President Trump signed H.R. 5345, the Improving Social Security’s Service to Victims of Identity Theft Act, into law on October 7. The law tells the Social Security Administration to give people whose Social Security number has been misused a single point of contact who stays with the case until it is resolved. Until now, victims have had to work through several SSA offices and processes, and sometimes hear different answers from different employees. The new law does not pay anyone anything and sets no start date, so the open question is how soon the change reaches people dealing with a stolen number.
Affiliate links — we may earn a commission.
What the new law requires of Social Security
The White House announced the signing on Wednesday, October 7, alongside a second bill, S. 766, which deals with federal project overruns. It says H.R. 5345 establishes a single point of contact at the Social Security Administration for people whose Social Security number has been misused or whose card has been lost. The announcement carries no quotes from officials and does not name the bill’s sponsor.
The bill’s official record fills in the mechanics. Rep. David Kustoff, a Tennessee Republican, introduced it on September 15, 2025, and the bill status record shows the Ways and Means Committee approved it 39-1 two days later. The Congressional Research Service summary says the contact would be a team of specially trained SSA employees who track each case to completion and work with the agency’s specialized units to resolve problems quickly. In other words, the single point of contact is a dedicated team, not necessarily one named person.
For anyone whose number has been used by a thief, the change targets the most frustrating part of the aftermath, which is repeating the same story to a new person at each step. Someone who finds a benefit claim filed under their number, or loses a card in the mail, would be routed to the same group instead of being passed between offices. SSA has not said whether that group will be a new unit or existing staff reassigned.
Fixing the problem at the agency is only one piece of recovery, because the number itself usually leaked or was sold long before the victim noticed. Personal details also sit on data broker and people-search sites, and Incogni sends removal requests to those brokers for you and keeps re-sending them, which can mean fewer scam calls, texts and emails reaching a person whose details have already been exposed.
Why lawmakers said victims needed one contact
A House Ways and Means one-page summary of the bill describes the problem in numbers. It says 3,158 data breaches were reported in 2024, producing roughly 1.3 billion breach notices, and that more than 1,800 of those breaches involved Social Security numbers. Because the number is used to verify identity at banks, employers and government offices, the summary says, it remains a prime target for identity thieves.
The same summary argues that the repair process itself gives thieves more time. It says fixing a lost, stolen or misused number can take a long time, that victims often deal with several SSA processes, and that different employees sometimes give them conflicting information. Every extra week spent sorting out who handles what is a week the stolen number stays usable, which is the delay the single contact is meant to shorten.
Kustoff made the same case when the House acted. In a December 1, 2025 statement, he called it “a commonsense bill that will improve government efficiency,” and Ways and Means Chairman Jason Smith said it “ensures families have a single point of contact at the SSA.” The statement describes the current reporting process as confusing and bureaucratic and says victims can feel the effects for years.
The bill moved quietly. The House passed it by voice vote under a suspension of the rules on December 1, 2025, a procedure used for measures with little opposition, and it was received in the Senate on December 2 and referred to the Finance Committee. The bill status record shows no Senate committee vote. The signing on October 7 came 10 months after that referral, and the White House notice gives no public law number.
What the signing does not settle yet
Neither the White House notice nor the bill record sets an effective date or a deadline for SSA to stand up the contact. The Congressional Research Service summary does not include a “within so many days” requirement either. Social Security has not published an implementation page, so there is no phone number, office or online form for the new contact. Until SSA announces one, the process victims face is the one the agency already runs.
That process currently points many people elsewhere. SSA’s page on reporting a stolen Social Security number tells people who think they are identity-theft victims to report to the Federal Trade Commission, and states that SSA is “not involved in this process.” The law is aimed at changing that handoff, but it does not say what the new contact will be able to do, such as freezing a record or reversing a fraudulent claim.
Reporting a misused Social Security number now
Today the first step on SSA’s own site is a report to the Federal Trade Commission through its identity theft reporting tool, which builds a recovery plan from the answers given. SSA’s stolen-number page is the official starting point, and SSA has not yet added anything about the new contact there.
Anyone who has already had a benefit claim filed under their number, or who never received a replacement card, would be the first group the new law is written for. Records from those dealings are the material a dedicated SSA team would need to track a case from start to finish. The statute’s value will be measured by whether the contact actually exists and is reachable, and the first test is whether SSA publishes how to reach it.
Where thieves find a Social Security number
A misused number can keep causing trouble long after the SSA case is closed, because the same name, address and phone number stay on broker lists that scammers buy from. Incogni asks data brokers and people-search sites to remove your personal information, sends removal requests on your behalf and keeps re-sending them. Each request’s status shows in the account, so the clean-up does not depend on one phone call.
Have Incogni send data broker removal requests after Social Security number misuse →
This article was produced with AI assistance and reviewed by The Money Overview’s editorial team.
