THE STOLEN START: How America Hands 18-Year-Olds a Ruined Credit File and Calls It Independence

An OPUS Investigation — Project Milk Carton

Date: June 29, 2026 Classification: Public Investigation / Child Welfare Transparency Subject: The nationwide failure of state child welfare agencies to comply with the federal foster-youth credit-monitoring mandate — 42 U.S.C. § 675(5)(I)

---

EXECUTIVE SUMMARY

Every year, roughly 20,000 young people "age out" of American foster care with no family to fall back on. Federal law promised them one specific protection before they walked out the door: that the state which held custody of them — the state that had their Social Security number, their birth certificate, and their entire identity on file — would pull their credit report every year from age 14, find any fraud, and clean it up before they turned 18.

The law is real. It has been on the books for 15 years. And the federal government has never once verified that any state actually does it.

In September 2024, the HHS Office of Inspector General delivered the first national audit of compliance (Report OEI-07-22-00510). Its findings, drawn from foster children's own case files for Fiscal Year 2021, are an indictment:

• Over half of the foster children who were legally entitled to a credit check received no credit check at all.
• 78% did not receive a check from all three required credit bureaus (Experian, Equifax, TransUnion), as the statute demands.
• For the small minority who were checked, agencies "rarely" provided the required help interpreting the report or resolving the fraud it uncovered — the entire point of the law.
• Eight states openly reported practices that fell short of the federal requirement.
• The federal agency responsible — the Administration for Children and Families (ACF) — conducts no monitoring to confirm any of this is happening.

This is not a story about a clerical lapse. It is a story about a population uniquely vulnerable to identity theft — because their most sensitive data passes through the hands of dozens of adults (birth parents, relatives, foster parents, group-home staff, caseworkers, and the agencies themselves) — being handed a legal shield that no one ever picks up.

When a Los Angeles County pilot finally ran the checks the law requires, it found 8% of 16- and 17-year-old foster youth already had fraudulent charges on their credit, most owing thousands of dollars in accounts they never opened. A child cannot legally sign a contract. So as the HHS Inspector General pointed out, the very existence of a credit file for a minor in foster care is itself prima facie evidence that someone stole that child's identity.

The core finding of this investigation: Congress built a fraud-detection tripwire for the most defenseless consumers in the country. States are not pulling the wire, HHS is not checking whether they pull it, and the predictable result is tens of thousands of teenagers aging out into adulthood already saddled with debt they never incurred, credit they cannot use to rent an apartment or finance an education, and a fraud trail gone cold. The harm was foreseen, the remedy was legislated, and the enforcement was never built.

---

PART I — THE LAW: A PROMISE WRITTEN IN STATUTE

What Congress required

The mandate lives in the federal definition of a "case plan" for every child in foster care, at 42 U.S.C. § 675(5)(I). It was created by the Child and Family Services Improvement and Innovation Act of 2011 (Pub. L. 112-34), signed into law on September 30, 2011, sponsored as H.R. 2883 by Rep. Geoff Davis (R-KY) with 16 cosponsors.

As originally enacted, the law required state child welfare agencies to ensure that each youth in foster care age 16 or older annually receives, free of charge, a copy of any consumer credit report from each major credit reporting agency, and receives assistance (including from advocates) in interpreting the report and resolving any inaccuracies in it.

Three years later, Congress decided 16 was too late. The Preventing Sex Trafficking and Strengthening Families Act of 2014 (Pub. L. 113-183) lowered the age to 14 — explicitly because the fraud was often years old by the time a 16-year-old's report was finally pulled, and because the connection between foster youth, trafficking, and identity exploitation had become impossible to ignore.

What "compliance" actually requires

To satisfy the statute as ACF interprets it, an agency must, for every youth in care age 14 to 18, every year: request the report from all three nationwide bureaus (a check at only one bureau misses fraud sitting at the other two); obtain and review the result; help the youth understand it; and dispute and clear any fraudulent accounts, collections, or errors before the youth ages out — because once they turn 18, the legal and practical burden of fixing it shifts entirely onto a homeless-risk teenager with no money and no lawyer.

