Social Security recipients across the country are receiving text messages that appear to come from the federal government, urging them to click a link and “verify” their accounts. The messages look official, sometimes referencing benefit amounts or account problems, and they ask for sensitive details like Social Security numbers and dates of birth. But the Social Security Administration has never used text messages to request personal information, logins, or benefit resets, and every one of these texts is a scam.
SSA’s own rules on texting recipients
The agency’s position is unambiguous. The SSA states on its fraud and scam page that it will never ask for sensitive or personal information through social media, email, or text message. That language covers Social Security numbers, bank account details, and login credentials. Any unsolicited text that requests this kind of data is fraudulent on its face, regardless of how convincing the formatting looks.
The SSA’s Office of the Inspector General issued a scam alert focused specifically on text-message fraud. According to that alert, the agency will never send a text asking for a return call to an unknown number. The OIG also clarified that SSA only sends texts to people who have opted in, and even then only in narrow situations such as appointment confirmations or one-time security codes. An unsolicited text asking someone to verify benefits, provide personal details, or click a link falls outside every authorized use of SSA texting.
The Federal Trade Commission reinforces this boundary from a consumer-protection angle. The real SSA will not call, email, text, or message anyone to demand money or information, according to FTC guidance on government impersonation scams. Federal agencies typically initiate contact by letter unless a person reaches out first, a point echoed by USA.gov in its own advisory on imposter schemes.
The verification-link trick is not new
The tactic behind these texts has a documented history. The SSA Inspector General previously warned the public about a phishing scheme in which an imposter message instructed recipients to “verify” their Social Security number by clicking a link to a fake verification form. That advisory described the same core lure now circulating by text: a message that mimics government branding and funnels people toward a page designed to harvest personal data.
What has changed is the delivery channel. The original scheme relied heavily on email. Scammers have since shifted toward SMS, exploiting the fact that many older adults check text messages more quickly than email and that phone screens display fewer visual cues to distinguish a spoofed sender from a real one. The FBI’s Internet Crime Complaint Center has documented cases in which victims were asked to verify identity details, including Social Security numbers and dates of birth, through text messages sent from spoofed government phone numbers.
The scam also adapts its pitch to the moment. Some messages claim there is a problem with the recipient’s Social Security account. Others promise to increase benefits or stop supposed “suspensions.” Both versions are designed to create urgency, pushing the recipient to act before thinking. The pattern aligns with what USA.gov describes as a common imposter approach: contacting people by call, text, or email with fabricated claims about their accounts.
What remains uncertain
No publicly available federal dataset currently tracks how many of these “account verification” texts have been sent or how many people have lost money to them. The OIG operates a reporting portal where victims can file complaints, but aggregated figures tied specifically to SMS-based verification scams have not been published. Without that data, the scale of financial harm is unclear.
It is also not established whether these texts spike during particular windows, such as the annual cost-of-living adjustment announcement period when recipients are already expecting official SSA communications. That timing theory is plausible but unconfirmed by any federal source. The OIG’s scam alert and the SSA’s general fraud page describe the threat in broad terms without tying it to a seasonal pattern.
The 2016 OIG advisory on the verification-form lure predates modern phone-number spoofing techniques. Whether the agency has updated its internal tracking to reflect the shift from email phishing to SMS phishing is not addressed in any of the cited federal documents. That gap matters because the countermeasures people need differ between the two channels, especially when it comes to recognizing spoofed caller IDs and deceptive text links.
How to tell a real SSA message from a fake one
The SSA provides a concrete technical check. Legitimate SSA links begin with ssa.gov/ or secure.ssa.gov/, according to the agency’s my Social Security security page. Any link in a text message that points to a different domain is not from the agency. Scam links often use lookalike URLs with extra words, hyphens, or unusual extensions meant to mimic the real address.
Beyond URL inspection, the simplest rule is behavioral: if someone did not opt in to SSA text messages and did not recently contact the agency, any text claiming to be from Social Security is illegitimate. The agency does not send unsolicited verification requests, benefit-reset links, or callback instructions by text under any circumstance. Messages that threaten arrest, loss of benefits, or legal action are also clear red flags, because legitimate SSA communications do not use those tactics.
Recipients should also pay attention to tone and grammar. While scammers have become more sophisticated, many fraudulent texts still contain awkward phrasing, odd capitalization, or generic greetings like “Dear beneficiary.” Real SSA messages reference specific appointments or actions a person has taken and do not ask for full Social Security numbers or banking details in a reply.
Steps to take if you receive a suspicious text
If an unexpected message claims to be from Social Security, the safest response is to ignore the instructions in the text itself. Do not click any links, do not call any phone numbers listed, and do not reply-even with “STOP”-because any engagement confirms that the number is active.
Instead, contact the agency using a trusted channel. That means typing in the official SSA web address manually or calling a known phone number from a recent SSA letter or from the agency’s main website. If there is a genuine issue with an account, SSA staff can verify it directly without relying on a link in a text.
Consumers are also encouraged to report the message. The SSA Office of the Inspector General maintains an online form where people can submit details about suspicious contacts, including scam texts that impersonate the agency. Reports can be filed through the OIG’s scam reporting portal, which asks for information about the message, the sender, and any money lost.
In addition, people who clicked a link or provided information should consider taking extra protective steps. That can include contacting their bank, placing a fraud alert or credit freeze with the major credit bureaus, and monitoring account statements and credit reports for unusual activity. While those measures cannot undo a disclosure, they can limit the damage and make it harder for criminals to open new accounts in a victim’s name.
Ultimately, the most reliable defense against Social Security text scams is a combination of skepticism and verification. Unsolicited messages that pressure recipients to act quickly, share personal data, or follow unfamiliar links should be treated as suspect by default. By relying on official contact channels and reporting suspicious texts when they appear, recipients can protect their own benefits while helping federal investigators track and disrupt these impersonation schemes.



