There’s something about an email from Social Security that makes you pay attention. After all, we’re talking about your retirement benefits and years of earnings. So when a message lands in your inbox saying your statement is ready, clicking to take a look might seem perfectly reasonable. That’s exactly what scammers are counting on.
Take a look at this email below that recently landed in an inbox. It looks professional, carries the Social Security Administration (SSA) logo and includes a button to view a statement. However, a closer inspection reveals something the sender probably hoped you wouldn’t notice. The message came from an email address with no apparent connection to the federal government.
Even more concerning, the Social Security Administration’s Office of the Inspector General warned in February 2026 about a significant increase in fraudulent emails using this same type of trick. Here’s how to spot the warning signs in this email and protect yourself before scammers get their hands on your personal information.
Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money
In this free live online class, Kurt “CyberGuy” Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.
Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.
FAKE CHATGPT BILLING EMAILS CAN STEAL YOUR LOGIN
The message arrives with the subject line “Statement Support Was Posted to Your Account Details Report.” The sender appears as “Social Security Administrator,” which immediately gives the impression of an official government communication. Inside, the email announces, “Your statement is ready.” It goes on to say your 2025 Social Security statement is available and invites you to review your earnings record and benefit estimates online.
There’s even a neatly formatted box showing the year as 2025 and the status as “Ready.” Below that sits a prominent blue “View statement” button. The message also displays what looks like the official Social Security website address. For someone quickly checking email before work or while getting through a crowded inbox, this could easily pass as a routine government notification.
Here’s where the message falls apart. Although the sender’s display name says “Social Security Administrator,” expanding the sender information reveals an address using the domain loradmiadministraciones.com . That’s a major red flag. The address has no apparent relationship to Social Security, and the sender’s domain does not end in .gov. Scammers can customize their display names to impersonate government agencies or other trusted organizations.
According to the Social Security Administration, most legitimate SSA emails come from government email addresses. However, the agency does use some authorized outside services, including certain communications from echosign.com and approved marketing firms. That means you should examine the complete sender address and verify any unexpected request independently. Even a familiar-looking sender address can be spoofed.
FAKE PATIENT PORTAL SCAM CAN STEAL YOUR LOGIN AND INFECT YOUR PC
The email encourages the recipient to click “View statement” to access what appears to be a routine financial document. That button is a central concern. A phishing link can redirect you to a fraudulent website designed to steal account credentials or sensitive personal information. Some malicious links can also lead to malware downloads.
We haven’t verified the destination behind the button in this particular email. However, the suspicious sender address and resemblance to known SSA phishing campaigns make the message unsafe to trust. The SSA’s inspector general has specifically warned about fake statement notifications containing dangerous links. Those links could expose personal information or compromise devices.
One interesting thing about this example is how little pressure it puts on the reader. There’s no demand for immediate payment or warning that benefits will disappear within 24 hours. Instead, the message offers something people might genuinely want to see: their Social Security statement.
It also uses the generic greeting “Dear Beneficiary,” despite appearing in an inbox associated with a named recipient. That lack of personalization provides another reason to investigate, although generic greetings alone cannot prove an email is fraudulent. The professional appearance does much of the work. The SSA logo and government-style formatting create an impression of credibility. Yet none of those visual elements establishes who actually sent the email.
Yes, and that’s what makes this scam particularly convincing. According to the SSA’s official guidance, people with a personal my Social Security account generally receive an annual email reminder approximately three months before their birthday. The agency also sends certain notifications about new messages and notices. Scammers take advantage of these legitimate communications by creating messages that resemble official SSA reminders.
Before opening a statement or following instructions in an unexpected email, take a few seconds to investigate the message.
On a computer, click the sender’s name or expand the message details to reveal the full email address. On an iPhone or Android phone, tap the sender’s name or address to view additional information. The exact method depends on your email app. Look closely at the domain. Watch for unfamiliar company names, extra characters or addresses unrelated to Social Security.
On a computer, hover your mouse over a button or link without clicking. Your browser or email app may display its actual destination. On a phone, some email apps let you touch and hold a link to preview its address. Be careful because certain apps may open or begin loading a preview. When in doubt, skip this step and visit the official SSA website yourself. Remember that a website beginning with HTTPS can still be fraudulent. Encryption alone does not prove that a website belongs to the government.