The deadline is the birthday. The law is a race against the clock, and the clock is the child's 18th year.

---

PART II — WHY FOSTER YOUTH ARE THE PERFECT VICTIMS

Identity thieves prize children's Social Security numbers for a simple reason: a child's credit file is a blank, clean slate that can be exploited for years before anyone looks. The number can be paired with a different name and birthdate (a "synthetic identity"), used to open utilities, finance cars, file fraudulent tax returns, or pass employment background checks — and because no one checks a 12-year-old's credit, the fraud compounds undetected.

Foster youth are the most exposed children in America to this crime, for structural reasons:

• Their data travels. Each placement move hands their full identifying information — name, DOB, SSN — to a new set of adults: new foster parents, new group-home staff, new caseworkers, new relatives. The HHS OIG and SSA OIG both note that foster children's "sensitive personal information passes through the hands of many individuals." Every move is a new exposure.
• The thieves are often insiders. Unlike random data breaches, the people best positioned to steal a foster child's identity are the adults who legitimately possess the SSN: birth parents in financial distress, relatives, foster parents, and in some documented cases the institutions and staff themselves. The betrayal is intimate.
• No one is watching the child's credit. A child in a stable family has a parent who might eventually notice. A foster child is, by definition, a ward of a bureaucracy — and the bureaucracy is precisely the entity failing to run the checks.
• The discovery comes too late. Because the fraud surfaces (if ever) only when the young adult first tries to rent an apartment, take out a student loan, or set up electricity in their own name, it surfaces at the single most fragile moment of their lives — the transition out of care, when they have no safety net.

The downstream consequences are catastrophic and well-documented: a damaged credit file blocks housing (landlords run credit), employment (employers run background checks), utilities (deposits or denials), education financing (private loans), and even car insurance. For a population already facing extreme rates of homelessness, unemployment, and incarceration after aging out, a fraudulent credit history is not an inconvenience — it is a trapdoor.

---

PART III — THE FEDERAL AUDIT THAT PROVED THE FAILURE

HHS OIG, Report OEI-07-22-00510 (September 5, 2024)

For thirteen years, no one at the federal level systematically checked whether the credit-monitoring law was being followed. In September 2024, the HHS Office of Inspector General finally did — examining foster children's actual case files for Fiscal Year 2021. The report is titled, with rare bluntness, "Most Children in Foster Care Did Not Receive Credit Checks and Assistance."

The findings:

Finding	Figure
Foster children entitled to a check who received none	Over 50%
Did not receive checks from all three required bureaus	78%
Case files containing a credit report on file	~4%
Assistance provided to interpret/resolve reports	"Rarely," as required
States self-reporting practices below the legal standard	8 states
Children in foster care annually (the at-risk population)	~600,000

The Inspector General drew the inference that makes this data so damning. Children under 18 generally cannot legally sign a contract or open credit. Therefore a foster child who has a credit report at all is, in most cases, a child whose identity has already been used by someone else. The credit file is the fingerprint of the crime — and agencies were either never pulling it or never acting on it.

ACF's response: "concur" without consequence

The OIG made three recommendations to the Administration for Children and Families: (1) monitor whether states conduct three-bureau credit checks for all youth 14+ in care; (2) build state capacity to interpret credit reports and resolve fraud effectively; and (3) partner with other federal agencies and the credit bureaus to fix the operational barriers states cited.

ACF concurred with all three. But "concur" is not "implemented." As of this investigation, there is no public AFCARS data element that even counts whether a credit check was run, no federal penalty for noncompliance, and no audit cycle verifying the fix. The agency agreed in principle to start watching — fifteen years after the duty attached, and only after the OIG forced the question.

The structural failure in one sentence: ACF requires states to do something, never checks whether they do it, and faces no consequence when they don't.

---

PART IV — WHAT THE CHECKS FIND WHEN SOMEONE ACTUALLY RUNS THEM

The most powerful rebuttal to "this isn't really a problem" is what happens the moment a jurisdiction does the work the law requires. Three datasets tell the story.

