A new cybersecurity threat is targeting one of America’s most critical lifelines: Social Security. According to Georgia State University professor David Maimon, scammers are selling full access to stolen Social Security accounts on the dark web, putting benefit checks at risk for millions of Americans.
How the Scam Works
Scammers gain access to Social Security accounts by stealing login credentials—often through phishing attacks—and then selling access online. Once inside, fraudsters change account information and reroute benefit payments to new, fraudulent accounts. In one case, a compromised account showed a monthly benefit of $1,855.30.
The scam has grown sophisticated enough that even the Social Security Administration (SSA) is stepping in with new rules. Beginning April 14, 2025, SSA plans to require in-person identity verification for some applicants—a reversal from their previous phone-based process.
However, with SSA facing staffing cuts of nearly 12% (about 7,000 jobs), critics worry the new policy could do more harm than good.
How to Protect Your Social Security Account
1. Regularly check your “my Social Security” account
Review your earnings history, contact information, and payment status often. Print your benefit history for reference.
2. Avoid phishing links
Do not click on links in texts or emails asking you to verify your SSA details. Always visit ssa.gov directly.
3. Use two-factor authentication
Enable it through your SSA account settings to require a second form of verification, like a code sent to your phone or email.
4. Ignore suspicious calls
SSA will never call and demand payment or personal details. If you receive one, hang up.
5. Report scams immediately
File a report with the SSA Office of the Inspector General at oig.ssa.gov or call 1-800-269-0271.
6. Freeze your credit
Contact Equifax, Experian, and TransUnion to prevent fraudsters from opening accounts in your name.
7. Use the SSA’s E-Verify lock
You can lock your Social Security number using the E-Verify Self Lock tool to prevent misuse.
Social Security After Death: Don’t Fall for Obituary Scams
Scammers are also targeting survivors. When someone receiving Social Security dies, benefits for that month and beyond must be returned. Direct deposit accounts can be frozen if the deceased is the sole account holder. To avoid issues:
- Add a spouse or family member as a joint account holder.
- Apply for the $255 lump-sum death benefit within two years using Form SSA-8.
Obituary scams often target grieving families with fake calls asking for sensitive data. Never share personal details over the phone.
Common Red Flags for Social Security Scams
- Calls threatening arrest or demanding payment via gift cards or crypto.
- Emails or texts urging immediate account verification.
- Pressure to change direct deposit info quickly.
- Requests for your full Social Security number.
Social Security Is Not Bankrupt—Despite the Myths
While scammers thrive on fear, it’s important to remember: Social Security cannot go bankrupt. Even if trust funds run low, the system can still pay around 80% of scheduled benefits. Congress has always acted in time to shore up funding, and reforms are constantly under consideration.
Learn more facts vs. myths about Social Security’s long-term outlook at ssa.gov/oact.
Final Takeaway
Social Security scams are rising in both volume and complexity. But with vigilance, secure online habits, and timely reporting, Americans can protect their benefits from fraud.