Social Security will never email you first about your account

The Social Security Administration does not send unsolicited emails asking you to verify your account, update your information, or click a link. If you receive an email claiming to be from Social Security, it is a scam. This is the single most reliable rule: Social Security contacts people by mail, by phone if you have called them first, or through your personal account on ssa.gov if you have created one. Email is not how they reach you.

Scammers use official-looking logos, urgent language, and threats of account suspension to make their emails seem real. They may say your Social Security number has been compromised, that you owe money, or that you need to confirm your identity immediately. The goal is always the same: get you to click a link, download a file, or enter your personal information into a fake website.

Key Takeaways

  • Social Security never sends unsolicited emails asking you to verify information, click links, or update your account.
  • Scam emails often use urgent language, official logos, and threats of account suspension to pressure you into acting quickly.
  • If you receive a suspicious email, do not click any links or download any files — forward it to oig.ssa.gov instead.
  • You can create a personal account on ssa.gov to check your Social Security record without relying on email or phone contact.
  • If you believe your Social Security number has been stolen, contact the Social Security Administration directly at 1-800-772-1213 using a phone number you find yourself, not one in the email.

What scammers ask for in fake Social Security emails

Scam emails typically request one or more of these pieces of information: your Social Security number, date of birth, mother's maiden name, bank account details, credit card number, or login credentials for ssa.gov. Some emails ask you to download an attachment or click a link that installs malware on your computer or phone — software that can steal your passwords and financial information without your knowledge.

Common subject lines in these scams include "Verify Your Social Security Account," "Your Social Security Account Has Been Suspended," "Urgent: Confirm Your Identity," and "Update Your Payment Information." The email may claim that your benefits are at risk, that suspicious activity has been detected, or that you need to act within 24 hours. None of these are real Social Security communications.

How to tell a fake Social Security email from a real one

Real Social Security mail comes in an envelope with the official Social Security Administration seal. Real notices include your name, address, and specific details about your case — they do not address you as "Dear User" or "Dear Valued Customer." Real notices also do not ask you to click links or download files.

Fake emails often contain spelling or grammar errors, use generic greetings, or ask you to click a link to "verify" or "confirm" something. The sender's email address may look official but is usually slightly wrong — for example, "socialsecurity-verify@" instead of an actual Social Security domain. Hover over any link in the email (do not click it) to see where it actually goes; scam links often point to websites that look like ssa.gov but have a slightly different address.

What to do if you receive a suspicious Social Security email

Do not click any links, download any files, or reply to the email. Do not call any phone number listed in the email. Instead, forward the email to the Social Security Administration's Office of Inspector General at oig.ssa.gov. You can also report it to the Federal Trade Commission at reportfraud.ftc.gov.

If you are worried that your Social Security number may have been compromised, contact Social Security directly by calling 1-800-772-1213. Use a phone number you find yourself — search "Social Security Administration" online or look at a bill you received from Social Security — rather than calling a number in the suspicious email. A representative can tell you whether there has been any unusual activity on your account.

Creating a personal Social Security account to avoid email confusion

You can create a free account on ssa.gov to check your Social Security record, see your earnings history, and manage your benefits without waiting for mail or relying on email. Once you have created an account, you can log in anytime to see your information. This removes the need to trust emails claiming to be from Social Security.

To create an account, go to ssa.gov and select "Create an account." You will need to verify your identity using information from your credit report or by uploading documents. The process takes about 10 minutes. Once your account is set up, you can check your statement, see your benefit amount, and update your contact information directly.

What to do if you already clicked a link or entered information

If you clicked a link in a scam email or entered your Social Security number, date of birth, or bank details, act quickly. Call Social Security at 1-800-772-1213 to report the incident and ask them to monitor your account for fraud. If you entered credit card or bank account information, contact your bank or credit card company immediately and ask them to watch for unauthorized charges.

You can also place a fraud alert on your credit report by contacting one of the three major credit bureaus: Equifax, Experian, or TransUnion. A fraud alert tells lenders to verify your identity before opening new accounts in your name. This is free and takes about 15 minutes. If you believe your identity has been stolen, you may also want to file a report with the Federal Trade Commission at identitytheft.gov.

Frequently Asked Questions

Can Social Security contact me by email if I set up an account on ssa.gov?

No. Social Security will not send you emails about your account, even if you have created a personal account on ssa.gov. You can log into your account anytime to check messages, but Social Security will not initiate contact by email. If you receive an email claiming to be from Social Security, it is a scam.

What if the email looks exactly like it came from Social Security's website?

Scammers can make emails look official by copying logos and formatting from the real Social Security website. The only way to be certain is to remember the rule: Social Security does not send unsolicited emails. If you are unsure, go directly to ssa.gov by typing the address yourself (not by clicking a link in the email) or call 1-800-772-1213.

Is it safe to call the phone number in a Social Security email?

No. Scammers include fake phone numbers in their emails. If you need to contact Social Security, find the phone number yourself by searching online or looking at official mail you have received. The official number is 1-800-772-1213.

What happens if I downloaded a file from a scam email?

Run a full scan of your computer or phone using antivirus software. If you do not have antivirus software, you can download free versions like Windows Defender (built into Windows) or Malwarebytes. If you are not comfortable doing this yourself, take your device to a computer repair shop. Also change your passwords for any important accounts, especially email and banking.

Can I get my money back if I sent money to a scammer?

It depends on how you sent the money. If you sent it by wire transfer or gift card, recovery is difficult. If you paid by credit card or bank transfer, contact your bank or credit card company immediately — they may be able to reverse the charge. Report the scam to the Federal Trade Commission at reportfraud.ftc.gov so they can track patterns and warn others.