Los Angeles County

When LA County's Department of Consumer Affairs began running credit checks on foster youth turning 16, it found that 8% of 16- and 17-year-olds already had fraudulent charges on their credit reports — most carrying thousands of dollars in accounts opened in their names. At the time of reporting, the office was working through roughly 1,600 potentially fraudulent credit reports belonging to foster youth over 16. Advocates noted the true rate is almost certainly higher, because the study captured neither fraud committed before age 16 nor fraud committed after age 18.

The California Attorney General's "A Better Start" Pilot

California's Office of Privacy Protection ran a year-long pilot (published as "A Better Start: Clearing Up Credit Records for California Foster Children") partnering LA County's Department of Children and Family Services, the Department of Consumer Affairs, and all three credit bureaus. Among the foster children studied:

• 17% (349 children) had credit records of some kind associated with their identity;
• 5% (104 children) had identity-match records — entries tied to their actual identifying information;
• Those 104 children carried a combined 247 separate accounts — an average of 2.4 fraudulent or erroneous accounts per child.

The pilot succeeded in clearing all negative items from those 104 children's reports — proof the cleanup is achievable when an agency actually does it. The point is not that the problem is unsolvable. The point is that it is solvable, and most states are not solving it.

The Virginia Cohort Study (Gyourko & Greeson)

The most rigorous academic work, published from research at the University of Pennsylvania and James Madison University (PubMed ID 35585510, Annual Credit Checks for Adolescent Youth in Foster Care: Factors Associated with Identity Fraud Victimization), examined a population-based cohort of 4,670 Virginia foster youth who received credit checks from November 2015 through December 2021, with a focused logistic-regression analysis of 1,176 youth checked in state FY2021.

It found that the risk of identity fraud victimization was not evenly distributed — it tracked the most marginalized:

• African American youth: odds ratio 2.67 (p < .001) — nearly 3x the odds of victimization;
• Youth of two or more races: odds ratio 2.95 (p = .003);
• Older age at first check: odds ratio 3.49 (p < .001) — meaning the longer a state waits to run the first check, the more fraud has already accumulated.

That last finding is the empirical justification for Congress lowering the age from 16 to 14 — and the empirical case for running checks earlier and every year, exactly as the statute requires and most states fail to do.

---

PART V — THE INSIDER PATTERN: WHEN THE CUSTODIAN IS THE CULPRIT

The credit-monitoring mandate exists because the threat is, disturbingly often, internal.

SSA Inspector General: foster children's SSNs in adult hands

The Social Security Administration's OIG audit "Potential Misuse of Foster Children's Social Security Numbers" (Report A-08-12-11253, 2013) examined 96,456 foster children under age 14 across five states — California, Florida, Michigan, New York, and Texas — as of September 30, 2011. It found foster children's SSNs turning up where no child's number should be:

• 67 foster children had earnings recorded in the SSA Master Earnings File from employers not plausibly associated with young children — agriculture, construction, food service. In one case, a 10-year-old had over $28,000 in recorded earnings from a nursing home — earnings that belonged to whoever was using that child's number.
• Foster children's SSNs also appeared in records for utilities, driver's licenses, criminal filings, and voter registration — the signatures of adults living under a child's identity.

Criminal cases and the tax-fraud trade

Reporting (notably NBC News's Preying on the Vulnerable) documented organized exploitation: a federal judge sentenced a man to six years in prison for running an identity-theft ring that stole the records of children in foster homes to file fraudulent tax returns. Individual victims described finding their SSN had been lifted from a group home and used precisely because a foster youth's record is clean enough to pass an employer background check — leaving the real child owing back taxes on income they never earned.

The adjacent theft: the "orphan tax"

A parallel pattern compounds the financial predation. Investigative reporting — from the Marshall Project (2021) through more recent work (Invisible Children, "Fosters and the Orphan Tax: How States Take Social Security from Foster Youth," 2026) — documents states routinely seizing foster children's own Social Security survivor and disability (SSI) benefits to reimburse the cost of their care, often without the child or their advocate ever being told. It is a different mechanism from identity theft, but the same underlying betrayal: the institutions entrusted with a child's identity and assets converting them to other ends. A youth can thus age out having been robbed twice — once by a fraudster the state failed to detect, and once by the state itself.

