Child Identity Theft: How It Occurs and How to Protect Your Child

Child identity theft can stay hidden for years. Because a child cannot apply for credit, the fraud tends to surface only when they reach adulthood and apply for a first student loan, credit card, or apartment, then find accounts already opened in their name.

The Federal Trade Commission reported that child identity theft rose 40% between 2021 and 2024, and the Identity Theft Resource Center estimates that around one in 50 children is affected each year. Javelin's 2024 Child and Family Cybersecurity Study puts the exposure even higher, finding that one in 43 US children had their personal information compromised in a single year.

A child's Social Security number carries no credit history and sits unchecked in most households. As a result, misuse can continue far longer than it would for an adult before anyone notices, which is why learning to prevent child identity theft early matters.

This guide covers how child identity theft occurs, the warning signs that point to it, and the steps that protect your child's personal information before fraud begins.

Key Takeaways

●     A child's Social Security number is the target. It carries no credit history and goes unchecked for years, which lets misuse continue undetected long after it begins.

●     The thief is often someone close. The Identity Theft Resource Center finds that around three in four US cases involve a family member or someone the child knows, so prevention covers documents at home as much as strangers online.

●     A free credit freeze is the strongest single step. A protected consumer freeze locks your child's credit file against new accounts and is free by federal law. You place it at each of the three credit bureaus yourself.

●     Monitoring covers what a freeze does not. Dark web and Social Security number monitoring flag exposure early, and recovery begins with an Identity Theft Report at IdentityTheft.gov.

What is child identity theft?

Child identity theft is the use of a minor's personal information, such as their Social Security number, birth certificate, or date of birth, to commit fraud. In practice, that means opening credit accounts, applying for government benefits, renting an apartment, or filing tax returns in the child's name.

What sets it apart from adult identity theft is how long it goes unnoticed. Children cannot apply for credit until they are 18, so most parents have no reason to check a credit report that should not exist yet. The fraud can therefore continue for years, coming to light only when a young adult applies for a first credit card, car loan, or student loan and is turned down.

A child's Social Security number holds particular value for identity thieves, because it is a credit file with no history behind it and little chance of review. Some criminals go further, pairing a real Social Security number with a fabricated name and date of birth to build a synthetic identity, one that can pass verification checks and take on debt over a long period.

How child identity theft occurs

Child identity theft rarely starts with a stranger. The Identity Theft Resource Center finds that around three in four US cases involve a family member or someone the child knows, often a parent or relative with easy access to the child's SSN who uses it to open a financial account or add themselves as an authorized user.

Because the relationship makes the fraud harder to report and slower to surface, these cases tend to run the longest. In LSEG's One in Fifty campaign, one case involved a child whose identity was stolen at age six and used to register companies, leaving her named on paper for roughly $400,000 in debt by the time it was discovered.

Beyond the household, a child's data leaks the same way an adult's does. Schools, pediatric offices, and youth programs hold Social Security numbers and dates of birth, and each is a target. The December 2024 breach of the PowerSchool education platform exposed the records of roughly 62 million students, showing how a single vendor can put a generation of children's information at risk at once.

Timing matters here. Child identity theft climbs in July and August, when school registration, sports sign-ups, and after-school programs all request a child's SSN within a few weeks of each other. Each form is another copy of the number sitting in another database, so the start of the school year is the moment to be most deliberate about where that information goes.

Oversharing plays a role too. The habit has a name, sharenting, and it describes the birthday posts and first-day-of-school photos that reveal a full name, date of birth, hometown, and school. On their own, these details look harmless, yet they give identity thieves the building blocks to verify a child's identity elsewhere. Criminals can combine them with a stolen Social Security number to open credit accounts or, in the case of synthetic identity fraud, to construct an entirely new persona around the child's number. Medical identity theft follows a similar path, where a child's information is used to obtain care or prescriptions, leaving errors in a medical history that can take years to correct.

Warning signs of child identity theft

Because children have no reason to use credit, fraudulent activity shows up as small anomalies in the mail or in official notices rather than on a credit report anyone is watching. Any of the following warrants a closer look.

Suspicious mail in your child's name

Receiving pre-approved credit offers addressed to your child is one of the clearest signs, since a child with no credit history should never be targeted for one. The same applies to account statements or debt notices. Their arrival suggests someone used your child's information to apply for a credit card account or loan already.

Calls from debt collectors or collection agencies

Collection calls for debts your child could not have incurred point to accounts opened fraudulently. Treat any such contact as a prompt to check whether a credit file exists.

IRS notices about income or taxes

A notice from the Internal Revenue Service stating that your child's Social Security number appears on a tax return, or that income taxes are owed on wages they never earned, indicates the number is in use by someone else.

Denied government benefits

If an application for government benefits such as nutrition assistance or health care coverage is denied because they are already being claimed, someone may have used the child's SSN first.

Existing accounts surfacing unexpectedly

Finding an existing account when you try to open a legitimate one for your child, such as a bank account or a custodial account, is a strong indicator that their identity has already been used.

How to protect your child's personal information

Prevention comes down to controlling who can reach your child's data and locking the credit file so it cannot be used. The steps below move from everyday habits to the strongest safeguard available.

1. Share your child's Social Security number only when required

Ask whether an organization needs the full number or will accept another identifier or the last four digits. Schools, sports leagues, and medical offices often request personal identifying information out of habit rather than necessity, so it is worth questioning each time, especially during the back-to-school rush. For parents of several minor children, the same discipline applies to each child's records separately.

