If your number or benefits are compromised

If you're reading this because something has already gone wrong — your payment didn't arrive, your number has been used, or a letter or a bank told you that you're recorded as deceased — stop and take one breath. Every one of these has a specific fix, in a specific order. You are not the first person this has happened to, and none of it is the end of the road. This lesson is not a warning about what *might* happen (that's Lessons 149–150); it's the calm, ordered action plan for after it already has.

We'll follow Carol Meadows, 63, a retired school librarian in Tucson, Arizona. In early November 2026, Carol goes to pay a bill and notices her monthly Social Security payment never landed. She tries to log into her *my Social Security* account and her password doesn't work — someone changed it. She calls her bank, which confirms the worst: her direct deposit was rerouted to an account she's never seen. This is called an account takeover, and it is the first of our three tracks. (Everything here is in 2026 terms, the year it happens to Carol.)

That card is your map. Find the row that matches what happened and follow it — you don't have to read all three. But there's one rule that applies to every track, so let's say it before anything else: the fix is always free. Social Security, its Office of the Inspector General, and the Federal Trade Commission never charge a fee to unlock a benefit, fix a record, or recover stolen money. Anyone who offers to "speed it up" for a payment is running a second scam on top of the first (Scam Watch, below).

This is Carol's situation: a thief got into her *my Social Security* account, changed the direct deposit, and the next payment landed in their account instead of hers. It feels like a gut punch — the money is simply *gone*. But there is a precise order of operations, and the sooner Carol moves, the more can be done. The single most important step is the first one, and it can't wait for the next payment cycle.

Step 1 — Call Social Security immediately and lock the account

Carol's very first move is to call Social Security at 1-800-772-1213 (TTY 1-800-325-0778), open 8 a.m.–7 p.m. local time, Monday–Friday. She reports that her account was taken over and her deposit rerouted, and asks them to flag the account and stop any further changes. Social Security has a real tool for exactly this: a Direct Deposit Fraud Prevention block — once it's on, no one, not even Carol, can change the direct deposit or address through *my Social Security* or a bank until she comes into a local office in person. That's the point: it slams the door the thief came through. She should write down the date, who she spoke to, and any case number — she'll reference it in every later step.

Step 2 — Report it to Social Security's Office of the Inspector General (OIG)

Because actual benefit theft occurred, Carol reports it to the SSA Office of the Inspector General — the watchdog that investigates Social Security fraud. She can file online at oig.ssa.gov/report, or call the OIG fraud hotline at 1-800-269-0271 (10 a.m.–4 p.m. ET). *Reporting by phone is a real option* — it is not online-only — which matters if filling out a web form feels like too much right now. The full, field-by-field walkthrough of the OIG report is in Lesson 151 — here you only need to know that this is one of your ordered steps, and that either channel (web or phone) counts.

Step 3 — Report the identity theft to the FTC at identitytheft.gov

Next, Carol goes to identitytheft.gov — the Federal Trade Commission's identity-theft site. This is different from just filing a complaint: it builds her a personalized recovery plan, generates pre-filled dispute letters, and — importantly — creates an official record of the day she discovered the theft, which banks and bureaus will ask for. (For general scams that *didn't* involve identity theft, the FTC's other site is reportfraud.ftc.gov; for a stolen identity like Carol's, identitytheft.gov is the one.)

Step 4 — Notify her bank

Carol calls her own bank to flag the account and open their fraud process. The bank can watch for or reverse suspicious transactions and help protect the account the thief may have targeted. Banks handle this constantly; Carol just needs to say the words "I'm a victim of identity theft and benefit fraud" and follow their steps.

Step 5 — Turn on account alerts, so it can't happen quietly again

Finally — and this protects the *future* — Carol makes sure her *my Social Security* account will warn her the instant anything changes. We cover that setup in its own section next, because the best time to switch it on is before anything goes wrong. For Carol, doing it now closes the loop: report, lock, recover, and set the alarm.

Here is the question Carol is really asking: "Will I get my money back?" The honest answer has to be given carefully, because the truth is neither "of course" nor "never." Social Security investigates each case of benefit theft. In some cases — particularly where the fraud is clear or its own systems were involved — stolen benefits can be restored. But it is not guaranteed, and it is not immediate. Setting that expectation squarely is kinder than a false promise.

Let's walk Carol's timeline so the shape of it is clear (this is illustrative — not a promise of any outcome, and figures are in 2026 terms). Carol's payment was due the third Wednesday of November 2026 — Social Security pays retirement benefits on a Wednesday set by your birth date. When it doesn't arrive and she calls the same day, the account lock (the fraud-prevention block) goes on within days — that part is fast, and it stops the bleeding. The investigation into whether the stolen payment can be restored, though, runs in weeks to months, not days. During that window Carol keeps her case number handy, watches her bank and credit, and — this matters — her *future* payments still come; it's the *stolen* one whose recovery is under review.

