Social Security Number (SSN): Purpose, Assignment, and Protection
The Social Security Number is a nine-digit federal identifier administered by the Social Security Administration (SSA) that serves as the primary record-keeping mechanism for earned income, benefit eligibility, and identity verification across the United States. This page covers how SSNs are defined in statute, how the assignment process works, the scenarios in which an SSN is required versus optional, and the legal boundaries governing who can collect, use, and protect this identifier. Understanding these boundaries matters because SSN exposure is the central factor in the majority of identity theft cases processed annually by the Federal Trade Commission.
Definition and scope
The Social Security Number was created under the Social Security Act of 1935 (42 U.S.C. § 405) to track workers' earnings records and determine benefit eligibility. Over the following decades, its use expanded well beyond the SSA's original payroll-tracking function. The Tax Reform Act of 1976 authorized federal, state, and local agencies to use SSNs for tax administration and program eligibility. By the 1990s, SSNs had become the de facto national identifier across banking, healthcare, credit, and employment.
The number itself encodes limited structural information. Under the SSA's pre-2011 format, the first three digits (the Area Number) indicated the state of application, the next two digits (the Group Number) served an internal processing function, and the final four digits (the Serial Number) ran sequentially. The SSA transitioned to randomized assignment in June 2011 through its SSN Randomization initiative (SSA Program Operations Manual System, RM 10201.010), eliminating geographic and sequential predictability to reduce fraud.
The nine-digit number format is: AAA-GG-SSSS, where no valid SSN begins with 000, 666, or any number in the 900–999 range.
For a broader picture of how SSNs fit within the full architecture of federal Social Security programs, the key dimensions and scopes of social security reference provides a structured overview.
How it works
Assignment process
SSNs are issued through the SSA's Enumeration at Birth (EaB) program, which allows parents to apply for a child's SSN at the hospital during birth registration — linking SSN issuance directly to vital records. For individuals not enumerated at birth, SSA Form SS-5 (Application for a Social Security Card) must be submitted with documentation establishing age, identity, and citizenship or lawful immigration status.
The SSA maintains SSN records in the Numident file, a master database that records each number's assignment details, including name, date of birth, and citizenship status.
How earnings are tracked
Employers report wages to the SSA under each employee's SSN through the W-2 process, coordinated with the Internal Revenue Service. These reported earnings form the earnings record that determines eligibility for retirement, disability, and survivor benefits. The social security credits work history page explains how earnings translate into the credits required for benefit qualification. The earnings record feeds directly into the average indexed monthly earnings calculation, which is the foundation of benefit computation.
Legal authority to collect
Federal law governs which entities may require an SSN. The Privacy Act of 1974 (5 U.S.C. § 552a) requires any federal agency requesting an SSN to disclose: (1) the statutory authority for the request, (2) whether disclosure is mandatory or voluntary, (3) the principal purpose for which the number will be used, and (4) the routine uses of the number, and the consequences of not providing it.
Common scenarios
Where an SSN is legally required
- Federal tax reporting — Employers and financial institutions must collect SSNs under IRS regulations (26 U.S.C. § 6109) for W-2s, 1099s, and interest reporting.
- Social Security benefit applications — An SSN is required to apply for retirement (social security retirement benefits), disability (social security disability benefits SSDI), Supplemental Security Income (supplemental security income SSI), and social security survivors benefits.
- Medicare enrollment — The SSN anchors Medicare beneficiary records and was historically printed on Medicare cards until CMS completed the removal of SSNs from Medicare cards in April 2019 under the Medicare Access and CHIP Reauthorization Act of 2015 (MACRA).
- Financial account opening — Banks and credit unions are required under the Bank Secrecy Act and Customer Identification Program rules (31 C.F.R. § 1020.220) to collect SSNs for identity verification.
- Employment eligibility — Employers collect SSNs for payroll tax withholding and I-9 compliance.
Where an SSN is commonly requested but not legally required
Hospitals, insurers, landlords, and utilities frequently request SSNs for credit checks or record-keeping, but no federal statute requires individuals to provide their SSN to private entities outside the contexts listed above. The social security fraud and scams page addresses how illegitimate SSN collection requests are used as a primary fraud vector.
Contrast: SSN vs. Individual Taxpayer Identification Number (ITIN)
The IRS issues Individual Taxpayer Identification Numbers (ITINs) under IRS Publication 1915 to individuals who are not eligible for an SSN but have a federal tax obligation. ITINs begin with the digit 9 and have a specific range in the fourth and fifth digits (70–88, 90–92, 94–99). ITINs do not authorize work in the United States, do not create Social Security benefit eligibility, and cannot be used for programs that require an SSN. This distinction matters for non-citizens navigating federal programs — the social security for immigrants and non-citizens page details eligibility rules by immigration status.
Decision boundaries
When SSN replacement is warranted
The SSA permits SSN replacement only under defined circumstances, not for general convenience or fear of fraud exposure alone. The SSA's guidelines (POMS RM 00205.001) permit a new SSN when:
- The individual has been a victim of ongoing identity theft that cannot be resolved with the existing number
- Evidence documents that the number is being misused by another person
- A life-endangering situation (such as domestic violence or harassment) is connected to SSN exposure
The SSA limits individuals to 3 SSN replacements per year and 10 in a lifetime, under the same POMS guidance.
What federal law prohibits
The Social Security Number Protection Act provisions embedded in the Consolidated Appropriations Act, 2005 (Pub. L. 108-447) restrict federal agencies from displaying SSNs on mailed materials if visible through the envelope window. The Social Security Act at 42 U.S.C. § 408 establishes criminal penalties — up to 5 years imprisonment — for fraudulent use, misrepresentation, or misuse of SSNs.
Protecting an SSN from exposure
The SSA recommends limiting physical card carrying, monitoring earnings records annually through my Social Security account online, and verifying that no unauthorized benefits have been claimed under the number. Individuals can view their complete earnings record and benefit projections through the SSA's mySSA portal, which serves as the primary self-service tool for SSN-linked record verification.
The broader landscape of Social Security programs, funding, and administration is accessible from the Social Security Authority home, which organizes the full reference architecture by topic.