CheckPayDate.comSocial Security & COLA Suite
Independent guide · Not SSA
Scam alert · Independent guide

Social Security Scams & Phishing Emails: How to Spot and Report Them

Scammers are using the 2027 COLA and fake “statement ready” emails to steal money and personal information. Here are SSA's latest warnings, the red flags to look for, a quick scam checker, and exactly where to report a suspicious message.

Written and fact-checked by the CheckPayDate.com Editorial TeamPublished October 28, 2026Last reviewed October 28, 2026How we review

Official Data Verification: Reviewed October 28, 2026
Audited against Federal Reserve Holiday Calendar
Primary Authority: Social Security Administration (SSA)
Regulatory Basis: POMS GN 02401.000 & 20 CFR § 404.1807

Quick Answer

  • The COLA is automatic. No one needs your information or a fee to "activate" it.
  • Real SSA email ends in .gov — but still don't sign in from a link. Type ssa.gov/myaccount yourself.
  • SSA never demands gift cards, wire transfers, crypto, or secrecy, and never suspends Social Security numbers.
  • Report scams to SSA's Inspector General at oig.ssa.gov/report.

Latest Social Security Scam Alerts

October 21, 2026

2027 COLA scams

After SSA announced the 3.6% COLA, the Inspector General warned that scammers claim they can "activate" or increase it for a fee, ask you to change your direct deposit, or send links and software downloads. The COLA is automatic — there's nothing to register for.

Read the official alert
February 19, 2026

Fake "Social Security statement" emails

The Inspector General reported a sharp increase in emails claiming your Social Security statement is ready to download. The links can install malware or lead to fake sites that steal personal and financial information.

Read the official alert

Is This Social Security Message a Scam?

Tick anything that applies to the email, text, call, or letter

No red flags ticked

That doesn't prove a message is real. When in doubt, ignore any links or numbers in it and contact SSA directly.

This checklist is a guide based on SSA's published warning signs, not a guarantee. Nothing you tick is stored or sent anywhere.

What Social Security Will Never Do

  • Threaten you with arrest or legal action unless you pay immediately
  • Demand payment by gift card, prepaid debit card, wire transfer, cryptocurrency, gold, cash, or payment app
  • Tell you to move your money to "protect" it
  • Tell you to keep the call or message secret
  • Charge a fee to activate your COLA or increase your benefit
  • Say your Social Security number has been suspended

Common Scam Messages

  • "Your Social Security number has been suspended."
  • "You owe a fine. Pay immediately."
  • "Act now or your benefits will stop."
  • "Press 1 to speak with a federal agent."
  • "Your Social Security statement is ready — click to download."
  • "Confirm your details to receive your 2027 COLA."

How to Spot a Social Security Phishing Email

  1. Check the sender. Official SSA addresses end in .gov. Look closely — scammers use lookalike names and domains.
  2. Don't trust logos. Fake emails copy SSA's colors, logo, and wording.
  3. Hover, don't click. If a link goes anywhere other than ssa.gov, it's fake. Even if it looks right, type the address yourself.
  4. Watch for attachments labeled as statements or documents. They can install malware.
  5. Notice pressure. Urgent deadlines and threats are a scammer's main tool.
How to sign in to my Social Security safely

How to Report a Social Security Scam

Report to SSA's Inspector General

Online at oig.ssa.gov/report (also linked from ssa.gov/scam), or call the fraud hotline at 1-800-269-0271, Monday–Friday, 10 a.m.–2 p.m. ET.

Report to the FTC

File a report at ReportFraud.ftc.gov to help law enforcement track scam patterns.

Report online crime to the FBI

If you lost money or the scam happened online, file with the FBI's Internet Crime Complaint Center at ic3.gov.

What to Do If You Clicked or Paid

  1. Stop all contact with the scammer.
  2. If you entered a password, change it right away at the real site — type ssa.gov/myaccount, login.gov, or id.me yourself.
  3. Call your bank to protect your accounts, and tell them about any payment you made.
  4. If you gave out your Social Security number, consider freezing your credit with Equifax, Experian, and TransUnion.
  5. Report it to SSA's Inspector General, the FTC, and ic3.gov.
  6. If you lost money, also contact local police.

Frequently asked questions

Real SSA emails come from addresses ending in .gov. Even then, don't click links to sign in — type ssa.gov/myaccount yourself. SSA won't email you asking for payment, passwords, or verification codes.

No. The 3.6% COLA is added automatically. Anyone who says you must register, pay, or confirm details to get it is a scammer, according to SSA's Inspector General.

No. SSA does not suspend Social Security numbers. A call or message saying yours is suspended is a scam.

Sometimes, if you already have business with SSA. But SSA won't threaten you, demand immediate payment, or ask you to pay by gift card, wire, or crypto. If unsure, hang up and call 1-800-772-1213 yourself.

Report it to SSA's Office of the Inspector General at oig.ssa.gov/report or 1-800-269-0271 (Monday–Friday, 10 a.m.–2 p.m. ET). You can also report to the FTC at ReportFraud.ftc.gov.

Stop contact, change any password you entered (by typing the real site address), call your bank, consider a credit freeze if you shared your SSN, and report it to SSA's Inspector General and ic3.gov.

No. SSA's October 2026 record corrections were done internally with government data. SSA won't call or email asking you to "verify" your record for the cleanup; treat such messages as scams.

Related guides & tools