Everything in Track 1 is what you do *after*. This section is the one that could have caught it *first*. The single most powerful defense against an account takeover is embarrassingly simple: make sure your *my Social Security* account will tell you the moment something changes — and set it up now, while nothing is wrong.

• Claim your *my Social Security* account yourself (at ssa.gov/myaccount). This one act matters more than it sounds: if you hold the account, a thief can't open one in your name. An unclaimed account is an open door.
• Keep your email and phone number current in the account, so Social Security can notify you when something on your record changes — like a direct-deposit or address change. An alert the *day* a deposit is redirected can stop a rerouting before the next payment date.
• Add the Direct Deposit Fraud Prevention block if you rarely change your deposit. It stops anyone — including you — from changing your direct deposit or address online, so the only way to move your money is an in-person office visit. It's a small inconvenience for a large lock.

The second track is different from Carol's. Here the problem isn't your Social Security *payment* — it's your Social Security *number*. If someone has your SSN, they can try to open credit cards, loans, or other accounts in your name. You often find out from a bill you don't recognize, a denied application, or a credit-bureau alert. The tools here are aimed at slamming the door on new credit and cleaning up what's already been opened.

First move: a credit freeze at all three bureaus

A credit freeze (introduced in Lesson 150) restricts access to your credit file, so a lender can't pull it — which means no new account can be opened in your name while the freeze is on. Since a 2018 federal law, freezing and unfreezing is free, and a freeze stays in place until you lift it — permanent by default. The one catch: you must freeze all three bureaus separately. Here are their freeze lines (2026):

Freeze vs. fraud alert — the distinction that trips people up

People mix these two up constantly, so hold the difference clearly. A fraud alert tells lenders to take extra steps to verify it's really you before opening new credit — it's easier to set (you notify one bureau and it must tell the other two) and an initial alert lasts one year, but it's thinner protection: it *asks* lenders to check, it doesn't *block* them. A credit freeze blocks new credit outright, and it's permanent until you lift it — but you must set it at all three bureaus yourself. When your number is loose, the freeze is the stronger lock.

Then: identitytheft.gov, and OIG if your SSN claimed benefits

The FTC's identitytheft.gov is your command center for a stolen number: it generates a personalized recovery plan for each kind of misuse, hands you pre-filled dispute letters, and tracks your progress. And if the thief used your number to claim Social Security benefits fraudulently — not just private credit — report that to SSA OIG (oig.ssa.gov/report, or the hotline 1-800-269-0271), exactly as in Track 1. Protecting your number in the first place is Lesson 150; reporting fraud end to end is Lesson 151. (These are federal tools — the credit freeze and identitytheft.gov work the same in every state, including Carol's Arizona — though some states add their own identity-theft victim-assistance programs on top.)

The third track is the one that scares people the most, so let's meet it head-on: you are alive, but Social Security's records say you died. Checks stop. A bank account freezes. A credit application is denied "because the applicant is deceased." It is surreal and genuinely disruptive — and it is also rare, and completely fixable. We'll do the frightening part (how it happens and what it breaks) here, and the fix — which is straightforward — in the next section.

How it happens — a mistyped number in the Death Master File

Social Security maintains the Death Master File (DMF) — a federal database of people who have died, which it shares with banks, employers, and credit agencies. A living person lands in it by a paperwork error, almost always a mistyped Social Security number:

• A hospital or funeral home reporting a real death transposes a digit of the SSN, or confuses it with a family member's number — and *your* number gets attached to the death report.
• A deceased relative with a similar name has their death filed against the wrong SSN.
• An employer reports a worker as deceased in error.

The fallout — why it hits several systems at once

Because the DMF feeds so many other systems, one wrong entry ripples outward fast. Once you're in it:

• Social Security suspends your benefit payments — the checks stop, because the system believes the beneficiary has died.
• Your bank may freeze your accounts — banks receive regular DMF feeds and can act on them automatically, sometimes before anyone reviews it.
• Credit bureaus may flag you as deceased — so new applications get denied and existing accounts are flagged.
• Medicare and other federal benefit programs may also suspend — anything keyed to your living status can pause.

