserve Bank of Boston says children are often targeted for exactly this reason.
The Boston Fed's 2022 explainer describes how the scheme works. The fraudster combines a real Social Security number with fabricated details and applies for credit. The first application is usually rejected because there is no history, but the rejection itself creates a credit file. The fraudster keeps applying until something is approved, then builds a positive history on the synthetic identity to unlock bigger limits before walking away. The Fed put synthetic identity fraud losses at an estimated $20 billion in 2020.
How common it really is (and why the official numbers look small)
Honest answer: nobody has a clean national count, because the crime is defined by going unnoticed. The FTC's own complaint data makes children look like the least-affected group, but that is a measurement problem. Most child victims do not appear in any statistics until they are adults, at which point they are counted as adult victims.
| Age of person reporting | Identity theft reports, 2024 |
|---|---|
| 19 and under | 21,420 |
| 20 to 29 | 187,195 |
| 30 to 39 | 291,807 |
| 40 to 49 | 207,658 |
| 50 to 59 | 135,758 |
| 60 to 69 | 83,485 |
| 70 to 79 | 36,790 |
| 80 and over | 9,605 |
Source: FTC Consumer Sentinel Network Data Book 2024, "Identity Theft Reports by Age" (reports where an age was provided).
Industry research fills in some of the gap, with caveats. Javelin Strategy & Research's 2022 Child Identity Fraud Study, sponsored by AARP and Savvy Cyber Kids, estimated that 915,000 US children were victims of identity fraud in the prior year, at an average cost of $1,128 per affected household, and found children under 7 were the most likely to be victimised. Those are survey-based estimates from a commercial research firm, so treat them as an order of magnitude, not a precise count.
The study most often quoted is older still. In 2011, Carnegie Mellon's CyLab analysed identity-protection scans of 42,232 children run by AllClear ID and found that 4,311 of them, 10.2 percent, had someone else using their Social Security number, roughly 51 times the adult rate in the same data. The youngest victim was five months old. The children had all been enrolled in a protection service, so the author cautioned it was not a random sample, but it remains the clearest evidence that the problem starts young.
Warning signs that surface early
The first clues are almost always things that should not exist for a child: mail, bills, or calls that treat your seven-year-old as an adult with accounts. The FTC's list is short and specific, and every item on it is worth acting on the same day rather than filing away as a mistake.
- A call or letter about an overdue bill in your child's name for an account you never opened.
- A denial of government benefits, such as health coverage or nutrition assistance, because someone is already using your child's Social Security number to claim them.
- A letter from the IRS about unpaid income taxes for your child, which can happen when someone used the number on employment forms for a job.
- Pre-approved credit card or loan offers addressed to a young child. Marketing lists are built from credit files, so offers can mean a file exists.
- A notice that your child's data was in a breach from a school, paediatrician, or app. Javelin's 2022 study estimated 1.7 million US children had personal information exposed in breaches in a single year, about 1 in 43.
None of these prove theft on their own, but two together, or one plus a name that is not quite your child's, is reason enough to run the credit check described below.
Warning signs that surface years late
The second wave of signals arrives when the child becomes financially visible, usually between 16 and 22. The FTC's headline example is a student loan denied because the applicant "has bad credit" despite never having had a card. By then the fraud may be a decade old, with defaults, collections, and sometimes a criminal record attached to the number.
Other late signs look like ordinary adult setbacks and are easy to misread: a first apartment rejected for a credit score the teenager cannot explain, a job offer held up because a background check found employment history in another state, a tax refund rejected because a return was already filed under that number. Each tends to be treated as a paperwork glitch, and the real cause stays hidden for another year.
A useful rule: if your child is under 18 and any institution behaves as though they already have a financial history, treat that as a warning sign until a credit check proves otherwise. Our guide to the early signs of adult identity theft covers the same signals for older teens who have started building credit legitimately.
Who is usually behind it
Uncomfortably often, someone the family knows. Javelin's 2022 study found that in 67 percent of households with a child victim, the family knew the perpetrator personally. Family fraud, where a parent or relative with easy access to the child's documents uses the number to get past their own bad credit, is a large share of cases and the hardest to report.
