What Social Security scam emails look like and why they're spreading

Social Security scam emails trick you into giving up your Social Security number, bank details, or passwords by pretending to come from the Social Security Administration. The emails usually say your account is locked, your benefits are suspended, or you need to verify your information urgently. None of these emails actually come from Social Security — the agency does not contact people by email about account problems.

These scams have grown sharply in recent years because they work. A person who believes their benefits are at risk will often click a link or open an attachment without thinking carefully. The scammer's goal is to steal your identity or money, or both. Once they have your Social Security number and other personal details, they can open accounts in your name, file false tax returns, or drain your bank account.

The Social Security Administration has warned the public repeatedly about these emails. The agency publishes lists of common scam tactics on its official website, but scammers keep changing their approach to get past spam filters and to look more convincing. Learning what a real Social Security communication looks like — and what a fake one does — is your best defense.

Key Takeaways

  • Social Security never sends emails asking you to verify your account, confirm your identity, or click a link to unlock benefits.
  • Real Social Security notices arrive by mail, not email, and they come from an address ending in ssa.gov if you receive anything online.
  • Scam emails often create false urgency by claiming your account is locked or your benefits will stop, but Social Security handles these issues by mail.
  • If you receive a suspicious email, forward it to phishing@ssa.gov and delete it — do not click any links or read attachments.
  • You can report the scam to the Federal Trade Commission at reportfraud.ftc.gov, which helps law enforcement track patterns.

How to recognize a fake Social Security email

Scam emails use several common tricks to look real. They may include the Social Security Administration logo, official-sounding language, or a link that appears to go to ssa.gov but actually goes somewhere else. The sender's email address might look close to a real Social Security address but have a small difference — for example, "ssa-security@gmail.com" instead of an actual ssa.gov address.

The content of the email is usually designed to scare you into acting fast. Common messages include: "Your Social Security account has been locked," "We detected suspicious activity on your account," "Your benefits have been suspended," or "Verify your information within 24 hours or lose access." Real Social Security communications do not use this language. The agency does not threaten to lock your account or suspend benefits via email.

Scam emails often ask you to click a link, read a file, or reply with personal information. A real Social Security notice will never ask you to do any of these things by email. If you receive an email claiming to be from Social Security and it asks you to click anything or provide information, it is a scam.

What real Social Security communications look like

The Social Security Administration communicates with people primarily through the mail. If you receive a notice about your account, benefits, or earnings record, it will arrive as a physical letter at your address on file. These letters come from Social Security's local office or from the agency's main processing centers.

If you have created a my Social Security account on the official website (ssa.gov), you may receive emails from that account — but only if you set up email notifications yourself. These emails will come from an address ending in @ssa.gov and will direct you to log into your account through ssa.gov, not through a link in the email. Social Security will never ask you to click a link in an email to access your account.

You can also call Social Security directly at 1-800-772-1213 if you are unsure whether a notice is real. The agency's representatives can tell you whether they sent a particular letter or email. If you call, use the phone number from the official ssa.gov website or from a previous Social Security letter — do not use a number from the suspicious email.

Steps to take if you receive a scam email

Do not click any links or read any attachments from a suspicious email. Do not reply to the email or provide any information. Instead, forward the entire email to phishing@ssa.gov. This is Social Security's official email address for reporting scams. Include the full email header if possible, which shows where the email actually came from.

After forwarding the email to Social Security, delete it from your inbox. If you accidentally clicked a link or downloaded a file, change your Social Security account password when ready if you have a my Social Security account. Run a virus scan on your computer using your antivirus software.

You can also report the scam to the Federal Trade Commission at reportfraud.ftc.gov. The FTC collects information about scams and shares patterns with law enforcement. Reporting helps authorities understand which scams are most common and where they are coming from.

What to do if you already gave out personal information

If you clicked a link and entered your Social Security number, password, or bank details, act quickly. Change your Social Security account password when ready if you have a my Social Security account. Call Social Security at 1-800-772-1213 to report that your information may have been compromised. The agency can flag your account and watch for suspicious activity.

Contact your bank and credit card companies to tell them your information may have been stolen. Ask them to watch your accounts for unauthorized charges. Consider placing a fraud alert or credit freeze on your credit report through one of the three major credit bureaus: Equifax, Experian, or TransUnion. A fraud alert tells lenders to verify your identity before opening new accounts in your name. A credit freeze prevents anyone from opening accounts without your permission.

Monitor your credit report for accounts you did not open. You can view your credit report for free once per year at annualcreditreport.com. If you see accounts or charges you do not recognize, dispute them with the credit bureau and your bank. Keep records of all communications about the fraud.

How scammers use stolen Social Security information

Once a scammer has your Social Security number and other personal details, they can commit several types of fraud. The most common is identity theft, where they open credit cards, take out loans, or open bank accounts in your name. You may not notice this for weeks or months, until you check your credit report or receive bills for accounts you never opened.

Scammers also file false tax returns using stolen Social Security numbers. They claim refunds that the IRS sends to the scammer's bank account instead of yours. You may not discover this until you file your own tax return and the IRS tells you a return was already filed under your number.

Some scammers use stolen Social Security numbers to commit crimes or to work illegally. If a crime is committed using your number, you could face legal problems or have a criminal record under your name. This is rare but serious, and it requires working with law enforcement to clear your name.

Frequently Asked Questions

Will Social Security ever contact me by email about my account?

No. Social Security communicates by mail for account issues, benefit changes, and earnings records. If you have a my Social Security account and set up email notifications, you will receive emails — but they will come from @ssa.gov and will never ask you to click a link or provide information in the email itself.

What should I do if I'm not sure whether an email is real?

Call Social Security at 1-800-772-1213 using the number from the official ssa.gov website or a previous letter. Do not use a phone number from the email. Social Security representatives can tell you whether they sent a particular notice. You can also forward the email to phishing@ssa.gov and delete it.

Can I get my money back if I sent money to a scammer?

It depends on how you sent the money. If you wired money or sent it through a money transfer service, it is usually gone. If you paid by credit card or bank transfer, you may be able to dispute the charge. Contact your bank or credit card company when ready. Report the scam to the Federal Trade Commission at reportfraud.ftc.gov.

How do I know if my Social Security number has been stolen?

Check your credit report at annualcreditreport.com for accounts you did not open. Monitor your Social Security earnings record through your my Social Security account to see if anyone has worked using your number. If you see suspicious activity, contact Social Security at 1-800-772-1213 and place a fraud alert on your credit report.