How to Protect Yourself from Employment Identity Theft

Employment identity theft occurs when someone uses your Social Security number to get hired for a job. Unlike credit card fraud, which often triggers immediate alerts, employment identity theft can go undetected for months or even years — until you receive a tax notice for income you never earned. With the rise of remote hiring and AI-assisted application fraud, this type of identity theft is accelerating. Here is what you need to know to protect yourself and what to do if it has already happened.

What Is Employment Identity Theft?

Employment identity theft is the use of another person's Social Security number, name, or other personal information to gain employment. The person committing the fraud earns income under your identity, and that income is reported to the IRS and Social Security Administration as yours.

This creates a cascade of problems. The IRS sees a discrepancy between the income reported under your SSN and the income you actually filed on your tax return. The Social Security Administration records earnings that do not belong to you, which can affect your future benefits. And if the fraudster commits any workplace violations, those records may be linked to your name.

How It Happens

Criminals obtain Social Security numbers and personal details from several sources:

• Data breaches: Billions of records have been exposed in breaches over the past decade, and SSNs are among the most commonly leaked data points
• Data broker sites: People search sites and data aggregators publish names, addresses, phone numbers, dates of birth, and in some cases partial SSNs — giving criminals enough information to construct a convincing employment application
• Dark web marketplaces: Stolen SSNs are bought and sold in bulk for as little as a few dollars each
• Phishing and social engineering: Fraudulent job postings, fake background check requests, and impersonation scams trick people into handing over their SSN directly
• Physical theft: Stolen mail, discarded documents, and wallet theft remain common sources of SSN compromise

In 2026, the problem has grown more complex. Investigations have revealed networks of fraudulent workers using stolen or synthetic identities to secure remote positions at companies worldwide. The shift to remote hiring has made it easier for bad actors to pass employment verification checks without appearing in person.

Warning Signs of Employment Identity Theft

Watch for these red flags that may indicate someone is working under your identity:

• IRS notices about unreported income: If you receive a CP2000 or other IRS notice stating that your tax return does not match the income reported under your SSN, employment identity theft is a likely cause
• Unexpected W-2 or 1099 forms: Receiving tax documents from an employer you have never worked for is one of the clearest indicators
• Social Security earnings discrepancy: If your Social Security Statement shows higher earnings than you actually received, someone else's income is being attributed to you
• Denied government benefits: Your eligibility for unemployment benefits, Medicaid, or other income-based programs may be affected if unreported income inflates your apparent earnings
• Background check issues: When applying for a job, your background check may return employment history that does not belong to you
• IRS CP01E notice: The IRS sends this notice specifically when it believes your SSN has been used by someone else for employment purposes
• State tax notices: You may receive notices from states where you have never lived or worked, indicating income was reported there under your SSN

How to Resolve Employment Identity Theft

If you suspect or have confirmed that someone is using your identity for employment, take the following steps:

1. Get an IRS Identity Protection PIN

The IRS Identity Protection PIN (IP PIN) is a six-digit number that prevents anyone else from filing a tax return using your Social Security number. You can request one through the IRS Get an IP PIN tool at irs.gov. Once activated, you must include this PIN on your tax return each year, and anyone filing without it will be rejected.

2. Report to the IRS

If you have received a notice about income you did not earn, respond to the IRS immediately. You may need to file IRS Form 14039, the Identity Theft Affidavit, and you can contact the Identity Protection Specialized Unit at 800-908-4490 for direct assistance.

3. File an FTC Identity Theft Report

Go to IdentityTheft.gov to file a report with the Federal Trade Commission. The FTC will generate a recovery plan with specific steps tailored to your situation and provide documentation you can use when working with the IRS, employers, and other agencies.

4. Review Your Social Security Earnings

Create or log in to your account at ssa.gov and review your earnings record. If you see income you did not earn, contact the Social Security Administration to dispute the incorrect entries and ensure your benefits are not affected.

5. Lock Your SSN in E-Verify

The Department of Homeland Security's E-Verify system allows you to lock your Social Security number so that it cannot be used for employment verification by any employer. This is called a Self Lock and can be set up at e-verify.gov. You can unlock it temporarily if you are starting a new job.

6. Freeze Your Credit

While employment identity theft is different from credit fraud, the same stolen SSN can be used for both. Place a credit freeze at all three major bureaus — Equifax, Experian, and TransUnion — to prevent new credit accounts from being opened in your name. This is free and does not affect your credit score.

7. File a Police Report

File a report with your local law enforcement. While police may not investigate the case directly, the report creates an official record that can be useful when disputing fraudulent records with the IRS, SSA, and employers.

How Data Brokers Fuel Employment Identity Theft

Data brokers are one of the primary enablers of employment identity theft. Sites like Spokeo, WhitePages, BeenVerified, and TruePeopleSearch publish detailed personal profiles that include names, addresses, phone numbers, dates of birth, relatives' names, and more. This information gives criminals the building blocks they need to pass employment verification and background checks using your identity.

Removing your information from these sites reduces the raw material available to fraudsters. However, doing this manually is impractical — there are hundreds of data broker sites, each with a different opt-out process, and many re-list your information within weeks of removal.

A data removal service like PrivacyOn automates this process. PrivacyOn continuously monitors 100+ data broker and people search sites, submitting removal requests on your behalf and re-submitting them when brokers rebuild your profile. Combined with dark web monitoring that alerts you if your SSN or other sensitive data appears in underground marketplaces, PrivacyOn addresses both the public and hidden channels where your information is exposed.

Prevention: Protecting Yourself Before It Happens

The most effective defense against employment identity theft is reducing your exposure before your information is misused:

• Lock your SSN in E-Verify: This is the single most direct prevention measure for employment identity theft specifically
• Request an IRS IP PIN: Even if you have not been a victim, the IP PIN protects your tax account proactively
• Remove your data from broker sites: Use a service like PrivacyOn to keep your personal information off the sites where criminals find it
• Monitor your credit reports: Check all three bureaus at least annually through AnnualCreditReport.com and look for unfamiliar accounts, addresses, or inquiries
• Review your Social Security earnings yearly: Log in to ssa.gov to confirm that only your actual earnings are recorded
• Guard your SSN carefully: Never provide your Social Security number unless absolutely required, and question any employer or recruiter who asks for it before a formal job offer
• Beware of phishing: Be skeptical of unsolicited job offers, especially those that request personal information upfront — legitimate employers do not ask for your SSN during the initial application process

The Bottom Line

Employment identity theft is a growing threat that can create serious tax, financial, and legal problems that take months or years to resolve. The combination of massive data breaches, readily available personal information on data broker sites, and the expansion of remote hiring has made it easier than ever for criminals to work under someone else's identity. Protect yourself proactively by locking your SSN in E-Verify, getting an IRS Identity Protection PIN, freezing your credit, and using a data removal service like PrivacyOn to reduce your exposure across the data broker ecosystem.