By Haseeb Kamran, Founder of VeloApply, 8+ years in recruiting · Updated July 24, 2026 · 9 min read
Quick answer: A job application can legally ask for your Social Security number, and there is no rule stopping an employer from requesting it. What matters is when they ask. A legitimate employer needs it for payroll, tax reporting and background checks, which all happen at or after an offer. A request before you have spoken to a human being is the pattern worth questioning. You can ask why it is needed and how it will be stored, and you can decline, though an employer may decline to continue.
Key takeaways
- No law prevents an employer asking for your SSN on an application. Declining is your right, but it is not risk free.
- The legitimate need is real: payroll, tax reporting, background checks and work-authorisation checks.
- Timing is the signal. At or after an offer is normal. Before any human contact is not.
- Never send your full SSN by plain email or text. That is one of the routes identity thieves rely on.
- Employment identity theft is real enough that the IRS maintains guidance on it.
- You can ask how it will be used and stored before you answer. A real employer will answer that.
- Many applications only need the last four digits at the screening stage.
On this page
Is it legal for a job application to ask for your SSN?
Yes. This surprises people, but there is no general rule that stops a business asking for your Social Security number. The California Attorney General's guidance on controlling your SSN puts it plainly: no law prevents businesses from asking, and you may be refused service if you do not give it. Employment works the same way. An employer can ask, and can decline to proceed if you refuse.
So the useful question is not whether they are allowed to ask. It is whether this particular request, at this particular point in the process, makes sense.
Why do employers ask at all?
There are four legitimate reasons, and they are worth knowing because they tell you when the request should arrive.
| Reason | What it is for | When it is genuinely needed |
|---|---|---|
| Payroll and tax reporting | Reporting your wages and withholding | After hire, during onboarding |
| Background check | Matching records to the right person | After a conditional offer, usually |
| Work authorisation | Verifying you can legally work | After hire, on the I-9 and E-Verify |
| Identity matching | Distinguishing you from someone with the same name | Varies, often only the last four digits |
Notice that three of the four sit at or after an offer. Only identity matching can reasonably occur earlier, and for that most systems ask for the last four digits rather than the whole number.
When is the request normal, and when is it not?
Use the stage of the process as your test.
Normal. You have interviewed, received a conditional offer, and are filling in onboarding paperwork or consenting to a background check. At this point the employer has a concrete, documented need and a legal reason to hold the number.
Common but worth a question. A large employer's application portal asks for the last four digits at the application stage to match you against existing records. This happens, particularly at companies that receive very high volumes of applications. Asking why is reasonable.
Not normal. A full nine-digit number requested before any human has spoken to you, on a form you reached through a job board link, from a company whose careers page you cannot independently find. That combination is the one to stop at.
Red flags that mean stop
The FTC's guidance on job scams describes the shape of the problem: fake job offers exist specifically to harvest personal information, and the details a scammer wants are exactly the ones a real employer eventually needs. That overlap is what makes these requests hard to judge.
- Asked by email or text rather than through a secure system. A real onboarding process uses a portal. Plain email is not a safe channel for a Social Security number.
- Asked before any interview. Especially the full number.
- Urgency. Pressure to send it quickly to secure the role is a sales technique, not a hiring process.
- You cannot verify the employer independently. If the role is not listed on the company's own careers site, treat the whole conversation as unverified.
- Payment involved. Any request for money alongside your details is a scam. A legitimate employer never charges you to be hired.
The risk is not abstract. The IRS maintains guidance on employment-related identity theft, which is what happens when someone uses your Social Security number to work. The consequences land on your tax record, not theirs.
Can you refuse to give it?
You can, and it is worth being honest about the trade-off rather than pretending there is none.
Refusing is lawful. The employer is also free to stop considering your application, particularly if their system requires the field. So a flat refusal at the offer stage may cost you the job, while a refusal at the application stage usually costs you very little because a genuine employer will ask again later anyway.
A better move than refusing outright is asking. Two questions do most of the work: what is the number needed for at this stage, and how is it stored. A legitimate recruiter can answer both in a sentence. Someone who cannot, or who becomes evasive, has told you what you needed to know.
If the field is required and you are early in the process, some applicants enter the last four digits where the form allows it, or leave a note asking to provide the number at the offer stage. That is a reasonable position and most recruiters have seen it before.
How to protect yourself if you do give it
- Confirm the employer independently. Find the role on the company's own careers site before entering anything sensitive.
- Use the portal, never email. If someone asks you to reply with the number, that request itself is the problem.
- Give the minimum the form accepts. Last four digits if that is an option.
- Keep a record. Note who asked, when, and through what system. If something goes wrong later, that record is the start of the trail.
- Know the background-check rules. When an employer runs a formal check through a third party, that process is regulated. The FTC's guidance on using consumer reports sets out what employers must do, including telling you and getting your permission first.
How VeloApply handles sensitive fields
Autofill tools make this question sharper, because a tool that fills forms quickly can also fill a sensitive field before you have decided whether you want to answer it.
The VeloApply Chrome extension treats these fields differently from ordinary ones. Social Security numbers, work authorisation, visa status and the equal-opportunity questions are surfaced and outlined for your review rather than filled silently. You see what is there, you decide whether to answer, and nothing is submitted until you click submit yourself.
That is the same principle behind the rest of the product. The extension reads the application step by step and fills the repetitive parts, and its AI drafts answers to custom screening questions, but every answer is shown to you first. The tedious part is automated. The decisions that carry consequences stay with you.
Fill applications fast, decide the sensitive parts yourself
VeloApply fills the repetitive fields and drafts your screening answers, then outlines every sensitive field so you choose what to share before anything is sent.
See how it works →Frequently asked questions
Should I put my Social Security number on a job application?
It depends on the stage. At or after a conditional offer, when the employer needs it for payroll, a background check or work-authorisation paperwork, it is a normal request. Before any human contact, particularly the full nine digits, it is worth questioning. You can ask what it is needed for and how it will be stored before you answer.
Is it legal for an employer to ask for my SSN before hiring me?
Yes. There is no general rule preventing a business from asking for your Social Security number, and an employer may decline to continue if you refuse. Legality is not the useful test here. Timing and how the request is made tell you far more than whether it is permitted.
Can I refuse to give my SSN on a job application?
You can. Refusing is lawful, but the employer is equally free to stop considering your application, especially if their system requires the field. Asking why it is needed at this stage, and how it will be stored, usually works better than refusing outright.
Why do some applications only ask for the last four digits?
Because at the screening stage the employer usually only needs to distinguish you from other applicants with similar details, and the last four digits are enough for that. The full number is generally needed later, for payroll, tax reporting or a background check.
Is it safe to email my Social Security number to a recruiter?
No. Plain email and text are not safe channels for a Social Security number, and a request to send it that way is itself a warning sign. A legitimate employer collects it through a secure portal during onboarding, not as a reply to a message.
What happens if someone steals my SSN from a fake job application?
It can be used for employment identity theft, where someone works under your number and the reported income lands on your tax record. The IRS maintains guidance on this specific problem, and the FTC's identity theft service is where recovery starts. Verifying the employer before you share anything is the cheapest prevention.
Keep reading
EEO and demographic questions explained →
Criminal record questions on applications →
Are AI job tools safe with your data →
Can you get banned for using auto-apply tools →
Job searching with visa sponsorship →
Applying on a specific platform?
Workday · Greenhouse · Lever · iCIMS · Taleo · Ashby · SmartRecruiters · BambooHR · JazzHR · Jobvite