Phony Social Security statement email masks a phishing scam

A polished email says your Social Security statement is ready, but the sender details reveal a phishing scam

An email that appears to come from Social Security is the kind of message many people would open without a second thought. It refers to retirement benefits and earnings history, so a notice saying your statement is ready can seem legitimate. That is exactly the reaction scammers are hoping for.

One example making the rounds looks professional, uses the Social Security Administration (SSA) logo and includes a button to view a statement. But a closer look shows a problem the sender likely wanted recipients to miss: the email address has no clear connection to the federal government.

The Social Security Administration’s Office of the Inspector General has also warned about a sharp rise in fraudulent emails using this tactic. Here’s how the scam works, what warning signs to watch for and how to protect your personal information.

How the fake statement email is designed to fool you

The message arrives with the subject line “Statement Support Was Posted to Your Account Details Report.” The sender name shows up as “Social Security Administrator,” which makes it look like an official government notice. Inside, the email says, “Your statement is ready,” and claims a 2025 Social Security statement is available for review.

It also includes a neatly formatted box showing the year as 2025 and the status as “Ready,” along with a large blue “View statement” button. The message even displays what looks like the official Social Security website address. For someone scanning email quickly, it could easily seem like a routine government notification.

The sender address gives away the scam

The email falls apart once you inspect the sender information. While the display name says “Social Security Administrator,” the actual address uses the domain loradmiadministraciones.com. That is a major red flag. The domain has no apparent connection to Social Security and does not end in .gov. Scammers can freely change display names to impersonate trusted agencies.

According to the SSA, most legitimate emails come from government email addresses. However, the agency also uses some authorized outside services, including certain messages from echosign.com and approved marketing firms. That makes it important to check the full sender address and verify any unexpected request on your own. Even an address that looks familiar can be spoofed.

Why the “View statement” button is dangerous

The email urges the recipient to click “View statement” to access what appears to be a normal financial document. That button is the central risk. A phishing link can lead to a fake website built to steal login credentials or other sensitive details. In some cases, it can also trigger malware downloads.

The destination behind this specific button was not verified. Still, the suspicious sender address and the email’s resemblance to known SSA phishing campaigns make it unsafe to trust. The SSA inspector general has specifically warned about fake statement notices carrying harmful links that can expose personal information or compromise devices.

Why this scam looks so believable

What makes this example effective is how little pressure it creates. There are no threats about immediate payment or warnings that benefits will vanish in a day. Instead, it offers something many people would naturally want to check: their Social Security statement.

The message also uses the generic greeting “Dear Beneficiary,” even though it appears in an inbox tied to a named recipient. That alone does not prove fraud, but it is another reason to be cautious. The polished design does much of the heavy lifting. The SSA logo and government-style formatting create a sense of legitimacy, even though they do not confirm who sent the email.

Can Social Security really send statement emails?

Yes, and that is part of why this scam works so well. According to SSA guidance, people with a personal my Social Security account typically receive an annual reminder email about three months before their birthday. The agency also sends certain notices about new messages and account activity. Scammers exploit those legitimate communications by copying their look and tone.

How to tell if a Social Security email is real

Before opening a statement or following instructions in an unexpected email, pause and check the message carefully.

Check the full sender address

On a computer, click the sender’s name or open the message details to reveal the full address. On an iPhone or Android device, tap the sender’s name or address to see more information. The exact steps depend on your email app. Look closely at the domain and watch for unfamiliar names, extra characters or addresses unrelated to Social Security.

Preview the link without clicking it

On a computer, hover your mouse over a button or link without selecting it. Your browser or email app may show the destination. On a phone, some apps let you press and hold a link to preview the address. Be careful, though, because some apps may begin loading a preview. If you are unsure, skip the link entirely and visit the official SSA website yourself. A site using HTTPS can still be fake, so encryption alone does not prove it belongs to the government.

Confirm the message through Social Security directly

The safest approach is to open a new browser window and go to ssa.gov yourself. You can also contact Social Security at 1-800-772-1213 using the number listed on its official website. Do not use contact details included in a suspicious email.

How to safely view your Social Security statement

You can check your earnings record and estimated retirement benefits without using a link in an email.

