Child Identity Theft: Credit Freeze and Credit Report Checks

Picture a teenager's name on a booking sheet at a police station. The teenager isn't there. A stranger is, and the stranger picked that name. That is how child identity theft can turn into a criminal record. In the case of Marcus Calvillo, a thief started using his identity when he was 15. The thief wrote bad checks, ran up tickets, and was even convicted of child sex abuse under his name.

Think of a clean record as a locked door nobody has tried in years. Parents assume it's locked. Identity thieves know it usually isn't. You will learn the five mistakes that keep that door unchecked, and each one has a simple fix.

Child Identity Theft: Why a Clean Record Attracts Identity Thieves

Most of us think of identity theft as a grown-up problem. Someone steals your card number and buys a TV. You see it on your statement and you call the bank.

Now flip it. A child's Social Security number (the nine-digit ID the government gives you, which banks, employers and background checks all lean on) typically has no credit history attached. It has no late payments, no old addresses and no spending habits. To a thief, that's a feature. There is nothing in the file to contradict the story they're telling.

That's why researchers at Carnegie Mellon found that children are 51 times more likely than their parents to be victimized by identity theft, according to research summarized by IDShield. It isn't because kids have more money. It's because the file is blank and nobody is watching it.

Here's the part that should bother you. Average detection time is around 12 years, according to the research summary behind this article. Nearly half of the cases involve children under six. A child that young will not apply for anything for a very long time. So the misuse runs quietly, and by the time anyone looks, the thief has had a decade of head start.

Child identity fraud versus a "normal" scam: the pencil-check picture

Here's the picture I find useful. A child's credit file is like a blank check written in pencil. Nobody has looked at it, so a thief can fill in lines freely: an account here, a loan there, and, in a separate system, an arrest record somewhere else. When the child turns 18 and reaches for the pen, the page is already full of someone else's handwriting. Erasing it means proving who wrote what, and when. That takes time, and the trail is old.

---

Mistake One: Assuming a Child Has No Credit Report, So There's Nothing to Check

This is the mistake behind all the others. The logic sounds airtight. Kids don't borrow money, so kids don't have a credit report, so there is nothing to look at.

Except a file can exist when someone applies using the child's number. If the number has never been used for credit, the credit bureaus (the companies that keep your borrowing history) may have nothing on it. That is good news. If the answer comes back "something exists," check why: a file may reflect fraud, though a legitimate credit arrangement can also create one. This article is part of a series, start with Facial Recognition False Arrest 9 Wrong Alerts 1 38m Faces.

The Federal Trade Commission walks through exactly how to check this in its guidance on how to protect your child from identity theft. The idea is simple: learn whether a credit report exists, and if one does, treat it as a problem to solve rather than a mystery to ignore.

Where do you look first if a child's name might be misused?

Start with the credit report check above to see whether a credit file exists. Then look for the quieter signs: mail addressed to your child from banks or collectors, letters about taxes or wages, or a denied benefit. A child shouldn't be getting any of those.

---

Mistake Two: Thinking Breaches, Not a Stolen Social Security Number, Are the Main Threat

Parents focus on hacked databases, and I get why. Breach headlines are loud. "Millions of records exposed" sticks in your head, so you assume that's how it usually happens, and you guard the child's online footprint.

But look at who actually does it. About 75% of child identity theft victims know the person who did it, according to the figures gathered for this article. In 67% of households with a victim, the family personally knew the thief. The person is typically a parent, a relative or a trusted adult.

Why would that be? Think about who has the paperwork. The birth certificate, the Social Security card and the old school forms all sit in a drawer at home. A stranger has to hack for that information. A relative only has to walk down the hall and read the Social Security number off the card.

Two real cases show how personal this gets. Anndorie Sachs was threatened with losing her four children to child protective services after a woman stole her identity and gave birth to a baby that tested positive for drugs, as reported by CBS News. In Houston, Candida Gutierrez learned that a woman had used her identity for 12 years to get a mortgage and medical care, and had even put Gutierrez's name on her own children's birth certificates.

Those two victims were adults, but the lesson carries over. When someone steals a name to live a different life, they don't stop at the credit card.