The most reliable approach is to open a new browser window and visit ssa.gov yourself. You can also contact Social Security at 1-800-772-1213 using the number published on its official website. Avoid using contact details provided in a suspicious email.
You can check your earnings record and estimated retirement benefits without clicking an emailed statement link.
If you don’t already have an account, follow the official registration instructions. Creating an account can also help you monitor your Social Security information for unexpected activity.
A convincing email can catch anyone off guard, especially when it concerns retirement benefits or personal financial information. These practical steps can help protect your identity and accounts.
Even when an email looks authentic, use the SSA website independently to access your information. Avoid downloading unsolicited statement attachments or documents that claim to come from the agency.
Use a unique password for your Login.gov or ID.me account and keep multifactor authentication enabled. Also protect the email account associated with your Social Security profile because criminals may target it to reset other passwords.
Strong antivirus software can help identify dangerous websites and block known malware downloads. Keep your operating system, browser and security software updated to protect against newly discovered threats. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com
Never provide your Social Security number or financial account information through an unexpected email link. If someone claims to represent Social Security and requests sensitive details, contact the agency through its official website.
Review your earnings history periodically through your personal SSA account. Look for unfamiliar earnings or changes to account details. If you notice something suspicious, contact Social Security directly for assistance.
Scammers can collect personal details from people-search websites and data brokers to make their messages more convincing. Consider removing your information from these websites or using a reputable data removal service to handle supported requests. Although this won’t stop every phishing attempt, it can limit some of the personal details criminals find online. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
The SSA Office of the Inspector General accepts reports of Social Security impersonation scams at oig.ssa.gov/report/ . Save the suspicious sender address and relevant screenshots. You can also report the message through your email provider’s built-in phishing-reporting feature. Once you’ve preserved the information needed for a report, delete the email.
Your next steps depend on what happened after you clicked. Here’s how to respond.
Close the suspicious website immediately. Avoid interacting with additional prompts or downloading files. If the site attempted a download, check your device’s Downloads folder without opening the file. Simply visiting a phishing page does not automatically mean your information was stolen. However, keep your browser and operating system updated, and run a security scan with strong antivirus software if you notice anything unusual.
Change the affected password immediately through the legitimate website, preferably using a trusted device. If you reused the password anywhere else, change it on those accounts too. A reputable password manager can help you create strong, unique passwords for each account and alert you to passwords that may have been exposed in a data breach. Next, review account activity and recovery settings. Check for unfamiliar sign-ins or unauthorized changes. Contact Login.gov, ID.me or the affected service through its official support channels if you believe someone accessed your account.
Visit IdentityTheft.gov for a personalized recovery plan. Consider placing a free credit freeze with Equifax, Experian and TransUnion. This can help prevent criminals from opening new credit accounts using your information. You should also review your credit reports and monitor financial accounts for unauthorized activity.
Avoid opening the downloaded file if you haven’t already. If you ran it, disconnect the affected device from the internet and perform a scan with strong antivirus software. If you suspect malware installed successfully, use a separate trusted device to change sensitive passwords. Consider getting professional assistance before signing back into financial accounts on the affected computer.
Contact your bank or financial institution immediately. Explain what happened and ask about securing your accounts or disputing unauthorized transactions. You should also report the incident to the FBI’s Internet Crime Complaint Center at ic3.gov/ and the Federal Trade Commission at reportfraud.ftc.gov/ . The SSA’s inspector general recommends these reporting channels for victims of Social Security impersonation scams. If you experienced financial loss, consider filing a report with local law enforcement.
What concerns me about this particular scam is how routine the email feels. There are no dramatic threats or wild promises. It simply tells you that your Social Security statement is available, something millions of Americans have a legitimate reason to check. And the design is convincing enough that someone could click before thinking twice. I’ve said it before, and I’ll keep saying it: A polished email doesn’t tell you anything about who’s really behind it. In this example, checking the sender’s actual address exposed a serious warning sign immediately. My advice is simple. When an email involves your Social Security information, go directly to the government website and check for yourself. A few extra seconds of caution could save you from a much bigger headache.
Have you ever received an official-looking government email that turned out to be a scam? What gave it away, or did you almost fall for it? Let us know by writing to us at Cyberguy.com
Sign up for my FREE CyberGuy Newsletter
Copyright 2026 CyberGuy.com. All rights reserved.