The rest is the same machinery that drives adult identity theft. Breaches at schools, paediatric practices, and youth apps leak Social Security numbers in bulk, and once a number is in circulation it can be resold repeatedly, so a breach notice you received when your child was three can produce fraud when they are twelve. If you are unsure whether the number has ever leaked, our post on checking whether a Social Security number was exposed walks through what can and cannot be checked.
How to check whether your child has a credit file
Ask each of the three national credit bureaus to run a manual search for your child's Social Security number. The FTC says a child under 18 generally should not have a credit report, so the goal is a clear "no file found" from Equifax, Experian, and TransUnion. A file you did not create is what you are looking for.
Because a minor cannot verify their own identity the way an adult does, the bureaus require paperwork. The FTC lists what you will likely need: a copy of your driver's licence or other government ID, proof of your address such as a utility bill or insurance statement, the child's birth certificate, and the child's Social Security card. If you are a guardian rather than a parent, add the court order or other document that proves you can act for the child.
Process details differ by bureau. Experian lets minors 14 and older (or their parents) submit online, takes requests for children 13 and under by mail or secure upload, and says it responds within 10 to 15 days with either the report or a letter confirming it holds nothing on the minor. Equifax handles minor requests by post, and TransUnion publishes its own "protected consumer" instructions. The FTC keeps current links to all three at IdentityTheft.gov.
How to freeze a child's credit for free
A security freeze blocks anyone from opening new credit using your child's number, and since September 21, 2018, federal law has required all three bureaus to offer it free to parents and guardians of children under 16. If the bureau has no file for your child, it creates one solely to freeze it, and that record cannot be used for credit.
You must freeze at each bureau separately, and the paperwork is the same set used for a credit check: proof of your identity, proof of the child's identity, and proof of your relationship. Equifax's minor-freeze FAQ says that once documents arrive it may take up to three business days to create and freeze the file, and the freeze stays in place until you or, after their 16th birthday, the child asks to lift it. Minors aged 16 or 17 can request their own Equifax freeze by phone or mail.
A freeze does nothing about accounts already opened, and it will not stop someone using the number for employment, medical care, or a tax return. But it closes the most valuable door, new credit, which is exactly what synthetic-identity fraud depends on. For the adult version of this process, see our guide to freezing your credit at all three bureaus.
Two more locks parents overlook
Beyond the credit freeze, two other protections cost nothing and cover gaps the freeze does not. An IRS Identity Protection PIN stops anyone else filing a tax return under your child's number, and children in foster care are entitled by law to a yearly credit check from the age of 14. Both are underused.
The IRS says parents and legal guardians can request an IP PIN for a dependent. A child under 18 cannot use the online-account route, so you apply either with Form 15227 (available if your income is under $84,000, or $168,000 for joint filers) or in person at a Taxpayer Assistance Center. Once issued, the PIN must accompany any return that lists the child, which blocks the common scam of a stranger claiming your child as a dependent for the refund.
For foster youth, a 2011 federal law required state child welfare agencies to give young people in care aged 16 and over a free annual credit report and help fixing errors, and the Preventing Sex Trafficking and Strengthening Families Act of 2014 lowered that age to 14. If you are a foster parent or caseworker, that report is the child's right and the best early-warning check available.
What to do if you find fraud
Act in the order the FTC recommends: close the fraudulent accounts, clean the credit files, then file an official report. Contact the fraud department of each company where an account was opened, tell them it was opened with a minor's stolen information, ask them to close it, and get written confirmation that your child is not responsible for the debt.
Next, tell all three credit bureaus that the file belongs to a minor and was created by fraud, ask them to remove the fraudulent items, and place the freeze if you have not already. Then file an FTC identity theft report at IdentityTheft.gov on your child's behalf. It generates a recovery plan and pre-filled letters, and it is the document companies expect when you dispute a debt for a minor.
Keep everything in one folder. A resold number can be reused for years, and having the original report and confirmation letters to hand turns a repeat incident from a crisis into a form.
