My bank just found my SSN on the dark web, but gave me zero guidance. I'm 55 and about to retire. How serious is this, and what can I do?

That's it. No explanation. No guidance on what to do next.

This scenario captures a growing problem: financial institutions are increasingly offering dark-web monitoring, but often leave customers to navigate the response on their own.

Here's how to assess the risk, and what steps you can take if this happens.

How serious is a dark web SSN alert?

Finding your SSN on the dark web doesn't automatically mean it's being misused. Large-scale data breaches often result in personal information being bundled and sold in bulk, where it may sit unused for months or years. But the risk is still very real.

A 2025 analysis by SentiLink found that nearly 97% of people whose full personal information (including SSNs) appeared on the dark web experienced attempted identity theft. That word — "attempted" — is critical because it means there's still time to prevent fraud from succeeding (1).

In this situation, the most urgent priority is limiting what someone else can do with your identity. One of the most effective tools is a credit freeze, which restricts access to your credit file and makes it much harder for fraudsters to open new accounts in your name.

According to identity protection guidance from Norton LifeLock, a freeze is free and can be lifted temporarily if needed (2).

You should also consider securing your Social Security account directly. The Social Security Administration (SSA) recommends creating or logging into your my Social Security account and taking steps to protect it from unauthorized access, including adding extra security measures or restricting certain types of changes (3).

Expanding your defenses

Once immediate protections are in place, there are additional safeguards designed to prevent specific types of fraud tied to your SSN.

For example, the federal myE-Verify system allows you to "self lock" your SSN, preventing it from being used for employment verification. This can help stop someone from using your identity to get a job — a lesser-known but increasingly common form of identity theft (4).

Tax fraud is another major concern. The IRS offers an Identity Protection PIN (IP PIN), a six-digit code that must be included when filing your tax return. Without it, a fraudulent return filed under your SSN is far less likely to succeed (5).

You can also access your credit reports for free through the federally authorized credit report site to review accounts and activity for unfamiliar entries (6).

Finally, even if no fraud has occurred, reporting the situation to the Federal Trade Commission (FTC) at IdentityTheft.gov creates a documented record, which can be useful if problems arise in the future (7).

Why this matters more near retirement

If you're in your 50s, the stakes of SSN misuse go beyond credit cards or loans.

A fraudulent tax return could create IRS complications and delay refunds, while a credit freeze applied at the wrong time could interfere with refinancing or major purchases before retirement.