Credit Repair · 24 guides
CPN Numbers: Why Using One Is Fraud
What a CPN really is, the federal statutes that make using one a felony, how the credit sweep and new credit file pitch works, and what to do if you paid.
On this page
- Key points
- What is a CPN, and who issues it?
- Which federal laws does using a CPN break?
- How does the pitch work?
- What if you already bought a CPN?
- What does the honest version look like?
- Common mistakes to avoid
- When to talk to a professional
- Frequently asked questions
- Is a CPN legal?
- Can a company legally sell me a CPN?
- What is a credit sweep?
- What if I already used a CPN on an application?
- Are tradeline packages sold with a CPN legal?
- How do I get a fresh start without a CPN?
The ad says "new credit file," "fresh start," or "credit privacy number." Sometimes it says "credit sweep." The price is usually a few hundred to a few thousand dollars. The product is the same in every case: a nine-digit number you are told to put in the Social Security number box on a credit application. This page explains why that act is a federal felony, how the pitch is built, and what to do if you already paid.
Short answer
A CPN is not a legal alternative to a Social Security number. No federal agency issues one. Writing any number other than your own SSN in the SSN field of a credit application, with intent to deceive, is a felony under 42 U.S.C. § 408(a)(7)(B), punishable by up to five years. If the number belongs to a real person, 18 U.S.C. § 1028 and § 1028A add identity theft charges. Federal prosecutors have sent buyers, not only sellers, to prison.
Key points
- "CPN," "credit profile number," "credit protection number," and "new credit identity" all describe the same thing: a number used in place of your SSN on applications. The Social Security Administration issues SSNs and nothing else.
- The core statute is 42 U.S.C. § 408(a)(7)(B): falsely representing a number as your SSN with intent to deceive is a felony, up to five years in prison.
- Many CPNs are real SSNs, often belonging to children or people with no credit activity. Using one adds 18 U.S.C. § 1028 (up to 15 years when value obtained exceeds $1,000 in a year) and § 1028A (a mandatory two-year term on top).
- A "credit sweep" is a related pitch: filing false identity theft reports to erase accurate items. The FTC said in January 2026 that this is a crime that can bring fines and imprisonment.
- If you already bought one, stop using it, do not apply with it, and get a lawyer before doing anything else. Applications already filed are the exposure.
What is a CPN, and who issues it?
Short answer
Nobody with authority issues one. A CPN is a nine-digit number a seller supplies and calls a "credit privacy number" or "credit profile number." It is either a randomly generated number, a number formatted to pass a lender's basic checks, or an SSN that belongs to someone else. Sellers sometimes point to the Privacy Act of 1974 as authority. That law limits how federal agencies handle your records. It does not create an alternate number for credit.
The Social Security Administration explains in its own publication that it assigns a person one number for life, and will consider a new number only in narrow cases such as ongoing, documented identity theft or danger. Even then, the SSA warns, a new number creates its own problems because your history does not follow it. There is no path by which a private company can hand you a second government number.
In plain English
The whole business depends on one sentence sounding true: "you are allowed to use a CPN instead of your SSN for privacy." Read the application. It asks for your Social Security number. Writing a different number there, on purpose, so the lender does not find your history, is the definition of a false statement to obtain credit. The privacy framing is marketing. The lender is being deceived, and the law names that act.
Which federal laws does using a CPN break?
Short answer
Two sets. First, 42 U.S.C. § 408(a)(7)(B) makes it a felony to represent, with intent to deceive, that a number is your Social Security number when it is not; the penalty is up to five years in prison. Second, when the number is a real person's SSN, 18 U.S.C. § 1028(a)(7) covers using another person's means of identification in connection with unlawful activity, and § 1028A adds aggravated identity theft. Bank fraud and wire fraud charges often ride along.
| Statute (verified at law.cornell.edu) | What it covers | Maximum penalty |
|---|---|---|
| 42 U.S.C. § 408(a)(7)(B) | Falsely representing a number to be your SSN, with intent to deceive | Felony; fine and up to 5 years |
| 18 U.S.C. § 1028(a)(7) | Using another person's means of identification in connection with unlawful activity | Up to 15 years when $1,000 or more is obtained in a year; otherwise up to 5 years |
| 18 U.S.C. § 1028A | Aggravated identity theft during certain felonies | Mandatory 2 years, served consecutively |
The DOJ record shows these are not theoretical. U.S. Attorney press releases from the Western District of Oklahoma describe buyers who used "credit profile numbers" on credit applications receiving 12-, 18-, and 24-month federal sentences. A separate Eastern District of North Carolina case sentenced the organizer of a multi-year CPN conspiracy to 126 months for bank and wire fraud. We describe these from the public releases and do not name the individuals; the releases are linked in the sources.