---

PART VI — KEY PLAYERS AND THE ACCOUNTABILITY GAP

Actor	Role	Accountability status
Congress	Created the mandate (Pub. L. 112-34; lowered age in Pub. L. 113-183)	Wrote duty; attached no enforcement mechanism or penalty
HHS / ACF	Federal oversight of state IV-B/IV-E child welfare; issued guidance (IM-11-06)	Does not monitor compliance; concurred with 2024 OIG recommendations, not yet implemented
HHS Office of Inspector General	Auditor	Produced the only national compliance audit (2024); cannot compel action
State child welfare agencies	Hold custody; legally responsible for running checks	Majority non-compliant (FY2021 data); cite staffing, training, bureau-coordination gaps
Experian, Equifax, TransUnion	Must furnish free reports for foster minors	States reported operational friction; no public accounting of fulfillment rates
FTC / CFPB	Consumer-protection guidance	Advisories (FTC alert, Sept. 2025; CFPB toolkit) — guidance, not enforcement
Advocacy bar	Alliance for Children's Rights, CWLA, Just in Time, ITRC	Run clinics and clearance projects; fill the vacuum the state leaves

The accountability gap is the heart of the story. Three layers each assume another is responsible: Congress assumed imposing the duty would produce the action; ACF treated it as a state responsibility and built no verification; states treated it as an unfunded, low-priority paperwork task competing with caseloads in crisis. No layer owns the outcome — so clean credit for an aging-out youth simply doesn't happen, and no one is accountable for the gap because no one ever measured it. The 2024 OIG audit was the first time the gap was even counted.

---

PART VII — THE STATE-LEVEL WORKAROUND: CREDIT FREEZES

Because the federal cleanup mandate is failing, some states are pivoting to prevention — automatic credit freezes for foster youth. Where the 2011 law tells agencies to find and fix fraud after the fact, a freeze stops new fraudulent accounts from being opened at all.

California's legislative track illustrates the shift: from early measures (AB 846) through proposals to automatically freeze a foster youth's credit file the moment a report is detected (e.g., AB 2935), so that "a block is put on it and the damage is stopped in its tracks." A freeze is cheaper, faster, and does not depend on an overstretched caseworker correctly disputing a dozen accounts before a birthday deadline.

The freeze model is promising — but it is a state-by-state patchwork, not a federal guarantee, and it does nothing for the fraud already sitting on a 17-year-old's file today. It is a workaround for a federal mandate that was never enforced, not a substitute for enforcing it.

---

ACTIONABLE FINDINGS

1. The mandate is real and unenforced. 42 U.S.C. § 675(5)(I) has required annual three-bureau credit checks and fraud resolution for foster youth 14+ since 2011 (age lowered from 16 in 2014). No federal penalty or audit cycle backs it.

2. Majority non-compliance is documented, not alleged. Per HHS OIG (OEI-07-22-00510, Sept. 2024): in FY2021, over half of entitled foster children received no check, 78% missed the all-three-bureau requirement, and assistance was provided only "rarely."

3. HHS performs zero compliance monitoring. ACF concurred with all three OIG recommendations but has not implemented verification. There is no AFCARS data element tracking whether checks occur.

4. When checks run, fraud is everywhere. LA County: 8% of 16-17-year-olds had fraudulent charges (~1,600 reports under review). California "A Better Start": 5% had identity-match records averaging 2.4 accounts each.

5. The harm targets the most marginalized. Virginia cohort (n=4,670): African American youth carried 2.67x the odds of victimization; older age at first check, 3.49x — proving early, repeated checks matter most.

6. The custodians are often the threat. SSA OIG (A-08-12-11253) found foster children's SSNs generating adult earnings, utilities, licenses, criminal filings, and voter records; criminal rings have stolen foster records for tax fraud. The "orphan tax" shows states themselves divert foster youth's benefits.

7. The deadline is unforgiving. Every uncorrected file becomes the sole burden of an 18-year-old aging out with no family, no money, and a fraud trail gone cold — directly fueling documented post-care homelessness and unemployment.

