Protect Yourself from Social Security Scams
Scams to steal your Social Security number and your benefits are everywhere. Here are some best practices to keep your information safe:
First and foremost, never give out your SSN to anyone over the phone or through a web form, text message or email.
You do NOT have to do anything for your annual COLA (Cost of Living Increase) to take effect.
In general, do not click on links or attachments in an email unless you personally know the sender and are expecting the attachment.
If a number from “Social Security Administration” calls, let it go to voicemail then call back Social Security at their customer service number: 1 (800) 772-1213
An agent from the Social Security Administration will NEVER:
Ask you to meet them in person to hand over a cash payment
Threaten to suspend your benefits
Suspend your Social Security number
Request your Social Security number over email or text
Threaten you with arrest, legal action, or bank account seizure if you don't comply with a request
Offer to shift your Social Security money to a “safer” account
Demand you make a payment immediately
Ask you for specific payment methods—such as prepaid debit cards, gift cards, online payments, mailed cash, or cryptocurrency.
Ask for personal details or banking information in exchange for giving you a cost-of-living adjustment (COLA)
Contact you via social media platforms (e.g., Facebook)
Request that you return a call to an unknown number
If you are targeted by a Social Security scam, report it to the SSA’s Office of Inspector General and the Federal Trade Commission.
Ensure you are receiving accurate information from a legitimate government website. Federal government websites always use a .gov or .mil ending (domain). Before sharing sensitive information online, make sure you're on a .gov or .mil site by inspecting your browser's address (or "location") bar, for example the Social Security Administration is at https://www.ssa.gov.
Also look for the “s” at the end of the http in the website address. https:// means all transmitted data is encrypted — in other words, any information or browsing history that you provide is transmitted securely.