The buyer is the one who signs the application
Sellers structure the deal so that you are the person who writes the number on the form and submits it. That is the act the statutes punish. A seller may be prosecuted for the scheme, but the application with your name, your signature, and a false SSN is evidence against you. "I did not know it was illegal" is not a defense the statute recognizes; the element is intent to deceive the lender, which is what the number is for.
How does the pitch work?
Short answer
The pitch combines a plausible legal story, a fast timeline, and add-on products. The story is the Privacy Act myth. The timeline is "new file in 30 days." The add-ons are "tradeline packages," where you pay to be added as an authorized user on strangers' cards under the CPN, and "credit sweeps," which use false identity theft claims to erase accurate items on your real file.
The sequence, as it appears in listings and complaints:
The privacy story
You are told the Privacy Act of 1974 lets you decline to give your SSN and use a CPN instead. The Act restricts federal agencies; it says nothing about private lenders and creates no number.
The number and the new address
You receive a nine-digit number and are coached to pair it with a new address, phone, and email so the lender's database does not link it to your real file. That coaching is the intent-to-deceive element in plain view.
Tradeline packages
For an extra fee you are added as an authorized user on other people's accounts to make the new file look aged. Under the CPN, that is building a synthetic identity, which is what fraud units at lenders are trained to detect.
The credit sweep
Some sellers also offer to "sweep" your real report by filing identity theft claims at IdentityTheft.gov for accurate debts. The FTC's January 2026 alert calls that a crime carrying fines or imprisonment, and the FTC's August 2026 complaint against a credit repair network alleges exactly that practice.
Disappearance
The seller's site and number go dark. Your applications, with a false SSN and your signature, remain in lender files indefinitely.
What if you already bought a CPN?
Short answer
Stop using it immediately and do not submit any further application with it. What you do next depends on whether applications were already filed. If none were, the exposure is mainly the money you lost, and you can report the seller. If applications were filed, or accounts were opened, talk to a criminal defense attorney before contacting any lender, because how you unwind it matters.
A careful order of operations:
- Stop. No new applications, no "tradeline" purchases, no logins to accounts opened under the number.
- Preserve records. Keep the seller's emails, the payment receipt, and any instructions you were given. They document who sold what.
- If you filed applications, get counsel first. A defense attorney or a consumer attorney can advise on whether and how to notify lenders and close accounts. Doing that in the wrong order can create new problems. Legal aid may help if cost is an issue.
- Protect your real file. Pull your real reports free at AnnualCreditReport.com, and consider a credit freeze, which is free at all three bureaus, so no one can open more accounts under your real SSN either.
- Report the seller. ReportFraud.ftc.gov for the sale; IdentityTheft.gov if your own information was misused; your state attorney general for a state complaint. Our what to do if you were scammed guide covers the reporting sequence.
- Rebuild under your own number. The honest path is slower and works: a secured card, a credit-builder loan, on-time payments, and disputes of anything actually inaccurate on your real report.
You cannot check whether the number belongs to someone
The SSA does not verify third-party numbers for individuals, and there is no lawful way for you to "look up" a CPN. Assume it may be a real person's number, often a child's. That assumption is the reason to treat any past application as a matter for a lawyer rather than a customer service call.
What does the honest version look like?
Short answer
Everything the CPN promises has a legal counterpart under your real SSN. Errors come off through a free dispute. Accurate negative items age off, seven years for most, ten for a bankruptcy. Thin files thicken with a secured card or credit-builder loan. None of it requires a second identity, and none of it carries a prison term.
| The CPN promise | The lawful equivalent |
|---|---|
| "Clean file with no negatives" | Dispute inaccurate items free; accurate ones age off on a fixed schedule |
| "Aged tradelines for a fee" | Authorized user status on a family member's real account, under your real SSN |
| "New file in 30 days" | A thin file becomes scoreable with one account reporting for about six months |
| "Sweep everything with an ID theft claim" | A real identity theft block for fraud that actually happened, backed by an FTC report |
Common mistakes to avoid
- Believing the Privacy Act of 1974 permits a substitute number on a credit application — it regulates federal agencies, not lenders.
- Assuming the number is random and harmless; many are real SSNs, often a child's.
- Pairing a CPN with a new address and phone — that coaching is evidence of intent to deceive.
- Buying tradeline packages under the CPN, which builds a synthetic identity that lender fraud teams screen for.
- Filing an identity theft report for a debt you actually owe as a credit sweep — the FTC calls it a crime.
- Calling lenders to “explain” after applications were filed, before talking to an attorney.
