All guides

    The CPN Scam: What a 'Credit Privacy Number' Really Is

    A CPN — credit privacy number — is marketed as a legal nine-digit replacement for your Social Security number that lets you start a clean credit file. No agency issues them, the numbers are frequently stolen SSNs, and using one on a credit application is fraud committed by you, not the seller.

    Part of our series on paid credit repair: [[/learn/social-media-credit-repair-scams|viral credit hacks]], [[/learn/buying-tradelines-risks|buying tradelines]], [[/learn/credit-repair-red-flags|red flags of a scam]], and [[/learn/credit-repair-organizations-act|your rights under CROA]].

    By CreditKaren Editorial Team·Last updated: September 2026·7 min read

    AI-assisted drafting, human-reviewed and source-checked before publication — how we create content.

    The pitch works because the problem is real: a damaged file is slow to rebuild. But a second identity does not replace the first one — it adds a crime to it.

    What a CPN Is Sold As

    A CPN — marketed as a credit privacy number, credit profile number, or credit protection number — is a nine-digit number formatted to look exactly like a Social Security number. The pitch is that you can use it in place of your SSN on credit applications, leaving a bankruptcy, a repossession, or a wall of collections behind on a file no lender will see.

    Sellers describe it as a privacy tool or a little-known legal loophole, and price it anywhere from a few hundred to several thousand dollars, often bundled with a purchased tradeline to make the new file look established.

    What a CPN Actually Is

    No law creates CPNs and no government agency issues or recognizes them. The Social Security Administration does not assign them. In practice the numbers come from one of two places: they are randomly generated, or they are real Social Security numbers stolen from other people — commonly children, incarcerated people, seniors, and the deceased, because those numbers are unlikely to be actively monitored.

    The Federal Reserve's payments-fraud material describes the mechanism plainly: companies charge a fee, hand over a nine-digit number, and the buyer unknowingly commits synthetic identity fraud by building a credit history on someone else's identifier. Experian's consumer guidance reaches the same conclusion — a CPN is not a legal substitute for an SSN, and creating a false identity with one is illegal.

    Why Using One Is a Crime, Not a Loophole

    The moment a CPN goes onto a credit application, you have made a false statement about your identity to a lender. That can implicate federal misuse-of-Social-Security-number and identity-fraud statutes, and lying on a credit application is separately a federal offense. Awareness is not a defense: using another person's number is unlawful regardless of whether you knew where the seller got it.

    The FTC's guidance on credit repair names this exact pitch — a company telling you to apply for an EIN or a new nine-digit number to create a 'new credit identity' is describing fraud, and warns that filing a false identity theft report to clear accurate items can bring fines, imprisonment, or both.

    Who Bears the Risk

    The seller takes payment and disappears. You sign the application. That asymmetry is the whole business model: the criminal exposure transfers to the buyer at the moment the number is used, while the seller's role looks, on paper, like selling information.

    There is a second loss layered on top. To generate or 'attach' a CPN, sellers typically collect your real name, address, date of birth, and actual Social Security number. You have handed complete identity-theft material to an operation that is already trafficking in stolen numbers.

    What Happens to the File You Were Trying to Escape

    Nothing. Your real credit file stays exactly as it was, still tied to your real SSN, still visible to every lender who pulls it. Meanwhile any account opened on the CPN can be flagged, closed, and referred for fraud review — and lenders increasingly detect synthetic files through cross-bureau identity matching.

    If the file genuinely contains entries that are not yours, the answer is a documented dispute, not a new number. Our [[/learn/mixed-credit-file|mixed file guide]] covers accounts that belong to someone else, and the [[/learn/how-to-dispute-credit-report-error|dispute walkthrough]] covers the rest.

    If You Have Already Bought One

    Stop using the number immediately and do not submit any further applications with it. Pull all three of your real credit reports free at AnnualCreditReport.com and review them for accounts you did not open. If you already opened credit under the CPN, speak with a consumer attorney before contacting the lender — this is a situation where individual legal advice matters.

