EBT PIN Security: Phishing, Scams, and Stolen Benefits

Your EBT PIN is the only thing standing between your SNAP benefits and anyone who copies your card, so EBT PIN security comes down to a few habits: pick a PIN nobody could guess, cover the keypad every time, lock the card when you aren’t shopping, never share the PIN with anyone who asks, and check your transactions often. The stakes changed at the end of 2024. Federal funding to replace SNAP benefits stolen by skimming or cloning expired on December 20, 2024, and Congress has not extended it.1Food and Nutrition Service. Addressing Stolen SNAP Benefits Benefits taken now may not come back, which makes prevention the only reliable protection.

Pick a PIN a Thief Can’t Guess

Federal rules require every state to let you choose your own PIN. If your state mails one to you, the PIN has to be sent separately from the card, at least one business day apart, and you can still change it to something you pick yourself.2eCFR. 7 CFR 274.2 – Providing Benefits to Participants Use that right. At the register there is no signature, no ID check, no second factor. Four digits is the whole lock.

Skip the obvious choices. A birthday, an anniversary, the last four of your Social Security number, “1234,” or any repeated digit is what a thief tries first. Anything a stranger could pull off your social media or public records is not really secret. Pick four digits that mean nothing to anyone but you, memorize them, and don’t write them on the card or store them in a note on your phone.

Protect the PIN at the Checkout

Skimming is the most common way SNAP benefits disappear. A thief installs a small device on top of or inside a legitimate card reader — at a grocery store, gas station, or ATM — that reads the magnetic stripe when you swipe. A hidden camera or a fake keypad overlay captures the PIN at the same time. With both pieces, the thief clones the card and drains the account, sometimes within hours.

Before you swipe, look at the reader. A skimmer overlay often makes the card slot bulkier or sticks out more than usual. Wiggle the housing around the slot; a real reader is firmly attached, and a snap-on skimmer may shift. Press a couple of keys on the keypad. If they feel spongy or unusually thick instead of giving a normal click, the keypad may be an overlay. If anything looks off, use another register or tell a store employee.

Cameras are harder to spot. They get mounted in fake panels above the keypad, in brochure holders near the terminal, or built into what looks like part of the machine. One habit defeats almost all of them: cover the keypad with your free hand every single time you enter your PIN.

Use the Chip if You Have One

Older EBT cards store the account data on a magnetic stripe, which is easy to clone. USDA has been moving EBT to chip cards, which generate a unique code for each transaction and are much harder to counterfeit. The technical standard was published in August 2024, and states have started rolling chip cards out.3Food and Nutrition Service. SNAP EBT Modernization If your state has issued you a chip card, insert it into the chip reader whenever the terminal supports it. The chip does nothing for you if you swipe.

Lock the Card Between Purchases

The ConnectEBT app and website offer a card lock feature, and it is one of the strongest tools available right now. You keep the card locked when you aren’t shopping, which blocks any transaction. When you get to the store, you unlock the card through the app, pay, and lock it again. Some versions include an automatic re-lock timer you can set.

Depending on your state, you may also be able to choose where the lock applies — everywhere, or only for out-of-state and online transactions. If you rarely shop outside your state, blocking out-of-state use shuts down the most common skimming scenario, where a cloned card gets used in another part of the country. The lock doesn’t touch your balance. It only stops the card from being used until you unlock it.

Recognize Phishing and Scam Messages

Skimming goes after your card. Phishing goes after you. Scam texts, emails, and phone calls impersonate the state benefits office, USDA, or EBT customer service, usually claiming there’s a problem with your account and asking you to “verify” your card number and PIN through a link or a callback number the scammer controls.

The rule is simple. No legitimate SNAP worker or EBT service provider will ever ask for your PIN. Not by phone, not by text, not by email, not through a link. They won’t ask for credit card numbers or bank account numbers either. If a message makes you unsure, ignore the links and numbers inside it. Call the number printed on the back of your physical EBT card, or look up your state SNAP office through the USDA directory.4Food and Nutrition Service. SNAP Scam Alerts

Watch for urgent language (“your benefits will be suspended”), links to sites that aren’t official .gov domains, and requests to “confirm” information the real agency would already have. Delete suspicious emails without replying. Don’t click social media ads or posts that promise bonus benefits or instant cash tied to your EBT account.