When to talk to a professional
Strongly consider talking to a professional
If you used a CPN on any application, or a company filed identity theft reports in your name for debts you owe, speak with a criminal defense attorney or a consumer attorney before contacting lenders or bureaus. If you only paid and never used the number, a consumer attorney or your state attorney general's office can help with recovering money and reporting the seller. Free help may be available through legal aid. Nothing on this page is legal advice.
Frequently asked questions
Is a CPN legal?
Possessing a nine-digit number is not itself a crime. Using it in place of your Social Security number on a credit application, with intent to deceive the lender, is a felony under 42 U.S.C. § 408(a)(7)(B). If the number belongs to a real person, federal identity theft statutes apply as well.
Can a company legally sell me a CPN?
No government agency issues CPNs, so no company can lawfully sell you a substitute for your SSN. Sellers have been prosecuted for conspiracy, bank fraud, and wire fraud, and the FTC warns that companies promising a new credit identity are running a scam.
What is a credit sweep?
A "credit sweep" is a service that files identity theft claims for accurate debts so the bureaus block them. The FTC's January 2026 consumer alert says filing a false identity theft report is a crime that can carry a fine, imprisonment, or both. A real identity theft block is for fraud that actually happened.
What if I already used a CPN on an application?
Stop using it and talk to an attorney before contacting the lender, because an application with a false SSN and your signature is the exposure. Preserve the seller's records, freeze your real credit file, and report the seller once you have advice on sequence.
Are tradeline packages sold with a CPN legal?
Paying to be added as an authorized user on strangers' accounts under a false SSN builds a synthetic identity, which is exactly what bank fraud teams screen for. Authorized user status on a family member's real account, under your real SSN, is the lawful version.
How do I get a fresh start without a CPN?
Dispute anything inaccurate for free, let accurate items age off on schedule, and add positive history under your own SSN with a secured card or credit-builder loan. The rebuilding checklist lays out the order.
Terms used on this page
Sources
This page is based on the following official and authoritative sources. Always check the source itself for the most current rules.
- 42 U.S.C. § 408(a)(7) — false representation of a Social Security number; felony, up to 5 years (Legal Information Institute, verified 2026-09-04)
- 18 U.S.C. § 1028 — fraud in connection with identification documents and means of identification (Legal Information Institute, verified 2026-09-04)
- 18 U.S.C. § 1028A — aggravated identity theft (Legal Information Institute)
- FTC — Fixing your credit FAQs: warning on companies selling a new credit identity (verified 2026-09-04)
- FTC consumer alert — Influencers are pushing this illegal trick to fix your credit report (2026-01-05; verified 2026-09-04)
- U.S. Attorney's Office, W.D. Oklahoma — 18-month sentence for use of credit profile numbers on credit applications (DOJ press release)
- U.S. Attorney's Office, W.D. Oklahoma — fraudulent credit profile number results in two-year sentence (DOJ press release)
- U.S. Attorney's Office, E.D. North Carolina — three sentenced in CPN conspiracy to commit bank and wire fraud (DOJ press release)
- Social Security Administration — Identity Theft and Your Social Security Number (Publication 05-10064)
- TransUnion — What is a credit privacy number? (updated 2024-01-19; competitor page reviewed 2026-09-04)
Educational information — not advice
This topic involves court deadlines and rights you can permanently lose.
This page provides general educational information about credit, debt, and consumer protections. It is not legal advice, financial advice, or credit repair services, and reading it does not create any professional relationship. Laws, procedures, deadlines, and dollar amounts vary by state and change over time.
Before acting or deciding not to act, strongly consider consulting a licensed attorney in your state. If cost is a concern, legal aid organizations may help for free. See our full disclaimer.
Templates & checklists for this topic
Related guides
- Credit Repair Services
- Fix Credit
- Credit Repair Scams: Red Flags to KnowThe red flags of credit repair scams — advance fees, guaranteed deletions, CPN schemes — plus how to report them to the FTC, CFPB, and your state.
- 10 Credit Repair Myths That Cost MoneyTen persistent credit repair myths — from pay-for-delete promises to CPNs — and what actually helps, based on how credit reporting really works.
- What to Do If You Were ScammedRecovery steps after a scam: report to the FTC and CFPB, freeze your credit at all three bureaus, dispute fraudulent charges, and avoid recovery scams.
- Credit Repair After Identity TheftThe FCRA 605B identity theft block versus an ordinary dispute, the free IdentityTheft.gov report, seven-year fraud alerts, free freezes, and what firms sell.
- How to Build a Thin Credit FileA thin file is not bad credit. What credit-invisible means, and the real on-ramps: secured cards, credit-builder loans, and authorized-user status.