He Never Created an Online Social Security Account, But a Fraudulent Change Could Still Put His Monthly Benefit at Risk

A retiree who never signed up for an online Social Security account assumed that meant his monthly benefit was safe. In reality, a single fraudulent request to the agency could still put that payment in jeopardy.

Americans reported $17.7 billion in losses to cyber-enabled fraud in 2025, according to the FBI’s annual internet crime report. Cyber-enabled fraud accounted for 85% of all losses reported to the bureau that year.

Think of Frank, a retiree in his mid-70s whose Social Security deposit covers most of his expenses. He has never opened an online Social Security account. After hearing about someone whose benefits were stolen, he starts to wonder whether a scammer could still get into his record and reroute his monthly check.

The concern is not far-fetched. Social Security estimated the average retired-worker benefit at $2,071 a month in January 2026, or about $24,852 a year. The standard Medicare Part B premium of $202.90 is taken from that same deposit. If a thief diverts even one payment, that could mean a missed rent check.

One Phone Call Can Shut Off Online Access to His Record

Social Security offers a feature called Block Electronic Access. Once it is enabled, the agency turns off online and automated telephone access to the Social Security record, including the person’s own access. That means no one can change Frank’s address, direct deposit or other details through the website or the automated phone system. Frank would be blocked too.

That is exactly the kind of protection Frank wants. A criminal might obtain his Social Security number, birth date and address in a data breach and use that information to try to get into his record. The electronic block stops online access even if someone tries to impersonate him. The downside is that Frank gives up the same convenience.

How Frank Can Request the Block and What It Does Not Cover

Frank can call Social Security at 1-800-772-1213 or contact a local office to request an electronic access block. He can also ask about the agency’s separate Direct Deposit Fraud Prevention block, which limits changes to direct deposit and contact information through certain channels. Removing either protection requires contacting Social Security and proving his identity.

The block only protects his Social Security record. It does not protect his checking account, credit cards or credit reports, which need separate safeguards such as a free credit freeze from each of the three credit bureaus. A determined impostor could still try to fool a Social Security employee, or Frank himself, by phone. The block closes off the easiest path, but it does not make the record impossible to attack.

Simple Habits That Can Catch Scams the Block Cannot Stop

1. Watch for scam calls around benefit announcements. The 2027 cost-of-living adjustment is 3.6%, and scammers often time their calls around news like that. A common script says you must confirm your information to receive the raise, then uses those details to change your direct deposit so your Social Security money goes to the thieves instead. As consumer advocate Clark Howard told listeners, “You don’t have to do anything to get the increase.”
2. Hang up and call back on your own. Social Security does not threaten arrest, suspend your number over the phone or ask for gift cards. If a call sounds urgent, Frank can hang up and dial the agency’s official number himself. That way, he can confirm whether the caller was legitimate.
3. Check every deposit and every notice. A late payment, a smaller deposit or a letter confirming a change Frank never made should trigger a same-day call to Social Security. He should also report it to the agency’s inspector general. The faster a fraudulent change is caught, the fewer payments are likely to disappear.
4. Identity theft is a separate issue. If Frank’s Social Security number appears in a breach, he can freeze his credit, report the theft at IdentityTheft.gov and keep the case number. Banks and the agency may ask for that report later.

A Small Inconvenience Versus a Steady Benefit

The block makes sense for someone like Frank. He rarely goes online, his personal information may already be exposed, and he depends on his monthly benefit for essentials. The trade-off is convenience. Any future address change, benefit letter or direct deposit update would require a phone call or office visit, along with identity verification to remove the block. A retiree who reviews statements online every month may prefer to create their own account and secure it with strong protections. That also helps prevent a scammer from opening one first.

Before making the call, Frank should consider how often he really needs to manage anything online and how he would cope if a payment vanished for a month or two. Different households will answer those questions differently. A family member who helps a parent with paperwork may also find that the best choice is not the same for everyone.