2. Store and dispose of documents securely

Keep your child's Social Security card, birth certificate, and any paperwork showing sensitive data in a locked file cabinet or safe, out of reach of visitors and extended family. This includes copies of a driver's license or state identification card once your teen has one. Shred documents with identifying information before disposal rather than placing them in the trash intact.

3. Freeze your child's credit

A free credit freeze, known formally as a protected consumer freeze, is the strongest single step you can take. A security freeze locks your child's credit file so no lender can open a new account against it, and federal law makes it free to place a credit freeze for children under 16. You request it separately with each of the three credit bureaus, Equifax, Experian, and TransUnion, since a freeze at one does not extend to the others.

Each needs proof of your identity, along with your child's birth certificate proof of your relationship, so expect to supply your government-issued ID with your child's birth certificate and Social Security card. For younger children the request is handled by mail, and the freeze remains until you or your child later ask for its removal.

If the bureau has no file on your child, it will create one and then freeze it, which is the intended outcome. That empty, frozen file is what blocks an identity thief from building credit on the number.

4. Ask how schools and youth organizations handle data

The institutions that collect the most information about your child often disclose the least about how they protect it. Ask your child's school how student records are stored, who can access them, and whether information is shared with third parties. Where a directory-information opt-out exists, use it to limit what can be released without your consent.

A federal COPPA update that took effect in April 2026 tightened consent and breach-notification rules for data belonging to children under 13, though faster notice only helps after a breach, which is why ongoing monitoring matters alongside it.

5. Teach children what not to share

As children move onto social platforms and games, help them understand that a full name, address, school, or birth date is worth protecting. Framing it around their own accounts and privacy, rather than fear, tends to land better and builds habits they carry forward.

How to check if your child has a credit report

Under normal circumstances, a child under 18 should not have a credit report at all. Its existence is itself a warning sign. To check, contact each of the three nationwide credit reporting agencies and request a manual search using your child's information, since their online tools are built for adults with existing files.

You will need to send copies of your child's birth certificate, their Social Security card or a Social Security Administration document showing the number, and your own government-issued ID along with proof of address such as a utility bill or insurance statement.

If the search comes back clean, move to freeze the file as described above. If it returns a report, review it for accounts, inquiries, and balances, then begin the recovery steps below. Ongoing dark web and SSN monitoring, such as the identity protection built into Bitdefender Ultimate Security, can flag a child's exposed information between these manual checks, so you are not relying on an annual look alone.

What to do if your child is a victim

Discovering that your child is among the victims of identity theft is stressful, but an ordered response contains the damage. Work through the following steps and keep written confirmation and supporting documents at each stage.

1. First, contact the companies where the fraud occurred, report the accounts as fraudulent, and send a letter requesting that they close the accounts and confirm in writing, including as many details as you can.
2. Second, create an Identity Theft Report at IdentityTheft.gov, which produces an official FTC report and a personalized recovery plan.
3. Third, notify each of the three credit reporting agencies at the mailing address each provides for disputes, place a fraud alert, and request removal of the fraudulent entries from your child's credit report.
4. Fourth, freeze the file at all three bureaus if you have not already.
5. Fifth, file a police report with your local police precinct to create an official record that lenders and agencies may require.

If a fraudulent tax return was filed, submit the IRS Identity Theft Affidavit (Form 14039) on your child's behalf, which the IRS accepts for a dependent child. Most identity theft victims recover fully with persistence, and keeping an organized child's record of every call and letter shortens the process.

How family plans help protect against child identity theft

No security product can place a credit freeze for you, since that step runs through the bureaus by law. What a family plan does is close the gap a freeze leaves open, namely spotting the exposure and misuse a freeze alone will not reveal. The PowerSchool breach illustrated the point: affected families were offered monitoring rather than a freeze, and were still advised to freeze separately.

A Bitdefender Ultimate Security family plan covers up to five people and monitors the household's identity data, scanning the dark web and public records for exposure of your family's Social Security numbers and personal information, with real-time breach notifications when something surfaces.

The Ultimate Security Plus family tiers add credit monitoring across up to three bureaus, plus identity theft insurance that helps recover out-of-pocket costs, so a fraudulent charge on a financial account or a disputed insurance statement does not fall on you alone. A dedicated resolution specialist then guides you through recovery. Alongside the identity tools, the parental controls let you manage screen time, filter content, and track a child's location across their devices, including their cell phone.

The freeze remains a step you take at the bureaus. A family plan gives you the early warning and the expert help that turn a freeze from a one-time task into ongoing protection for everyone in the household.

Frequently asked questions

How does child identity theft occur?

It most often involves someone the child knows, such as a family member with access to the child's Social Security number, who uses it to open accounts. Data breaches at schools and youth organizations, oversharing of personal details online, and synthetic identity fraud, where a real Social Security number is paired with a fake name and date of birth, account for much of the rest.

What are the warning signs of child identity theft?

Watch for pre-approved credit offers or account statements in your child's name, calls from debt collectors, IRS notices about unpaid income taxes, denied government benefits, and any existing account that surfaces when you try to open a legitimate one for them.

How do I freeze my child's credit?

Contact Equifax, Experian, and TransUnion separately and request a protected consumer freeze. Each needs proof of your identity, your child's identity, and your relationship, so supply your government-issued ID, your child's birth certificate, and their Social Security card. The freeze is free and stays in place until you request its removal.

At what age can a child have a credit report?

A child generally cannot have a credit report until they are 18 and apply for credit. Before then, the presence of a credit file usually points to fraud, or at least warrants investigation.

Can I check whether someone is using my child's Social Security number?

Yes. Contact each of the three nationwide credit reporting agencies and request a manual search using your child's details. A clean result means no file exists, which is expected, while a returned report signals that the number is already in use and recovery steps should begin.