Social Security COLA activation scam

What the message looks like

How this scam works

On October 14, 2026, SSA announced a 3.6 percent COLA for about 76 million Americans. That real announcement is the bait. Scammers contact people by phone, text, email, social media or mail and pretend to be from Social Security or another government agency. They claim they can increase payments or turn the COLA on.

The ask varies. Some want a "processing fee" paid by gift card, wire or crypto. Others push you to change your direct deposit to a "secure" account they control. Some send a link to a site that looks official and ask for a Social Security number, bank login or a software download. A few even use real employee names or fake badge photos to sound official.

The pitch works because part of it is true: there is a raise. The lie is that you have to do something to receive it. SSA OIG says you do not. If a message creates urgency around your benefits, hang up or ignore it and check yourself through my Social Security or a number you look up, not one the message gave you.

A fox trusts what it verifies, not what arrives uninvited. When a raise is already automatic, any stranger offering to "unlock" it is hunting, not helping.

Red flags

• Any request to pay a fee, "activate," register or apply for a COLA.
• Pressure to change direct deposit after an unexpected call or message.
• Links to sites that are not ssa.gov, or attachments and software downloads.
• Urgency: "act today or your January payment will be held."
• Payment by gift card, crypto, wire, gold or prepaid debit card.

How to tell it’s fake

1. Remember: annual COLAs are automatic. SSA OIG states beneficiaries do not need to register, apply or activate the increase.
2. Ignore unexpected benefit messages. Sign in only at ssa.gov/myaccount using a bookmark or typed address, never a link from a text or email.
3. Look up contact details yourself (America.gov or ssa.gov) and call that number. Do not call a number the message provided.
4. If the message still seems confusing, get a second opinion from a trusted family member or a scam expert before you share anything.

What to do if you clicked, paid or shared info

Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.

If you clicked a link or called back

• Close the page. Do not enter a Social Security number, bank login or payment details.
• If you typed a password or installed software, change passwords from a clean device and run a malware check.

If you paid

• Contact your bank or card issuer right away using the number on your card and report the payment as fraud.
• If you paid with a gift card or money transfer, tell the issuer immediately and save receipts and screenshots.
• Report the contact at ssa.gov/scam and to the SSA OIG Fraud Hotline at 1-800-269-0271 (Monday–Friday, 10 a.m.–2 p.m. ET).

If you shared personal info, a password or a code

• If you shared a Social Security number or bank details, monitor accounts and consider a credit freeze at IdentityTheft.gov.
• Review direct-deposit settings in your my Social Security account and correct anything you did not authorize.

Questions people ask

Do I need to do anything to get the Social Security COLA?

No. SSA and SSA OIG say the COLA is automatic. You do not register, apply, activate or pay a fee.

Social Security did announce a raise. How can messages about it be fake?

Scammers borrow real news. The raise is real; the claim that you must pay or share data to receive it is not. Treat unexpected "activation" messages as fraud.

Where should I check my new benefit amount?

Use your my Social Security account at ssa.gov/myaccount, or wait for official SSA notices. Never use a link from an unexpected text or email.

Sources

• SSA OIG: Social Security 2027 COLA scam alert (Oct 21, 2026)
• SSA: Protect yourself from Social Security scams
• SSA: my Social Security account