Fraud Cleanup

Is That Social Security Scam Email Real?

A Social Security scam email threatens things the real SSA never does. Learn to spot the fake, report it, and lock down your number.

What a Social Security scam email looks like

The email in your inbox says it is from the Social Security Administration. It may claim your number is suspended. It may say your benefits will stop unless you act today. It may ask you to click a link or open an attachment to "verify" your identity.

The FBI calls this phishing. Phishing emails are designed to get your personally identifiable information or your financial credentials. The FBI says these schemes often use spoofing techniques to lure you in and get you to take the bait.

Scammers are good at making an email look official. The FBI says they use slight differences in email addresses, URLs, and spelling to trick your eye and gain your trust. The logo may look right. The colors may match. The sender name may say "Social Security Administration." None of that makes it real.

Watch for these signs:

  • A threat. The email says your number will be suspended or your benefits cut off.
  • A deadline. It pushes you to act right now, before you can think.
  • A demand for payment. The SSA's page says scammers insist you pay with a gift card, gold bars, prepaid debit card, cryptocurrency, wire transfer, money transfer, or cash. The SSA says they use these forms of payment because they are hard to trace.
  • A request for your username, password, or Social Security number. The FBI says companies generally do not contact you to ask for your username or password.
  • A link or an attachment. The FBI says fake websites used in phishing are made solely to steal your information.

Why the real SSA never sends emails like this

Here is the simplest test. The FTC says the real Social Security Administration will not threaten you or suspend your Social Security number. If the email threatens you, it is not from the SSA. Period.

That one fact settles most of these emails. A message that says your number is suspended is fake, because the real agency does not suspend numbers. A message that threatens arrest or a cutoff of benefits by email is fake for the same reason.

Scammers also run this play by phone. For the wider picture, read about the scam social security playbook or the social security scam by mail.

What to do the moment you spot the scam

Do not click anything. The FBI says not to click on anything in an unsolicited email or text message.

Do not open the attachment. The FBI says never to open an email attachment from someone you do not know, and to be wary of attachments forwarded to you.

The SSA's page says to hang up or ignore the message, and not click on links or attachments. Then it says to stop talking to the scammer and block their phone number or email address. Blocking the sender ends the conversation on your terms.

Want to check if the email is real? The FBI says to look up a company's phone number on your own and call to ask if a request is legitimate. Do not use any phone number printed in the email. Find the real SSA contact information yourself, on your own, and ask them directly.

How to report the scam email

Reporting helps more than you might think. The SSA says reporting a Social Security-related scam provides data used to inform others, identify trends, and take legal action against criminals.

Report the scam to the SSA's Office of the Inspector General at oig.ssa.gov/report.

The FBI says to report spoofing and phishing to its Internet Crime Complaint Center at ic3.gov.

The SSA's page also says to call your local police department to report the crime.

First, do not panic. You are not the first person to click, and there are clear next steps.

If you entered a username and password into a fake site, the SSA says to create a new, strong password for that account right away. The FBI says to set up two-factor or multi-factor authentication on any account that allows it, and never disable it.

If you gave out your Social Security number or other personal details, treat it as identity theft. The SSA says to visit identitytheft.gov to report identity theft and get a recovery plan.

The SSA also says to notify the three major credit bureaus, Equifax, Experian, and TransUnion, to add a fraud alert to your credit report. You can read more about how an experian fraud alert works, and what to do about broader identity theft social security cases.

If a scammer took your money, the SSA says to read the FTC's What To Do if You Were Scammed for step-by-step advice.

Protecting your Social Security number going forward

The SSA says to visit ssa.gov/myaccount to sign in or create a personal my Social Security account. The SSA says opening your account helps secure your personal information and prevents identity thieves from fraudulently opening an account in your name.

There is a built-in alarm too. The SSA says if anyone tries to change your address or direct deposit without your permission, you will get an alert right away. The SSA says going digital puts you in control and adds an extra layer of protection against scams.

Beyond that, keep the FBI's rules in hand. Do not click links in unsolicited emails. Do not open attachments from strangers. Never share a username or password because an email asked. Verify any request by finding the real phone number yourself.

You now know the one test that settles almost every one of these emails. The real SSA does not threaten you and does not suspend your number. An email that does either is a scam, every time.

Sources