Social Security does not send unsolicited emails
The Social Security Administration (SSA) does not initiate contact with you by email. If you receive an email claiming to be from Social Security, it is not from the agency, regardless of how official it looks. The SSA communicates through the mail, by phone if you call them first, or through your account on ssa.gov if you have created one.
Scammers send millions of fake Social Security emails every year. They use logos, language, and sender addresses designed to look legitimate. The goal is usually to steal your Social Security number, get you to click a malicious link, or trick you into sending money.
Understanding what the real SSA does and does not do protects you from losing money or having your identity stolen. The difference between a real communication and a scam is often small, but it matters.
Key Takeaways
- Social Security will never send you an unsolicited email, even if it looks official or mentions your account.
- Real SSA communications arrive by mail or through your account on ssa.gov if you created one and logged in yourself.
- Scam emails often ask you to click a link, verify personal information, or call a phone number — the SSA does not do this by email.
- If you think a message might be real, go directly to ssa.gov or call 1-800-772-1213 using the number on your Social Security card or a bill — never use a number from the email.
How Social Security actually contacts you
The SSA reaches you through three channels only: mail sent to your address on file, a phone call if you initiated contact first, or a message in your personal account on ssa.gov after you log in.
If you have created a my Social Security account on ssa.gov, you can log in and see messages from the agency. These appear only after you enter your username and password — not in your email inbox. The SSA may send you an email notifying you that a message is waiting in your account, but the message itself is not in the email.
Official mail from Social Security comes from an SSA office and includes your name, a specific reason for the letter, and what you need to do next. The envelope has the Social Security Administration seal. If you are unsure whether a letter is real, call 1-800-772-1213 to confirm.
What scam emails ask you to do
Fake Social Security emails typically ask you to take one of these actions: click a link, reply with personal information, call a phone number, or read an attachment.
A common scam says your account has been locked, suspended, or flagged for fraud and asks you to "verify your information" by clicking a link. The link takes you to a fake website that looks like ssa.gov but is controlled by the scammer. When you enter your Social Security number, password, or bank details, the scammer captures them.
Another type claims you have unclaimed benefits or a refund waiting and asks you to click to claim it. Others say you missed a important date or need to update your information urgently. Some ask you to call a number to resolve a problem — the number connects to a scammer posing as an SSA employee.
The SSA does not ask you to click links, reply to emails with personal data, or call numbers provided in unsolicited messages. If the email creates a sense of urgency or fear, it is almost certainly a scam.
Red flags in fake Social Security emails
Scam emails often contain clues that reveal them as fraudulent, though some are well-designed. Look for these warning signs: a generic greeting like "Dear User" instead of your name; a sender address that does not match ssa.gov; spelling or grammar errors; requests for your Social Security number, password, or bank information; and links that do not go to ssa.gov when you hover over them.
Legitimate SSA mail uses your full name, refers to specific details about your account or case, and never asks you to confirm sensitive information by email or phone. If an email mentions a important date, urgency, or a threat to your benefits, treat it as a scam unless you initiated the contact.
Even emails with official-looking logos and correct grammar can be fake. The safest approach is to assume any unsolicited email claiming to be from Social Security is a scam, regardless of how real it appears.
What to do if you receive a fake Social Security email
Do not click any links or read any attachments. Do not reply to the email or call any phone number in it. Delete the message.
If you want to report the scam, forward the email to phishing@ssa.gov. The SSA uses these reports to track scammers and warn the public. You can also report it to the Federal Trade Commission (FTC) at reportfraud.ftc.gov.
If you already clicked a link or entered information, change your Social Security Administration password when ready if you have a my Social Security account. Monitor your credit report and bank accounts for suspicious activity. You can place a fraud alert with the three major credit bureaus (Equifax, Experian, and TransUnion) by contacting one of them — they will notify the others.
How to verify a message is really from Social Security
If you are unsure whether a communication is real, do not use any contact information in the message. Instead, go directly to ssa.gov in your browser or call 1-800-772-1213 using the number on your Social Security card or a recent bill from the SSA.
When you call, tell the representative what message you received and ask whether it came from the agency. They can confirm whether the SSA tried to reach you and what the communication was about. This is the only way to be certain.
If you have a my Social Security account, log in directly to ssa.gov and check your messages. Do not click any links in emails to get there — type ssa.gov into your browser yourself or use a bookmark you created before.
Frequently Asked Questions
Can Social Security emails be legitimate if they come from an ssa.gov address?
No. Scammers can fake sender addresses to make emails look like they come from ssa.gov. The only way to know if a message is real is to log into your my Social Security account directly on ssa.gov or call 1-800-772-1213. Never click links in unsolicited emails, even if the sender address looks correct.
What should I do if I clicked a link in a fake Social Security email?
Change your my Social Security password right away if you have an account. Check your credit report and bank accounts for fraud. You can place a fraud alert with Equifax, Experian, or TransUnion by calling one of them — they will notify the others. Report the email to phishing@ssa.gov and the FTC at reportfraud.ftc.gov.
Will Social Security ever text me?
The SSA does not send unsolicited text messages. If you receive a text claiming to be from Social Security, it is a scam. Do not click links or reply. You can report it to phishing@ssa.gov by forwarding the message details, though text reports are less common than email scams.
How do I know if my Social Security account has really been locked?
Log into your my Social Security account directly on ssa.gov using your username and password. If your account is locked, you will see a message when you log in. You can also call 1-800-772-1213 to ask. The SSA will never tell you your account is locked through an unsolicited email or text.
Is it safe to reply to a fake Social Security email to tell them to stop?
No. Replying confirms your email address is active and monitored, which makes scammers more likely to send you more emails. Delete the message and do not respond. If you want to report it, forward it to phishing@ssa.gov instead.