    Report the seller to the FTC at ReportFraud.ftc.gov and to the CFPB, and monitor your own SSN for misuse, since the seller holds your real identity data. Consider a free fraud alert or credit freeze with each bureau; [[/learn/credit-bureau-contact-information|contact details are here]].

    Frequently asked questions

    No government agency issues or recognizes CPNs, and using one in place of your Social Security number on a credit application is fraud. Experian, major card issuers, and federal payments-fraud guidance all describe CPNs as a scam rather than a legal privacy tool.

    They are either randomly generated or, frequently, Social Security numbers stolen from real people — often children, seniors, incarcerated people, or the deceased, whose numbers are less likely to be monitored.

    People have. Using another person's Social Security number and misrepresenting your identity on a credit application can implicate federal identity-fraud and SSN-misuse statutes, and federal prosecutions of CPN buyers and sellers have resulted in prison sentences and restitution orders.

    No, but the pitches are cousins. An EIN is a real IRS-issued number for business tax purposes. Using an EIN in place of your SSN to build a personal 'new credit identity' is the same misrepresentation, and the FTC names it directly in its credit repair guidance.

    No. Your real file remains attached to your real SSN and is unchanged. Accurate negative entries generally age off on their own — most after about seven years, and Chapter 7 bankruptcy after ten.

    End the engagement and report the company to the FTC at ReportFraud.ftc.gov, the CFPB, and your state attorney general. Offering a CPN is strong evidence of a scam operation; treat anything else the company told you as unreliable.

    A secured card or credit-builder loan reported to all three bureaus, low utilization, consistent on-time payments, and disputing only entries that are genuinely inaccurate. It is slower than a purchased number, and it is the only version that survives a lender's review.

    What to gather first

    • A current copy of each credit report you want to review (Equifax, Experian, TransUnion) from AnnualCreditReport.com.
    • Government-issued photo ID and proof of current address, which bureaus commonly request with a mailed dispute.
    • Account statements, payment records, or letters that relate to the item you believe is inaccurate or incomplete.
    • The exact account name, partial account number, and the reason you believe the entry is inaccurate or incomplete.
    • A way to keep records: copies of what you send and, if mailing, proof of delivery.

    Common mistakes to avoid

    • Disputing information you know is accurate — that wastes the process and does not help you.
    • Sending a vague dispute. Identify the specific item and explain what is inaccurate or incomplete.
    • Disputing with only one bureau when the same entry appears on more than one report.
    • Keeping no copies of what you sent, so you cannot show what was disputed or when.
    • Paying a company that promises deletions or score increases — no one can promise those outcomes.

    When to get additional help

    Consider additional help if a bureau or furnisher does not respond, if an entry you believe is inaccurate stays on your report after a reinvestigation, if you may be affected by identity theft, or if you have questions about your legal rights.

    How CreditKaren can help

    CreditKaren is a free, AI-assisted tool that reviews a credit report you upload and highlights entries that may be inconsistent, incomplete, or worth a closer look. If you decide an item may be inaccurate or incomplete, CreditKaren can draft a dispute letter you can review, edit, and send yourself.

    CreditKaren is not a law firm, credit bureau, lender, or credit-repair organization. It does not provide legal advice and does not guarantee deletions, dispute outcomes, or changes to your credit scores. You decide what to dispute and you send every letter.

    Important limitation

    Credit reporting disputes should be based on information you believe may be inaccurate, incomplete, unfamiliar, or improperly reported. Do not dispute information you know is accurate. A dispute does not guarantee a deletion, correction, score change, or other result.

    Sources and further reading

    Review your own credit report with CreditKaren

    Use CreditKaren's AI-assisted educational tool to organize report entries you may want to investigate for accuracy. You review every result and decide whether to take action.

    CreditKaren does not provide legal, financial, lending, or credit-repair advice. No dispute, deletion, score increase, approval, or other outcome is guaranteed.

    Start an Educational Report Review

    Who wrote this & how we work

    This page is maintained by CreditKaren to answer common questions about the Fair Credit Reporting Act and our free AI-assisted educational credit report review tool. It reflects current practices in the app and is not legal or financial advice.