The Social Security Administration does not send unsolicited emails

The Social Security Administration (SSA) does not initiate contact with you by email. If you receive an email claiming to be from Social Security, it is not from them — it is a scam. The SSA communicates through the mail, by phone at a number you call yourself, or through your account if you created one on their official website.

Scammers use email and text messages to trick people into sharing personal information or clicking links that install malware. These messages often claim your account is locked, your benefits are suspended, or you need to verify your information urgently. None of these are real SSA communications.

The only exception is if you set up a my Social Security account on ssa.gov and chose to receive notifications. Even then, SSA will never ask you to click a link in an email to log in or provide personal details. They will direct you to log in through the official website yourself.

Key Takeaways

  • The Social Security Administration does not send unsolicited emails, and any email claiming to be from SSA is a scam.
  • Real SSA contact comes by mail, by phone when you call them, or through notifications in your my Social Security account if you created one.
  • Scam emails often claim your benefits are suspended or your account is locked and ask you to click a link or provide personal information.
  • If you receive a suspicious email, do not click any links or read attachments — delete it and report it to the SSA Office of Inspector General.
  • You can verify whether SSA has contacted you by calling their official number or logging into your account on ssa.gov.

How to spot a fake Social Security email

Scam emails use urgency and fear to push you into acting without thinking. Common red flags include demands that you act when ready, threats that your benefits will stop, or claims that suspicious activity was detected on your account. Real SSA mail gives you time to respond and does not threaten when ready action.

Fake emails often ask you to click a link to "verify your information," "confirm your identity," or "update your account." The link may look like it goes to ssa.gov but actually takes you to a fake website designed to look identical. Once you log in, scammers capture your username and password. Do not click links in emails — instead, go directly to ssa.gov by typing the address into your browser yourself.

Another common scam involves attachments. The email may claim to contain a form, a notice, or a document you need to open. Opening the attachment can install malware that steals information from your computer. The SSA sends official documents by mail, not as email attachments.

What the SSA will and will not do by email

If you have a my Social Security account, you can set up email notifications. These notifications tell you that something has happened in your account — for example, that a new message is waiting for you or that a change has been processed. The notification itself will not contain sensitive information and will not ask you to click a link to log in.

When you receive a notification, you log into your account by going to ssa.gov and entering your username and password yourself. You do not click a link in the email. The SSA will never send you a link in an email and ask you to log in through it.

The SSA will never ask for your Social Security number, password, PIN, or bank account information by email. They will never ask you to confirm your identity by email. They will never tell you that you must act within a certain number of hours or your benefits will stop. These are all signs of a scam.

What to do if you receive a suspicious email

Do not click any links or read any attachments. Do not reply to the email. straightforward delete it. If you are unsure whether the email is real, do not take any action based on it.

You can report the email to the SSA Office of Inspector General by forwarding it to oig.report@ssa.gov. Include the full email, including the sender's address and any headers. You can also report it to the Federal Trade Commission at reportfraud.ftc.gov.

If you are worried that scammers may have your information, you can call the SSA directly at 1-800-772-1213 to check on your account. Use the phone number from the official SSA website or your Social Security card — do not use a number from the suspicious email. You can also log into your my Social Security account on ssa.gov to see if anything has changed.

How to protect yourself from Social Security scams

Never give your Social Security number to anyone who contacts you first, whether by email, phone, or text. The SSA already has your number — they do not need you to provide it. If someone claims to be from SSA and asks for it, hang up or delete the message.

Create a my Social Security account on ssa.gov if you have not already. This lets you see your earnings record, check your benefit amount, and change your contact information. When you control your account, you can spot unauthorized changes. You can also set up a password and security questions to make it harder for scammers to access.

Be especially cautious during tax season and around the time you receive your annual Social Security statement. Scammers know that people are thinking about their benefits and taxes during these periods and send more fake emails then.

When the SSA contacts you first

If the SSA needs to contact you, they will send a letter to your address on file. The letter will have the SSA seal and an official address. It will explain why they are contacting you and what you need to do. You will have time to respond — usually at least 10 days.

In rare cases, the SSA may call you. This happens when there is an urgent issue, such as a problem with your direct deposit or a need to verify information quickly. If SSA calls you, they will identify themselves and explain why they are calling. You can ask them to send you a letter instead if you prefer. You can also hang up, call the SSA yourself at 1-800-772-1213, and ask whether they tried to reach you.

The SSA will never call you and ask for your password, PIN, or bank account information. If someone calls claiming to be from SSA and asks for this information, it is a scam. Hang up and report it.

Frequently Asked Questions

Can I trust an email that looks like it came from ssa.gov?

No. Scammers can make emails look like they came from any address, including ssa.gov. This is called spoofing. The only way to know whether a message is real is to log into your account yourself on ssa.gov or call the SSA at 1-800-772-1213. Do not click links in emails, even if they appear to come from SSA.

What if I already clicked a link in a suspicious email?

Change your my Social Security password right away if you have an account. Call the SSA at 1-800-772-1213 to report what happened and ask them to monitor your account. You may also want to place a fraud alert with the credit bureaus by calling 1-888-5-OPTOUT. This makes it harder for scammers to open accounts in your name.

Does my bank send emails about my Social Security direct deposit?

Your bank may send you emails about your account, but the SSA does not coordinate these emails. If you receive an email about your Social Security direct deposit, verify it by logging into your bank account directly or calling your bank's customer service number from the back of your card. Do not use a phone number from the email.

Is it safe to create a my Social Security account?

Yes. Creating an account on ssa.gov is safe and recommended. You control the password and security questions. Once you have an account, you can see if anyone has tried to access it without your permission. This is one of the best ways to protect yourself from Social Security fraud.

What should I do if someone is using my Social Security number?

Call the SSA at 1-800-772-1213 and report the fraud. They can place a note on your account. You should also file a report with the Federal Trade Commission at reportfraud.ftc.gov and consider placing a fraud alert with the credit bureaus. Keep records of all the steps you take.