Social Security will not ask for personal information by email

Social Security does not send unsolicited emails asking you to verify your account, confirm your Social Security number, update your banking details, or click a link to "resolve a problem." If you receive an email claiming to be from Social Security and asking you to do any of these things, it is a scam. Delete it.

The Social Security Administration (SSA) communicates with the public through official mail, phone calls from known numbers, and your account on ssa.gov if you have created one. They will never initiate contact by email to request sensitive information. Scammers use official-looking logos, urgent language, and fake links to trick you into entering your Social Security number, date of birth, bank account details, or passwords.

The most common fake Social Security emails claim your account has been locked, your benefits are at risk, there is fraudulent activity on your account, or you need to update your information when ready. All of these are red flags.

Key Takeaways

  • Social Security does not send emails asking you to verify your account, confirm your number, or click links to resolve problems.
  • Fake Social Security emails often use urgent language, official logos, and links that look real but lead to scam websites designed to steal your information.
  • If you receive a suspicious email, do not click any links or read any attachments — forward it to phishing@socialsecurity.gov and delete it.
  • You can contact Social Security directly by calling 1-800-772-1213 (TTY 1-800-325-0778) to verify whether they sent you a message.
  • If you have already entered your information into a fake website, contact the Social Security fraud hotline at 1-800-269-0271 right away.

What a real Social Security email looks like

If you have created a my Social Security account on ssa.gov, you may receive legitimate emails from Social Security. These emails come from an address ending in @ssa.gov and are sent only because you set up account notifications yourself. Real Social Security emails will never ask you to click a link and enter your password or Social Security number.

A genuine email from Social Security about your account might tell you that someone tried to access your account, that a payment was issued, or that a document is ready for you to view. The email will direct you to log in to your existing my Social Security account using the web address ssa.gov — not a link in the email. You type the address yourself into your browser.

If you have not created a my Social Security account, you should not receive emails from Social Security at all. Any email claiming to be from Social Security that arrives in your inbox unsolicited is fraudulent.

How to spot a fake Social Security email

Scam emails often copy the look of official Social Security materials, but several details give them away. Check the sender's email address — it should end in @ssa.gov if it is real. Hover over any links (do not click) to see where they actually point. Fake emails often link to addresses that look similar to ssa.gov but are slightly different, such as ssa-verify.com or find-socialsecurity.net.

Watch for urgent language that creates pressure to act when ready: "Your account will be closed," "Verify now or lose your benefits," "Unusual activity detected," or "Click here to confirm your identity." Social Security does not threaten to close accounts by email or demand when ready action.

Legitimate Social Security emails address you by name and refer to specific details about your account or benefits. Scam emails often use generic greetings like "Dear Customer" or "Dear User." If an email asks you to read an attachment, open it, or enable macros, it is a scam — Social Security does not send files this way.

What to do if you receive a suspicious email

Do not click any links, read any attachments, or reply to the email. Forward the entire message to phishing@socialsecurity.gov so Social Security can track the scam. Then delete the email from your inbox.

If you are unsure whether an email is real, contact Social Security directly using a phone number you know is correct. Call 1-800-772-1213 (TTY 1-800-325-0778, Monday through Friday, 7 a.m. to 7 p.m. Eastern time). Tell them the subject of the email and ask whether Social Security sent it. Do not use any phone number from the suspicious email itself.

You can also report the scam email to the Federal Trade Commission (FTC) at reportfraud.ftc.gov. The FTC tracks fraud patterns and shares information with law enforcement.

If you already clicked a link or entered your information

If you entered your Social Security number, date of birth, bank account details, or password into a website from a fake email, contact Social Security's fraud hotline when ready at 1-800-269-0271. They can flag your account and help protect it from misuse. Have your Social Security number ready when you call.

You should also place a fraud alert on your credit file by contacting one of the three major credit bureaus — Equifax, Experian, or TransUnion. A fraud alert tells lenders to verify your identity before opening new accounts in your name. You only need to contact one bureau; they will notify the others. You can place a fraud alert for free.

Monitor your credit report for accounts or charges you did not open. You can view your credit report for free once per year at annualcreditreport.com. If you see fraudulent accounts, contact the creditor and the credit bureau when ready to dispute them.

Protecting your Social Security information going forward

Never share your Social Security number by email, text, or phone unless you initiated the contact and you are certain you are speaking with Social Security. Social Security will never ask for your number by email.

Use strong, unique passwords for your my Social Security account and any other online accounts. Enable two-factor authentication on your my Social Security account if it is available — this adds an extra layer of security by requiring a code sent to your phone when you log in.

Be cautious of emails that create urgency or ask you to verify information. When in doubt, hang up or close the email and call Social Security yourself using the official number 1-800-772-1213. A few minutes to verify saves you from identity theft.

Frequently Asked Questions

Can Social Security lock my account through email?

No. Social Security does not lock accounts by email or send emails warning that your account will be closed. If you are concerned about your account security, log in to my Social Security on ssa.gov directly (do not use a link from an email) or call 1-800-772-1213.

What if the email looks exactly like it came from Social Security?

Scammers can copy logos, formatting, and official language very well. The only way to be certain is to contact Social Security directly using a phone number you know is correct, or to log in to your my Social Security account yourself without clicking any email links. Do not trust the sender's address or appearance alone.

Is it safe to click a link just to see where it goes?

No. Clicking a link from a scam email can read malware to your computer or phone, or take you to a fake website that looks real but steals information you enter. Hover over links to preview where they point, but do not click them. Forward the email to phishing@socialsecurity.gov instead.

What should I do if my Social Security number was stolen?

Call Social Security's fraud hotline at 1-800-269-0271 when ready. Place a fraud alert with one of the three credit bureaus (Equifax, Experian, or TransUnion). Monitor your credit report at annualcreditreport.com for accounts you did not open, and dispute any fraudulent activity with the creditor and credit bureau.

Can I get my money back if I sent money to a scammer?

Recovery is difficult once money is sent, but report it when ready to Social Security at 1-800-269-0271, to your bank, and to the FTC at reportfraud.ftc.gov. Provide as much detail as you can about how you sent the money and where it went. Law enforcement may be able to recover funds in some cases.