Social Security does not contact you by email about your account

The Social Security Administration (SSA) has warned that scam emails pretending to be from Social Security have increased sharply. These emails typically claim your account is locked, suspended, or needs immediate action — and they ask you to click a link or provide personal information. The SSA never initiates contact with you by email about your account, your benefits, or your Social Security number.

If you receive an email claiming to be from Social Security, it is a scam. The agency communicates through the mail, by phone if you call them first, or through your personal online account at ssa.gov if you created one yourself. No legitimate Social Security message will ask you to verify your number, password, or banking details through email.

Scammers use these emails because they work — people panic when they think their benefits are at risk, and panic makes people click before thinking. Understanding what a real Social Security communication looks like and what a fake one does is your best defense.

Key Takeaways

  • Social Security never sends unsolicited emails about your account, benefits, or identity — any email claiming to be from SSA is fraudulent.
  • Scam emails typically create urgency by claiming your account is locked, suspended, or compromised, and ask you to click a link or log in immediately.
  • Legitimate Social Security contact comes by postal mail, through your own online account at ssa.gov that you created, or by phone only if you called them first.
  • Clicking links in scam emails or providing information can lead to identity theft, fraudulent benefit claims filed in your name, or unauthorized access to your bank account.
  • Report scam emails to the SSA's Office of Inspector General and to the Federal Trade Commission so the agency can track patterns and warn others.

What these scam emails typically say

Scam emails claiming to be from Social Security usually follow a pattern. They tell you that your account has been locked, suspended, or flagged for suspicious activity. They may say your identity could not be verified, that you need to update your information, or that your benefits are at risk. The message creates a sense of urgency — it tells you to act within hours or your account will be closed permanently.

The email then asks you to click a link to "verify your account," "confirm your identity," "update your information," or "unlock your benefits." That link takes you to a fake website that looks like ssa.gov but is actually controlled by scammers. When you enter your Social Security number, password, date of birth, or bank details, the scammers capture that information and use it to steal your identity or file fraudulent claims.

Some scam emails ask you to call a phone number instead. That number connects you to someone pretending to work for Social Security who will ask for the same sensitive information. Others include attachments that claim to be forms or documents — opening these can install malware on your computer.

How to recognize a fake Social Security email

Real Social Security emails do not exist unless you created an online account at ssa.gov yourself and chose to receive messages there. If you did create that account, messages from it will come from a specific address tied to your account login, not from a generic SSA email address. Even then, Social Security will never ask you to re-enter your password or Social Security number in an email.

Check the sender's email address carefully. Scammers often use addresses that look similar to official ones — for example, "ssa-security@gmail.com" or "socialsecurity-verify.net" — but they are not from the real Social Security domain. Hover over the sender's name without clicking to see the actual email address. If it does not come from a Social Security domain, it is fake.

Look for spelling and grammar errors. Many scam emails are written by people for whom English is not a first language, and they contain awkward phrasing or mistakes a government agency would not make. Legitimate Social Security mail is professionally written. Also watch for generic greetings like "Dear User" or "Dear Valued Customer" instead of your actual name — the SSA has your name on file and uses it.

Most importantly: if an email creates panic and pressure you to act immediately, it is almost certainly a scam. Real Social Security business does not work that way. The agency gives you time to respond to legitimate concerns.

What to do if you receive a scam email

Do not click any links in the email. Do not download any attachments. Do not call any phone number listed in the message. Simply delete the email and move on. If you are worried about your actual Social Security account, go directly to ssa.gov by typing the address into your browser yourself — do not use a link from the email.

If you already clicked a link or provided information, act quickly. If you gave out your Social Security number or other identity information, contact the Federal Trade Commission at identitytheft.gov and create an identity theft report. This alerts credit bureaus and helps protect you if scammers try to open accounts in your name. You can also place a fraud alert on your credit report by calling one of the three major credit bureaus: Equifax, Experian, or TransUnion.

If you provided banking information, contact your bank or credit card company immediately and tell them about the scam. Ask them to watch your account for unauthorized charges and consider canceling the card and issuing a new one. If you provided your password for your Social Security online account, log in to ssa.gov right away and change your password to something new that you have not used anywhere else.

Report the scam to the right agencies

Forward the scam email to the Social Security Administration's Office of Inspector General at oig.ssa.gov. The website has a form where you can report the email address and describe what happened. You can also email the message directly to phishing@ssa.gov. The SSA uses these reports to identify patterns and warn the public about new scams.

Also report the email to the Federal Trade Commission at reportfraud.ftc.gov. The FTC collects information about scams across the country and shares it with law enforcement. Reporting helps the government understand which scams are most common and how to combat them.

If you received a scam call pretending to be from Social Security, you can report that to the SSA's Office of Inspector General as well. Include the phone number that called you, the date and time, and what the caller said. This information helps the agency track down the people running these schemes.

Protect yourself going forward

Set up your own online account at ssa.gov if you have not already. When you control your account, you can see your actual benefit information and know immediately if something is wrong. You will also be able to see if someone else has tried to access your account, which is a sign that your information has been compromised.

Enable two-factor authentication on your Social Security account if it is available. This means that even if a scammer has your password, they cannot log in without a code sent to your phone or email. Check your account settings to see if this option is offered.

Be skeptical of any unsolicited email that asks you to take action on your account. This applies not just to Social Security but to your bank, credit card company, email provider, and any other service that holds your personal information. Legitimate companies rarely email you asking you to verify information or click urgent links. When in doubt, go to the official website yourself or call the organization's main phone number — do not use contact information from the email.

Frequently Asked Questions

Can Social Security contact me by text message or through social media?

No. Social Security does not send text messages, Facebook messages, or direct messages on any social media platform. Any message claiming to be from Social Security through these channels is a scam. The only ways Social Security contacts you are by postal mail, through your own online account if you created one, or by phone if you called them first.

What if the email looks exactly like it came from ssa.gov?

Scammers can make emails look like they came from anywhere by spoofing the sender address. The way to check is to hover over the sender's name without clicking — your email program will show you the actual email address the message came from. Real Social Security emails come from official SSA domains. If you are unsure, do not click anything; instead, go to ssa.gov directly in your browser and log into your account to check if there is a real message waiting for you.

I clicked the link but did not enter any information. Am I safe?

Clicking the link itself is not as dangerous as entering information, but it can still expose you to risk. The fake website may have tried to install malware on your computer. Run a malware scan using your antivirus software. If you are concerned, you can also change your Social Security online account password as a precaution, even though you did not enter it on the fake site.

What should I do if someone filed for benefits using my Social Security number?

Contact the Social Security Administration immediately at 1-800-772-1213 and report the fraud. Also file a report with the Federal Trade Commission at identitytheft.gov and place a fraud alert on your credit report. The SSA can investigate whether fraudulent claims were filed in your name and help you resolve the issue.

Is it safe to ignore these emails, or do I need to do something?

It is completely safe to ignore and delete them. You do not need to respond, click anything, or take any action. Simply delete the email. If you are concerned about your actual Social Security account, log into your account at ssa.gov using your browser directly, or call Social Security at 1-800-772-1213 to speak with a representative.