Shrink the exposure that feeds it
The number cannot be changed, so the practical defence is limiting who holds it and how much surrounding detail is public. The FTC's first piece of advice is to ask why before handing over a child's Social Security number: schools, sports leagues, and clinics often request it out of habit and will accept a different identifier or the last four digits.
Shred documents that carry the number, wipe old phones before selling them, and be stingy with the full name, birth date, and home address combination that turns a leaked number into a usable identity. Much of that detail comes from the family's own footprint: people-search sites list parents' addresses, relatives, and ages, and a child's name often appears in the "relatives" field. Our guide to protecting your kids' privacy online covers the school, app, and social media side.
For the adult side, run a free exposure scan to see whether your email has been in a breach and which data brokers likely list your household, then use the step-by-step opt-out guides to remove the listings that expose your family's address and relatives. Fewer public facts about the parents means a thinner file for anyone building an identity around the child.
Check the household's exposure
See whether your email is in a known breach and which data brokers likely publish your address and relatives - free, no account, nothing stored.
Frequently asked questions
Should my child have a credit report?
Generally, no. The FTC says a child under 18 usually will not have a credit report, and if one exists it can be a sign of identity theft. The exception is a file a parent deliberately created by placing a protective freeze, which cannot be used for credit.
How do I check if someone is using my child's Social Security number?
Ask each of the three credit bureaus for a manual search of your child's Social Security number. You will need to prove your own identity, your address, the child's identity (birth certificate and Social Security card), and your relationship to the child. Experian says it responds within 10 to 15 days.
Is it free to freeze my child's credit?
Yes. Under a federal law in effect since September 21, 2018, parents and guardians of children under 16 can place and lift a security freeze at Equifax, Experian, and TransUnion at no cost. If no file exists, the bureau creates one purely to freeze it.
What are the first warning signs of child identity theft?
The FTC lists collection calls or bills for accounts you never opened, a denial of government benefits because the child's number is already in use, an IRS letter about unpaid taxes in the child's name, and a student loan denial for bad credit. Pre-approved credit offers addressed to a young child are another common early tell.
Why do identity thieves prefer children's Social Security numbers?
A child's number has no credit history attached and nobody is watching it, so fraud can run for years before anyone looks. The Federal Reserve Bank of Boston notes children are often targeted for synthetic identity fraud precisely because the theft can go undetected until they apply for credit or a job.
Can my teenager freeze their own credit?
Partly. The federal parent-request right covers children under 16. Equifax says minors aged 16 or 17 can request their own freeze by phone or mail, and Experian lets minors 14 and older submit requests online. Under 18, a parent or guardian usually still handles the paperwork.
What should I do if I find accounts in my child's name?
Contact each company's fraud department, ask them to close the account, and get written confirmation that your child is not responsible. Tell all three credit bureaus, ask them to remove the fraudulent items and freeze the file, then file a report at IdentityTheft.gov to get a personalised recovery plan.
Does an IRS Identity Protection PIN work for a child?
Yes. The IRS says parents and legal guardians can request an IP PIN for a dependent. Because a child under 18 cannot use the online account route, you apply with Form 15227 if your income is under the IRS threshold, or in person at a Taxpayer Assistance Center.
Sources: FTC consumer guidance "How To Protect Your Child From Identity Theft" and "Credit Freezes and Fraud Alerts" (consumer.ftc.gov); FTC/CFPB consumer alert "New protections available for minors under 16"; FTC consumer alert "How to talk to your teens about credit and identity theft" (August 6, 2026); FTC Consumer Sentinel Network Data Book 2024; CFPB guidance on credit freezes for protected consumers; Equifax "Freezing Your Child's Credit Report: FAQ" and Experian minor-request pages; Federal Reserve Bank of Boston, "A victimless crime? Hardly" (August 23, 2022); Javelin Strategy & Research 2022 Child Identity Fraud Study press release (October 26, 2022); Carnegie Mellon CyLab, "Child Identity Theft" report by Richard Power (2011); IRS "Get an Identity Protection PIN"; Public Laws 112-34 and 113-183 on credit reports for foster youth.