• Open your browser and type ssa.gov/myaccount directly into the address bar.
• Select the option to sign in to your personal my Social Security account.
• Use Login.gov or ID.me, the supported sign-in services.
• Complete any required authentication or identity verification.
• After signing in, open your Social Security Statement to review your earnings history and estimated benefits.

If you do not already have an account, follow the official registration steps. Creating one can also help you monitor your Social Security information for unusual activity.

Seven ways to protect yourself from Social Security phishing scams

A convincing email can catch anyone off guard, especially when it mentions retirement benefits or financial records. These steps can help safeguard your identity and accounts.

1. Treat unexpected statement links with caution

Even if the email looks authentic, use the SSA website directly to access your information. Do not download unsolicited statement attachments or files that claim to come from the agency.

2. Strengthen account security

Use a unique password for your Login.gov or ID.me account and keep multifactor authentication enabled. Also secure the email account linked to your Social Security profile, since criminals may try to use it for password resets.

3. Keep antivirus protection current

Good antivirus software can help flag malicious websites and stop known malware downloads. Keep your operating system, browser and security tools updated to defend against new threats.

4. Guard your Social Security number

Never provide your Social Security number or bank details through an unexpected email link. If someone claims to represent Social Security and asks for sensitive information, contact the agency through its official website.

5. Monitor your Social Security records

Check your earnings history regularly through your personal SSA account. Look for unfamiliar earnings or changes to account details. If anything seems off, contact Social Security directly.

6. Limit the personal data scammers can find

Scammers often use people-search sites and data brokers to make phishing messages more convincing. Consider removing your information from those sites or using a reputable data removal service. This will not stop every scam, but it can reduce the amount of personal information criminals can find online.

7. Report suspicious emails before deleting them

The SSA Office of the Inspector General accepts reports of Social Security impersonation scams at oig.ssa.gov/report/. Save the sender address and any relevant screenshots. You can also report the message through your email provider’s phishing tools. After preserving the evidence, delete the email.

What to do if you clicked the fake link

Your next steps depend on what happened after you clicked.

If you clicked but did not enter any information

Close the suspicious page right away. Do not click additional prompts or download files. If a download started, check your device’s Downloads folder without opening anything. Simply visiting a phishing page does not automatically mean your information was stolen, but you should still keep your browser and operating system updated and run a security scan if anything seems unusual.

If you entered a password

Change the affected password immediately on the legitimate website, ideally from a trusted device. If you reused that password elsewhere, update those accounts too. A password manager can help you create strong, unique passwords and warn you about compromised credentials. Then review account activity and recovery settings for unfamiliar sign-ins or changes. Contact Login.gov, ID.me or the affected service through official support channels if you think someone gained access.

If you shared your Social Security number

Go to IdentityTheft.gov for a personalized recovery plan. Consider placing a free credit freeze with Equifax, Experian and TransUnion to help prevent new accounts from being opened in your name. Review your credit reports and monitor financial accounts for unauthorized activity.

If you opened or downloaded a suspicious file

Do not open the file if you have not already done so. If you ran it, disconnect the device from the internet and scan it with strong antivirus software. If you suspect malware installed successfully, use another trusted device to change sensitive passwords. You may also want professional help before logging back into financial accounts on the affected machine.

If financial details were exposed or money was lost

Contact your bank or financial institution immediately. Explain what happened and ask about securing your accounts or disputing unauthorized charges. You should also report the incident to the FBI’s Internet Crime Complaint Center at ic3.gov and the Federal Trade Commission at reportfraud.ftc.gov. The SSA’s inspector general recommends those reporting channels for victims of Social Security impersonation scams. If you suffered a financial loss, consider filing a report with local law enforcement as well.

Kurt’s main takeaway

What stands out about this scam is how ordinary it feels. There are no dramatic threats or unrealistic promises. It simply says your Social Security statement is available, which is something millions of people have a real reason to check. The design is convincing enough that someone could click without thinking. A polished email does not prove who sent it. In this case, looking at the actual sender address exposed the warning sign immediately. The best defense is simple: if an email concerns your Social Security information, go directly to the government website and check there yourself. A few extra seconds of caution can prevent a much bigger problem.

Have you ever received an official-looking government email that turned out to be a scam? What gave it away, or did you almost fall for it? Let us know by writing to us at Cyberguy.com.

Sign up for my FREE CyberGuy Newsletter

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com - trusted by millions who watch CyberGuy on TV daily.
• Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.