Is That Social Security Statement Email a Scam?

If you received an email telling you your Social Security Statement is ready to download, it’s a Social Security Statement email scam. The Social Security Administration does not send your Statement by email and never includes a link or attachment to download it. Any message that does either is a phishing attempt, no matter how official the formatting looks.1Social Security Administration Office of the Inspector General. Beware of Scam Emails Asking to Download Statements2Social Security Administration. Does Social Security Send Emails to the Public?

In early 2025, the SSA’s Office of the Inspector General warned the public about a wave of these phishing emails. Some closely mimic the look of real government notifications, which is what makes them effective. Clicking the link can hand your personal information to criminals or install malware on your device.1Social Security Administration Office of the Inspector General. Beware of Scam Emails Asking to Download Statements

How to Tell the Email Is Fake

The single clearest test is the offer itself. A real SSA email will never contain your Statement or a link to fetch it. Beyond that, most fake SSA emails share a handful of features:

  • The sender’s address does not end in.gov. Government agencies always use.gov domains for official correspondence.1Social Security Administration Office of the Inspector General. Beware of Scam Emails Asking to Download Statements
  • The message includes a download link or attached file claiming to be your Statement.
  • The wording pressures you to act right now, often by threatening that your benefits will be suspended or your account is compromised.
  • The email asks for your Social Security number, bank details, or passwords. The SSA does not request those things by email.
  • You’re told to pay with gift cards, wire transfers, or cryptocurrency. No government agency collects money that way.

Even when a sender address looks correct, treat unsolicited links with suspicion. The safe habit is to skip the email entirely and go to ssa.gov in your browser yourself.

What Real SSA Emails Look Like

The SSA does send some legitimate emails, but they serve narrow purposes. It may email you after a phone call or in-person visit, send general information about its online services, notify you that a new message is waiting in your My Social Security Message Center, or send an annual reminder about three months before your birthday to review your Statement online.2Social Security Administration. Does Social Security Send Emails to the Public? None of those emails ever contain the Statement itself or a link to download it.

Legitimate SSA messages come from a short list of addresses on .gov or an authorized service domain: no-reply@ssa.gov, DoNotReply@ssa.gov, do-not-reply-message-center@ssa.gov, subscription.service@subscriptions.ssa.gov, Thank.You@ssa.gov, and Information@update.ssa.gov.3Social Security Administration. Security and Protection – My Social Security If the sender doesn’t match one of these, the message isn’t from the SSA.

What to Do If You Already Clicked or Shared Information

Move quickly. Fast action can limit the damage.

Block Electronic Access to Your Social Security Record

Call the SSA at 1-800-772-1213 (TTY 1-800-325-0778) and ask for a Block Electronic Access on your record. Once the block is in place, no one can view or change your personal information through SSA’s website or automated phone service. That includes you, so you’ll need to call back and prove your identity to lift it later.4Social Security Administration. How You Can Help Us Protect Your Social Security Number and Other Personal Information

Freeze Your Credit

Contact all three credit bureaus (Equifax, Experian, and TransUnion) and place a credit freeze on your file. While the freeze is active, no one can open new credit accounts in your name. A freeze is stronger than a fraud alert because it blocks access rather than just flagging your file for extra verification, and you can temporarily lift it whenever you need to apply for credit yourself.5Federal Trade Commission. Credit Freezes and Fraud Alerts

Report the Scam

Go to IdentityTheft.gov or call 1-877-438-4338 to file a report with the Federal Trade Commission. The site will generate a personalized recovery plan based on what happened.6Federal Trade Commission. Identity Theft – What to Do Right Away Also report the scam to the SSA’s Office of the Inspector General at oig.ssa.gov/scam. The OIG uses these reports to investigate fraud tied to Social Security programs.7Office of Inspector General – Social Security. Report Scams

The Only Legitimate Ways to Get Your Statement

Your Statement is available two ways: through your online My Social Security account, or as a paper copy sent by mail. There is no email option, no download link delivered to your inbox, and no third-party service that provides it electronically.

Through My Social Security

The online portal at ssa.gov/myaccount is the fastest way to view your Statement. After logging in, you can see your earnings history and benefit estimates and download the Statement as a PDF.8Social Security Administration. Get Your Social Security Statement – My Social Security You can also opt in to email or text alerts telling you a new message is waiting in your Message Center. Those alerts are only a heads-up; the actual documents stay inside the secure portal.

To create an account you need a valid Social Security number, a U.S. mailing address, and to be at least 18 years old. As of June 2025, the only way to sign in is through Login.gov or ID.me. Old SSA usernames and passwords no longer work.9Social Security Administration. Learn About Changes We Are Making to Your Personal My Social Security Account Identity verification through Login.gov involves photographing a government-issued ID (and sometimes taking a selfie), entering your Social Security number for verification against public records, and confirming your phone number with a one-time code. ID.me follows a similar process, and both use two-factor authentication at every sign-in.10Login.gov. Verify My Identity

By Mail

If you prefer paper or can’t use the online system, print and fill out Form SSA-7004 and mail it to the SSA’s Wilkes-Barre Direct Operations Center at the address on the form.11Social Security Administration. Request for a Social Security Statement SSA-7004 You can also call 1-800-772-1213 for help with the request. A mailed Statement takes about four to six weeks to arrive.12Social Security Administration. Request for Social Security Statement Form SSA-7004

If you don’t have an online account and aren’t receiving benefits yet, the SSA will automatically mail you a paper Statement about three months before your 60th birthday.13Social Security Administration. How Can I Get a Social Security Statement? Before that age, the only way to see it is by creating an online account or requesting a mailed copy.

So if that email is still sitting in your inbox, delete it. Then log in at ssa.gov directly, or request a paper copy. Those are the only real options.