SSA Says Scammers Are Now Sending Fake Social Security Statement Emails — Here’s the Red Flag

Scammers use many strategies to get victims to part ways with their money, and Social Security recipients are a common target.

Fake Social Security statement emails have become more common, with the Social Security Administration’s (SSA) Office of the Inspector General warning of a “significant increase” in government imposter emails earlier this year. Knowing the common red flags can help you avoid becoming a victim.

How the fake Social Security Statement email works

Some scammers send messages impersonating the SSA and claim that you can view or download your recent statement. The email contains a red flag right away because Social Security would never send an unsolicited link or download button that gives access to your statement.

The link will often lead to a fraudulent website that looks legitimate and asks for your login information. Then, once a victim provides that information, a scammer can get into their actual Social Security account and redirect benefits. It can also lead to identity theft, which can translate into additional losses if the scammer takes out credit lines under your name.

Scammers can find real government employees’ names and create fake documents to appear legitimate. While you can also check the sender’s email address for a slight misspelling or the wrong URL in the email, the best thing you can do is avoid clicking the link.

The safe way to check your Social Security Statement

Instead of following the steps suggested by the potential scammer, head over to the SSA’s website and sign into your personal “my Social Security” account to review records and account information. That way, you go straight to the source instead of clicking what is very likely to be a fraudulent link in a scammer’s email.

Phishing isn’t limited to Social Security. Scammers will present themselves as other agencies and companies when attempting to steal your information. That’s why the Federal Trade Commission (FTC) advises against clicking links or downloading attachments in unexpected messages.

Phishing also isn’t the only Social Security scam. Threats of arrest, claims that your Social Security number will be suspended, demands for immediate payment (especially through an alternative method like crypto or gift cards) or pressure to provide personal information are common scammer tactics.

What to do if you clicked the link

You should report the scam to the SSA regardless of whether you clicked the link or not. If you clicked the link but did not enter any of your personal information, you should update your security software and run a scan for malware.

If you clicked the link and entered any personal or financial information, you must move quickly. Change compromised passwords and follow the FTC’s identity theft recovery process if sensitive identity information was exposed. You should also freeze your credit so a scammer cannot take out loans and credit lines under your name.

Be sure to monitor your financial statements and Social Security records to ensure there is no suspicious activity. While clicking does not guarantee your information has been stolen, it’s good to be cautious and know how to pinpoint scammers before you become a victim.