Here is the reassuring part. Fixing an erroneous-deceased record is a known, ordered process, and the heart of it is one thing: you show up, in person, and prove you're alive. That sounds almost absurd — but it's exactly what resolves it, and Social Security corrects the record immediately once you do. Walk it in order:

1. Call Social Security first at 1-800-772-1213. Report that you are alive and your record was wrongly marked deceased. They confirm the issue and tell you what to bring.
2. Go IN PERSON to your local Social Security office. This is almost always required — a phone call alone generally won't clear it. Find your office at ssa.gov/agency/contact/.
3. Bring proof that you're alive. Social Security's stated requirement is at least one piece of current (not expired) original ID — a driver's license, U.S. passport, or state ID. It must be an original or an agency-certified copy (photocopies and notarized copies are not accepted). Bring more than the minimum if you can — your Social Security card and a recent proof of address (a utility bill or bank statement) — so the office can resolve it in one visit.
4. Social Security corrects its records — usually right away — and can issue you an "Erroneous Death Case — Third Party Contact" Notice: an official letter stating the error is fixed, which you can hand to banks, employers, and other agencies to un-do the downstream damage.
5. Take that correction letter to your bank to reverse a DMF-triggered freeze. Banks have a process for this once Social Security's correction is confirmed.

One hard truth so it can't catch you: after a compromise, a second wave of scammers appears — this time posing as the *cure*. They read the same public trouble you're in and offer to fix it, for a price. It's a cruel play, because you're already frightened and want it over.

Report it — and know that being targeted after a compromise is not a mistake you made. Report to Social Security's Office of the Inspector General at oig.ssa.gov/report or its hotline 1-800-269-0271, to Social Security at 1-800-772-1213, and to the FTC at reportfraud.ftc.gov (or identitytheft.gov if your identity was stolen). If you already paid or shared information, report it anyway — fast reporting limits the damage and protects the next person.

Maybe you didn't call the same day. Maybe you clicked the link, or gave the number, or spent the deposit before you understood. Maybe you've been marked deceased and you're staring at a frozen account right now. None of this is a test you failed.

Here's what stays true no matter how the last few days went. A rerouted benefit is investigated, and your future payments still come while it is. A stolen number is contained the moment you freeze your credit — and the freeze is free and reversible. An erroneous-deceased record is cleared by one in-person visit with your ID, and Social Security corrects it immediately. Every track ends the same way: a specific fix, a free process, and a real person on the other end of 1-800-772-1213 who does this every day. You don't have to do it perfectly, and you don't have to do it alone. Where to find that free help is Lesson 153.

The questions people actually ask in the first frightening hours — answered plainly.

Here's the whole lesson as one interactive checklist. Pick what happened — a rerouted benefit, a stolen number, an erroneous-deceased record, or something else — and it lays out the ordered steps, the contacts and numbers, the documents to gather, and the honest timeline for that path. It's pre-set to Carol's rerouted-benefit case, and it decides no one's real situation — it just makes the order and the reasons stick.

The interactive is placed with Track 3 above so the deceased-record path sits right beside its fix. When you're ready to act on a real situation, the door is one free call: Social Security at 1-800-772-1213 (TTY 1-800-325-0778), or your local office — and, for a stolen identity, identitytheft.gov. Every step in every track is free.

• Account takeover — when a thief gains control of your online account (here, *my Social Security*), changes the password, and redirects your benefit by changing the direct deposit. Carol's Track 1 situation.
• Direct Deposit Fraud Prevention block — a Social Security lock that stops anyone (including you) from changing your direct deposit or address online; after it's on, changes require an in-person office visit. The concrete way to "freeze" your Social Security account.
• Credit freeze — restricts access to your credit file so no new account can be opened in your name. Free by federal law (2018), set at all three bureaus, and permanent until you lift it. (Introduced in Lesson 150.)
• Fraud alert — a flag that asks lenders to verify your identity before opening new credit. Easier to set (one bureau tells the other two) and lasts a year, but thinner than a freeze — it asks rather than blocks.
• identitytheft.gov — the FTC's site for identity-theft victims: it builds a personalized recovery plan with pre-filled dispute letters and tracks your progress. Distinct from reportfraud.ftc.gov, the general consumer-fraud report.
• Death Master File (DMF) — Social Security's federal database of deceased individuals, shared with banks, employers, and credit agencies. A mistyped SSN can wrongly place a living person in it.
• Erroneous deceased record — being wrongly recorded as dead in Social Security's records. Rare (under one-third of 1% of reported deaths), disruptive (suspended benefits, frozen accounts), and fixable by an in-person visit with proof of life.
• "Erroneous Death Case — Third Party Contact" Notice — the official letter Social Security issues once it corrects a wrongful death record; you hand it to banks, employers, and agencies to clear the downstream flags.
• SSA OIG (Office of the Inspector General) — the watchdog that investigates Social Security fraud. Report online at oig.ssa.gov/report or by its hotline, 1-800-269-0271 (the full report walkthrough is Lesson 151).