Keeping your personal information secure is hard. Even if you take all the right steps, a hacker can still infiltrate a company that you have no control over and steal sensitive info.

As a result, social security numbers—central to filing taxes, applying and maintaining credit, and receiving certain U.S. government benefits—have become widely available to hackers and would-be criminals for exploit. And if your SSN hasn’t hit the dark web yet, the unfortunate reality is that another data breach will inevitably change that.

But you don’t have to wait for trouble to find you. You can take several steps to minimize the possibility of identity theft or fraud in your name, since other details like your full name, birthdate, and residence are also likely loose in the wild. Here’s what to do.

Further reading: Data breaches are everywhere—but you still need to pay attention to them

1. Freeze your credit reports

Freezing your credit costs nothing and keeps fraudsters from opening credit cards and loans in your name—a smart move when your full name, date of birth, and social security number are floating around on the internet. 

You must perform the security freeze with each credit bureau. In the U.S., the three major ones are Equifax, Experian, and TransUnion. For thoroughness, you can also freeze your report with Innovis, a smaller fourth credit bureau.

Once frozen, your credit reports become only available to you. If you need to allow a third-party credit check, like when renting a new apartment or opening a new line of credit, you can temporarily lift the freeze through the Equifax, Experian, and TransUnion websites or through their phone lines. You’ll need the PIN issued to you in order to request the temporary lift.

2. Check your credit reports

While dealing with your credit reports, you should also have a look at them for any fraudulent activity. You can do so weekly through the official website (AnnualCreditReport.com) or request paper copies once per year through the phone or by mail.

If you spot inaccurate details, you can dispute them—and if you think you see signs of identity theft, you can report it and begin remediation.

3. Request an IRS Identity Protection PIN

Tax return fraud can be a serious headache. Fortunately, the Internal Revenue Service (IRS) allows you to prevent other people from fraudulently filing in your name (even if you don’t need to send in a return). If you request an identity protection PIN (IP PIN), any filed return must include the six-digit PIN for it to be processed.

Most taxpayers will need to request a new PIN each year—unless you’ve been the victim of tax-related identity theft. If so, you should be already automatically receiving a new IP PIN each year from the IRS.

If you forget your IRS identity protection PIN, the IRS has methods to help you retrieve it. You can also store the info in a good password manager—if you’re nervous about cloud-based services, you can use one that saves your data to a local hard drive or flash drive.

4. Freeze your banking report

Like with credit, a file exists on you about your banking account activity—and if someone begins opening fraudulent accounts in your name and runs them into the ground, banks may not want to do business with you in the future.

You can prevent becoming blackballed by also placing a security freeze with ChexSystems, the main company used by banks to verify if you’re a worthy customer. Once in place, only you can access your report. To temporary lift the freeze (like when applying for a new bank account), you can make your request online, using the PIN issued to you when the freeze first went into effect.

Related content

• 5 devious ways malware can sneak past your PC’s antivirus
• Everyone should know which passwords suck. Do you?
• Best antivirus software: These 8 apps keep your PC safe

Author: Alaina Yee, Senior Editor, PCWorld