Recommended lines of further inquiry (FOIA / oversight targets)

• State-by-state compliance data: FOIA each state IV-E agency for FY2021-FY2025 counts of (a) youth 14+ in care, (b) three-bureau checks run, (c) fraud cases identified, (d) cases resolved before aging out. Identify the 8 states that self-reported shortfalls in the OIG audit.
• ACF implementation status: FOIA ACF for its post-2024 corrective action plan and any monitoring protocol adopted in response to OEI-07-22-00510.
• Credit bureau fulfillment: Request aggregate data on free foster-youth report requests fulfilled vs. received by Experian, Equifax, and TransUnion.
• Cross-reference with the SSI "orphan tax" to map states that both fail credit checks and divert foster youth benefits — the double-theft jurisdictions.

---

SOURCES

1. HHS Office of Inspector General — Most Children in Foster Care Did Not Receive Credit Checks and Assistance (OEI-07-22-00510, Sept. 5, 2024): https://oig.hhs.gov/reports/all/2024/most-children-in-foster-care-did-not-receive-credit-checks-and-assistance/
2. Social Security Administration OIG — Potential Misuse of Foster Children's Social Security Numbers (A-08-12-11253, 2013): https://oig-files.ssa.gov/audits/full/A-08-12-11253.pdf
3. Alliance for Children's Rights — Protecting Vulnerable Foster Youth from Identity Theft: https://allianceforchildrensrights.org/wp-content/uploads/2018/12/Protecting-Vulnerable-Foster-Youth-from-Identity-Theft.pdf
4. California Attorney General / Office of Privacy Protection — A Better Start: Clearing Up Credit Records for California Foster Children: https://oag.ca.gov/sites/all/files/agweb/pdfs/privacy/foster_youth_credit_records.pdf
5. Gyourko, J. & Greeson, J.K.P. — Annual Credit Checks for Adolescent Youth in Foster Care: Factors Associated with Identity Fraud Victimization (PubMed 35585510): https://pubmed.ncbi.nlm.nih.gov/35585510/
6. NBC News — Preying on the Vulnerable: Foster Youth Face High Risk of Identity Theft: https://www.nbcnews.com/feature/in-plain-sight/preying-vulnerable-foster-youth-face-high-risk-identity-theft-n157641
7. FTC Consumer Advice — How to help protect foster youth from identity theft (Sept. 2025): https://consumer.ftc.gov/consumer-alerts/2025/09/how-help-protect-foster-youth-identity-theft
8. Consumer Financial Protection Bureau — Helping youth in foster care start and maintain good credit: https://files.consumerfinance.gov/f/documents/cfpb_adult-fin-ed_help-youth-in-foster-care-start-and-maintain-good-credit.pdf
9. Identity Theft Resource Center — The Impact of Identity Theft on Foster Youth (white paper): https://www.idtheftcenter.org/wp-content/uploads/2019/01/ITRC_dec18_white-pages-foster-youth_FINAL_web.pdf
10. Public Law 112-34, Child and Family Services Improvement and Innovation Act (2011): https://www.govinfo.gov/content/pkg/PLAW-112publ34/html/PLAW-112publ34.htm
11. Congressional Research Service — The Child and Family Services Improvement and Innovation Act (P.L. 112-34) (R42027): https://www.everycrsreport.com/reports/R42027.html
12. The Marshall Project — Were You Ever in Foster Care? The Government May Have Taken Your Money (2021): https://www.themarshallproject.org/2021/04/22/were-you-ever-in-foster-care-here-s-how-to-find-out-if-the-government-took-your-money
13. Invisible Children — Fosters and the Orphan Tax: How States Take Social Security from Foster Youth (2026): https://invisiblechildren.org/2026/03/17/fosters-orphan-tax-social-security/
14. California Legislature — AB-846, Foster youth: identity theft: https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=201120120AB846

---

Prepared by OPUS — Project Milk Carton's autonomous intelligence system. Child welfare transparency - Missing children awareness - Government accountability. All figures sourced to primary government audits, peer-reviewed research, and on-record reporting. Suitable for SCRIBE article/video adaptation.