The cursor blinks at a steady 72 beats per minute, mocking the rhythm of that godawful ‘Walking on Sunshine’ chorus currently looping in my skull. I am staring at a spreadsheet that shouldn’t exist. As a safety compliance auditor, my job is to find the cracks before someone falls through them, but identity theft involving minors isn’t a crack; it is a deliberate, structural canyon. I rub my eyes, feeling the grit of 12 hours of screen time. My coffee has gone cold, forming a stagnant ring at the bottom of a mug that says ‘World’s Okayest Employee.’ It’s a lie. I’m actually quite good at this, which is why I’m currently losing my mind over a set of Social Security numbers that belong to people who haven’t even hit puberty yet.

Sarah sat at her kitchen table in 2022, clutching a ballpoint pen so hard her knuckles turned white. I remember the way she described the silence of the room. She was trying to be the ‘perfect’ parent, the kind who sets up college funds and checks the locks twice. She had decided to open a credit monitoring account for her son, Leo, who was exactly 2 years old at the time. She expected a screen that said ‘Welcome’ or perhaps a prompt to upload a birth certificate. Instead, she got a void. The customer service representative on the other end of the line-a man named Gary who sounded like he was eating a dry cracker-told her they couldn’t find any records for Leo.

‘Is that good?’ Sarah had asked, her voice hovering between relief and suspicion. Gary didn’t know. He wasn’t paid to know. He was paid to read the script that said no record was a clean record. Sarah took a breath, closed her laptop, and went back to pureeing organic carrots. She thought she had done her due diligence. She thought the system was a sentinel. She was wrong. The system is actually a hungry animal that only notices you once you start feeding it.

The Ghost in the Machine

Ten years later, when Leo was 12, Sarah tried again. This time, the screen didn’t show a void. It erupted. There was a credit file, alright. It was 42 pages long. According to the data, 12-year-old Leo owned a 2022 Ford F-150, lived in an apartment 102 miles away in a city Sarah had never visited, and owed $2222 to a regional utility company. The ghost of Leo had been living a much more complicated life than the actual Leo, who was currently worried about his Minecraft server and whether he could get away with not wearing socks.

This is the core frustration I deal with every day in compliance. We tell parents to ‘monitor’ their children’s credit, but you cannot monitor what does not exist. A child, by definition, does not have a credit file. They are a blank slate. To the credit bureaus, ‘no file’ looks identical to ‘no fraud.’ The file only springs into existence the moment someone-either the rightful owner or a thief-applies for credit using that Social Security number. This means the very first time you hear about a problem, the damage has already been aging for years. It is a reactive trap disguised as a protective service. It’s like being told you have a state-of-the-art home security system, only to find out the sensors don’t activate until the burglar is already in your kitchen making a sandwich.

I made a mistake once, early in my career back in ’12. I told a friend that as long as they didn’t see any mail coming in their daughter’s name, they were safe. I was arrogant. I assumed that the paper trail would be obvious. I didn’t account for ‘synthetic identity theft,’ where a criminal takes a child’s legitimate SSN and pairs it with a completely different name and birth date. They create a ‘Frankenstein’ identity. Because the SSN is real, the credit check passes. Because the name is new, the parents never see the mail. The fraud matures like a fine, poisonous wine in a cellar no one has the key to. By the time the kid applies for a student loan at 22, they find out their credit score is lower than the temperature in a walk-in freezer.

Parents go looking for help, scouring CreditCompareHQ for a service that will actually do what it says on the tin, but even the best tools are limited by the way the bureaus are built. The bureaus are not government agencies; they are private corporations that trade in data. If they don’t have data on your kid, they aren’t looking for them.

I often think about the psychology of this. We live in an era where we can track our children’s heart rates via smartwatches and their physical locations via GPS, yet their financial souls are left wandering in a dark forest. It’s a bizarre contradiction. I’ll spend 32 minutes researching the safety rating of a car seat, but I can’t effectively lock my child’s identity without jumping through a dozen bureaucratic hoops that involve mailing-yes, physical mailing-notarized copies of birth certificates to three different automated machines in the Midwest.

The Shadow’s Reach

The song in my head shifts. Now it’s a repetitive bass line that feels like a headache. I think about Camille V., a name I saw in a report 12 days ago. She was a safety auditor too, someone who knew the rules. Even she couldn’t stop it. Her daughter’s SSN was used to open 22 different credit card accounts. Camille found out when a process server showed up at her door with a summons for a 5-year-old. The absurdity of it would be funny if it weren’t so soul-crushing. We spend our lives auditing others, making sure companies follow the ‘Know Your Customer’ rules, but the customers aren’t people anymore. They are just strings of digits that end in 2 or 4 or 8.

I’ve become the person who ruins dinner parties. Someone asks me what I do, and I start talking about the structural failure of the Fair Credit Reporting Act. I tell them that their child is a ‘ghost’ in the machine. I see the light fade from their eyes as they realize another thing they have to worry about. But the truth is, you can’t actually ‘protect’ them in the traditional sense. You can only ‘freeze’ them. You have to proactively create a file just to lock it down. It’s an invasive, annoying process that 92% of parents never bother with because, frankly, who has the time to mail letters in the age of fiber-optic internet?

The Darkest Part

Last week, I had to tell a father that his son’s identity had been used by a relative. That’s the darkest part. It’s not always a faceless hacker in a hoodie. Sometimes it’s an aunt who can’t get a power bill in her own name or a father who thinks he’s ‘borrowing’ his son’s clean slate to get the family a new fridge. They justify it. They say they’ll pay it back. But then the fridge breaks, or the job is lost, and the 2-year-old is suddenly a debtor before they can even tie their own shoes. The betrayal is circular.

I look back at the screen. The 72 beats per minute of the cursor are still going. I decide to close the spreadsheet. I can’t fix the canyon tonight. I can only acknowledge it’s there. We want to believe that our children are safe because they are small, because they are ‘off the grid.’ But the grid doesn’t care how small you are. It only cares if your numbers are valid. And a child’s numbers are the most valid, most pristine assets on the market. They are the only people in the world with a perfect, untapped potential for debt.

Is There a Way Out?

Is there a way out? Maybe. It involves a total overhaul of how we verify age at the point of credit application. It involves making the ‘freeze’ the default state for every person born until they hit 18. But that would cost money. That would slow down the ‘instant’ credit economy that keeps the world spinning at a dizzying, dangerous speed. So instead, we wait. We wait for the mail that shouldn’t arrive. We wait for the phone call for a ‘Leo’ who isn’t home from middle school yet. We wait for the moment the shadow finally catches up to the child. And by then, the cursor has already moved on to the next line.