What parents often assume	What the numbers show
Child identity theft comes from big hacks	About 75% of child victims know the person who took the identity
Kids are targeted because they have money	Children are 51 times more likely to be victimized; a blank credit history can make misuse harder to spot
Trouble shows up quickly	Average detection time is about 12 years
Teens are the main victims	Nearly half of cases involve children under six
A credit freeze is only for adults	A parent can place a credit freeze for a child, which blocks new accounts opened with the child's Social Security number
Credit monitoring catches everything	Credit monitoring watches a credit report, not criminal records, which sit in separate systems

None of this means you should suspect your family. It means the threat model (the "who would actually do this?" question) starts at home, not overseas. If your child's papers are in a shared drawer, that is worth fixing first.

---

Why Does Child Identity Theft Go Unnoticed Without Credit Monitoring?

Because the systems that would catch it are all built around adults. Banks flag odd spending on adult accounts. Credit monitoring watches adult files. A family may not be watching a ten-year-old's number, because it assumes a ten-year-old has no activity. A credit file created through fraud can go unnoticed if nobody checks, while criminal misuse may appear in a separate system. Previously in this series: Deepfake Fake Voices Hijack Accounts Via The Help Desk.

Mistake Three: Treating a Late Discovery as a Cold Case

Here's the second wave of damage. A family finds out when the child turns 18 and hits a wall: a rejected apartment, a denied loan, a job offer pulled after a background check. By then, years have passed. It's easy to feel the trail has gone cold and give up.

Don't. Records outlive memories. Loan applications, addresses, phone numbers and employment filings all leave paper behind. Employment fraud is the most common use of a stolen child identity, showing up in about 40% of minor and dependent misuse cases, according to the 2026 child identity fraud data in the research. That's good news for anyone trying to untangle it, because wages and tax filings create a documented trail with dates and employer names.

Mistake Four: Not Knowing That Criminal Identity Theft Is a Separate Problem

Researchers at the Office of Justice Programs describe different categories of child identity theft: financial misuse, criminal misuse and outright cloning of a whole identity. You can read their overview in Identity Theft and Children. The credit report check can uncover the first category. It does not catch the second.

Criminal identity theft is what happened to Marcus Calvillo. Someone gets arrested and gives a stolen name. The record gets attached to that name. Years later, a background check pulls it up, and an employer or landlord sees a conviction for something the child never did. No credit monitoring service would have flagged it. It lives in a different system.

Now picture how that might happen from the booking officer's side. Someone is sitting in front of them saying "I'm this person," holding a name and a number that match a real, unflagged file. Often nothing ties that name to a face. A fingerprint on file could help establish who was booked, but a child's prints usually aren't on file anywhere.

This is where my corner of the world comes in. At CaraComp, we work with how faces get matched to identities, and the lesson from that field applies to this problem. A name and a number are only claims. Checking them against physical evidence can help establish who a person is, though that evidence must also be assessed carefully. Child identity theft thrives in the gap where nobody has run that check.

---

Mistake Five: Waiting Until 18 for a Credit Freeze and Identity Protection

The last mistake is timing. Many families treat identity protection as something to start when the child is "old enough." By then, as we've seen, years of misuse may be in the file. The cheapest moment to protect a blank file is while it is still blank.

Placing a credit freeze for a minor means a parent or guardian contacts each of the three credit bureaus, Equifax, Experian and TransUnion, and may need to send proof such as the child's birth certificate and Social Security number. A credit freeze is free and does not lower a credit score. Credit monitoring can add alerts, but the freeze is what blocks new accounts.

According to the R Street Institute's policy research, about 25% of people face this problem over a lifetime, and part of the issue is how Social Security numbers get assigned. You can read their take in Child identity theft is a huge problem, the solutions are simple. Notice what's in that headline. The solutions are simple.

A short, calm action list for tonight

• Ask whether a credit report exists for your child. The FTC page above explains how.
• Consider placing a credit freeze on your child's credit report. The FTC guidance explains how to freeze their credit report, and placing a credit freeze helps prevent new accounts from being opened in your child's identity.
• Move the paperwork: birth certificate and Social Security card go somewhere locked, not in the shared drawer.
• If something looks wrong, report it through the FTC's identity theft reporting site, IdentityTheft.gov, and to your local police. For a crime record in your child's name, contact the police agency that holds it.

None of that costs a special product or a subscription. You can start in an evening. Up next: Child Identity Theft 3 In 4 Young Victims Know The Thief.

So here is the twist to take away. We spend years worrying about what strangers might find out about our kids online. The real exposure may be a drawer in our own house and a number nobody has looked at since the day it was issued. Why would a clean record ever be the finish line, when it's exactly what a thief wants it to stay?

If this were happening to you tonight, would you know where to look first? Now you do.

Child Identity Theft and Credit Freeze: Frequently Asked Questions