Check the web address before you enter any information
The official Social Security website is ssa.gov — that is the only domain Social Security owns. If the address bar shows anything else, you are not on Social Security's site, even if the page looks identical. Fake sites often use addresses like ssa-gov.com, socialsecurity.gov.us, or mysocialsecurity-login.com. These are scams designed to steal your username, password, or Social Security number.
Type the address directly into your browser instead of clicking a link in an email or text message. Links in messages — even ones that look official — frequently point to fake sites. If you receive a message claiming to be from Social Security, ignore any links in it and go to ssa.gov yourself to check your account or find a phone number.
Look for the padlock icon next to the address bar. A padlock means the connection is encrypted, which is a basic security feature. However, a padlock alone does not may provide the site is real — many fake sites use encryption too. The padlock is necessary but not sufficient. The address itself is what matters most.
Key Takeaways
- The real Social Security website address is ssa.gov with nothing before or after it — any variation is a fake site.
- Never click links in emails or text messages claiming to be from Social Security; type ssa.gov directly into your browser instead.
- Social Security will never ask you to confirm your password, Social Security number, or bank details through email or text.
- If you think you have visited a fake site, change your Social Security password immediately and monitor your account for unauthorized activity.
- You can report suspected fake Social Security websites to the real Social Security Administration through their official contact methods.
What Social Security will never ask you to do online
Social Security does not send unsolicited emails or text messages asking you to verify your account, confirm your identity, or update your information. If you receive a message like this, it is a scam. Real Social Security contact comes through the mail or through your own account when you log in.
Social Security will never ask you to provide your password, full Social Security number, or bank account details through email, text, or a pop-up window. If a website or message asks for these things, close it immediately and do not enter anything. Legitimate government agencies do not request sensitive information this way.
Scammers sometimes impersonate Social Security by phone as well, claiming your benefits have been suspended or that you owe money. Real Social Security representatives will not threaten you with arrest, demand immediate payment, or ask you to wire money. If you receive a call like this, hang up and call Social Security directly at 1-800-772-1213 to verify whether there is actually an issue with your account.
How to set up your my Social Security account safely
If you want to check your earnings record, view your benefit statement, or manage your account online, you can create a my Social Security account at ssa.gov. Start by going directly to ssa.gov — do not follow a link from anywhere else. Look for the "Create an account" or "Sign in" option on the homepage.
Social Security uses a third-party identity verification service called ID.me to confirm you are who you say you are before you can create an account. This verification step is real and required. ID.me will ask you to provide personal information and may ask you to upload a photo of your ID. This is a legitimate part of the process, not a scam — but make sure you are on ssa.gov when you start, because scammers sometimes create fake ID.me pages too.
Once your account is created, you will receive a username and password. Write these down in a secure place — not on a sticky note on your monitor. Use a password manager if you have one. Never share your login information with anyone, including Social Security employees. Social Security staff will never ask for your password.
Recognizing common Social Security scams
The most common scam is a message — email, text, or robocall — claiming your Social Security number has been suspended, locked, or used fraudulently. The message directs you to click a link or call a number to "restore" your account. This is always a scam. Your Social Security number cannot be suspended. If you click the link, you will land on a fake site designed to steal your information.
Another frequent scam involves a message saying you have unclaimed benefits or a refund waiting. It asks you to provide personal information or pay a fee to receive the money. Social Security does not work this way. You do not pay to receive benefits, and Social Security does not contact you about unclaimed money through unsolicited messages.
Scammers also pose as Social Security employees and call claiming they need to verify your information because of suspicious activity on your account. They may sound official and may even have some of your real information, which they obtained from a data breach elsewhere. Hang up and call Social Security's main number (1-800-772-1213) to verify the claim yourself. Do not give information to anyone who calls you first.
What to do if you think you visited a fake site
If you entered your username and password on a site you now believe was fake, change your my Social Security password immediately. Go to ssa.gov, log in with your current credentials, and look for the account settings or security section where you can change your password. Make it different from any password you have used before.
If you entered your Social Security number, bank account information, or other sensitive details, monitor your credit and bank accounts for unauthorized activity. You can place a fraud alert with the three major credit bureaus (Equifax, Experian, and TransUnion) by contacting any one of them — they will notify the others. A fraud alert makes it harder for someone to open accounts in your name.
Report the fake website to Social Security's Office of Inspector General. You can file a report online at oig.ssa.gov or call 1-800-269-0271. Include the fake web address, the date you visited it, and what information you may have entered. This helps Social Security track scams and warn other people.
How to contact the real Social Security Administration
If you need to reach Social Security, use only contact information from ssa.gov itself. The main phone number is 1-800-772-1213. You can also visit a local Social Security office in person — find the address at ssa.gov/locator. Do not rely on phone numbers from emails, texts, or search results, because scammers buy ads and create fake listings.
Social Security's mailing address is Social Security Administration, Office of Public Inquiries, 6401 Security Boulevard, Baltimore, MD 21235. If you mail something to Social Security, use only this address or an address provided directly on ssa.gov.
You can also report suspected fraud or scams to the Federal Trade Commission at reportfraud.ftc.gov. The FTC does not resolve individual cases, but it collects reports to identify patterns and warn the public.
Frequently Asked Questions
Can Social Security contact me through email or text?
Social Security may send you an email or text if you have set up notifications in your my Social Security account, but these will only be about your own account activity that you initiated. Social Security will never send an unsolicited email or text asking you to verify information, confirm your identity, or click a link. If you receive such a message, it is a scam.
Is it safe to use public WiFi to access my Social Security account?
Public WiFi is not secure, and using it to log into sensitive accounts increases the risk that someone on the same network can intercept your password or information. If you must access your account on public WiFi, use a VPN (virtual private network) if you have one, or wait until you are on a private network. It is safest to access your account from home on your own internet connection.
What if I see my Social Security number being used fraudulently?
Contact Social Security directly at 1-800-772-1213 to report the fraud. You should also file a report with the Federal Trade Commission at reportfraud.ftc.gov and consider placing a fraud alert or credit freeze with the credit bureaus. Keep records of all fraudulent activity and any correspondence with Social Security and the credit bureaus.
How do I know if a pop-up on ssa.gov is real?
Legitimate pop-ups on ssa.gov will appear within the page itself and will not ask for your password or Social Security number. If a pop-up asks for sensitive information or looks suspicious, close it by clicking the X button. Never enter information into a pop-up that appears unexpectedly. If you are unsure, close the browser tab and start over by typing ssa.gov directly into the address bar.