Scam library · Email & phishing · Government impostor · Seniors
Fake Social Security statement email scam
An email with the Social Security Administration's logo says your Social Security statement is now available. There's a button to view it, or an attachment to download. It looks like the kind of notice you might expect, which is exactly why it works.
The SSA's Office of the Inspector General has warned about a sharp increase in these emails and says they are not from Social Security. Clicking can lead to fake websites that steal personal and financial information, or install software that lets criminals into your computer.
What the message looks like
From: Social Security Administration <statements@ssa-notice-center[.]com>
Subject: Your Social Security Statement is now available
Thank you for choosing to receive your statement electronically. Your document is ready for download.
[Download Statement]
Note: Statements are only compatible with Windows computers.
How this scam works
The email copies official colors, logos and wording, sometimes closely resembling real government notification emails. It says your statement is ready and asks you to download it, sometimes noting that it only opens on a Windows PC.
Malwarebytes and other researchers found that in some versions, the 'statement' is really an installer for ScreenConnect, a legitimate remote-support tool. Once it's on your computer, the criminals can connect and use the computer as if they were sitting in front of it: looking through files, reaching banking sites and stealing information.
Other versions send you to a look-alike sign-in page to collect your Social Security account login, card details or personal information. Researchers also noted the emails are often sent from hacked websites and sometimes built as a single picture, which helps them slip past spam filters.
Red flags
- An unexpected email saying your Social Security statement is ready to download.
- A sender address that doesn't end in .gov.
- A download button or attachment, especially a file ending in .exe or one that only works on Windows.
- Pressure to act right away or your account or benefits will be affected.
- A request to install a program, 'viewer' or support tool to see the statement.
How to tell it’s fake
- Don't click anything in the email. Type ssa.gov/myaccount into your browser yourself and sign in there to see your statement.
- Look at the full sender address, not just the display name. Official SSA email addresses end in .gov.
- If you're unsure, check the SSA's scam page at ssa.gov/scam, or ask a family member or scam expert to look before you open anything.
What to do if you clicked, paid or shared info
Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.
If you clicked a link or called back
- If you downloaded or ran a file, disconnect the computer from the internet and run a full scan with up-to-date security software. If a remote-access program was installed, have a trusted technician remove it.
- Report the email to the SSA Inspector General at oig.ssa.gov/report.
If you paid
- If you paid anything or the criminals had access to your computer while you used banking sites, call your bank using the number on your card and watch your accounts closely.
If you shared personal info, a password or a code
- If you entered your Social Security account login, change the password at ssa.gov/myaccount and check your account details. Change other passwords from a different, clean device.
- If you shared your Social Security number, visit IdentityTheft.gov and consider a credit freeze.
Where to report and get help (U.S.)
If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.
- Your bank or card issuer
Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account. - Federal Trade Commission (FTC) · ReportFraud.ftc.gov
Report the scam and get a step-by-step recovery plan. - FBI Internet Crime Complaint Center (IC3) · ic3.gov
Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details. - AARP Fraud Watch Network Helpline · aarp.org helpline
Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. - IdentityTheft.gov · IdentityTheft.gov
If you shared your Social Security number or someone opened accounts in your name.
How Gmork Scam Guard would warn you
Scam Guard runs in Chrome and Edge on your computer. When you open a link from an email like this, it checks whether the page is really ssa.gov and warns you about look-alike government sign-in pages and suspicious downloads. It can't remove software already installed. If an official-looking message pushes a download, ask a scam expert for a second opinion.
Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.
Aggiungi a Chrome
Aggiungi a Edge
Aggiungi a Firefox
Aggiungi a OperaQuestions people ask
- Does Social Security email statements?
- You can view your statement by signing in at ssa.gov/myaccount. Don't download a 'statement' from an email; go to the site yourself.
- What is ScreenConnect?
- It's a real remote-support program businesses use. Criminals have disguised it as a statement so they can take over computers.
- I opened the email but didn't click. Am I okay?
- Opening it is usually not the problem. Delete it and don't click links or attachments.
- Where do I report it?
- Report it to the SSA Inspector General at oig.ssa.gov/report, and to ReportFraud.ftc.gov.