Be Careful With Third-Party Balance Apps

Several unofficial apps promise to check your EBT balance or track spending. EBT systems don’t offer the secure data-sharing connections that banks provide to legitimate finance apps, so these third parties usually rely on screen scraping: the app logs in with your actual credentials and reads the screen. The Consumer Financial Protection Bureau has called screen scraping insecure and not viable long term. When you hand a third-party app your EBT login, you’re trusting that company with your account, and you have little recourse if their systems get breached.

Use official channels instead: your state’s EBT portal, the ebtEDGE or ConnectEBT apps (which are contracted by state agencies), or the automated phone line on the back of your card.5ebtEDGE. ebtEDGE Cardholder Portal

Watch Your Transactions

Checking your transaction history is how you catch fraud before the entire monthly benefit is gone. Most states show real-time records through their official portal or app, with the amount, date, time, and merchant for every purchase. Automated phone lines give balance and recent-transaction information around the clock.

Any charge you don’t recognize is the signal. Pay closer attention to purchases at merchants you’ve never used, transactions in cities or states you haven’t been to, and several small charges in quick succession — thieves often test a cloned card with small purchases before draining the balance. SNAP online purchases should also show up in your history, and they require your PIN through an encrypted entry system.6Food and Nutrition Service. Stores Accepting SNAP Online An online charge you didn’t make is a red flag.

Change Your PIN When Something Feels Off

Change the PIN right away if you think someone saw you enter it, if you used a terminal that looked suspicious, or if you notice any transaction you didn’t make. Most states give you three ways to do it: call the customer service number on the back of the card, visit your local SNAP office, or use the state’s online EBT portal. The phone line runs around the clock in most states and is usually the fastest option.

Know what happens if you enter the wrong PIN too many times. Most systems lock the card after a set number of failed attempts. If that happens, call EBT customer service to verify your identity and unlock it. Your benefits are still in the account. The lock just keeps anyone from touching them until the card is unlocked.

If Your Benefits Are Stolen

Call the customer service number on the back of your card as soon as you spot unauthorized transactions. Reporting the theft triggers a hold on the account and stops further losses. The state agency has to place that hold at the time it receives your report and keep a record of when you called.7eCFR. 7 CFR 274.6 – Replacement Issuances and Cards to Households

Before you call, pull together your 16-digit EBT card number, the dates and dollar amounts of every charge you don’t recognize, and the merchant names and locations listed on those charges. Note the last purchase you actually made too — that gives investigators a timeline for when the card was compromised.

Getting a Replacement Card

The representative will deactivate the compromised card and start a replacement. Under federal rules, the state must make a new card available for pickup or put it in the mail within two business days of your report.7eCFR. 7 CFR 274.6 – Replacement Issuances and Cards to Households Delivery by mail typically runs about five to ten business days. Your new card needs a fresh PIN before you can use it, and it should be different from the one on the compromised card.

Replacing Stolen Benefits

Here the news is harder. A 2022 law required states to replace SNAP benefits stolen by skimming or cloning, using federal funds, for thefts occurring between October 1, 2022, and December 20, 2024. Congress did not extend it.1Food and Nutrition Service. Addressing Stolen SNAP Benefits Benefits stolen on or after December 21, 2024, are not eligible for federal replacement.8Food and Nutrition Service. SNAP Replacement of Stolen Benefits Dashboard Some states may still offer limited replacement through their own policies or funds, and the CFPB advises reporting theft to your state agency regardless, because some states may still be able to resolve incorrect charges.9Consumer Financial Protection Bureau. What Should I Do if My EBT Card or PIN Is Lost or Stolen, or I See Unauthorized Charges But there is no federal guarantee anymore, which is why a strong PIN, the card lock, a covered keypad, and regular account checks matter more than they used to.