Social Security has issued three scam warnings to retirees since November, each one describing a more convincing version of the last.
On April 28, 2026, the Social Security Administration’s Office of the Inspector General warned about a scam built around real names of actual agency employees, taken from public directories and social media, attached to photographs of fabricated badges. Investigators said plainly that no genuine employee would ever send one.
It was the third warning the office had issued since November 2025. The first came after fraudulent emails began arriving with the subject line “Alert: Social Security Account Issues Detected,” carrying forged agency letterhead and a threat to suspend the recipient’s Social Security number within 24 hours unless they called back. A second warning followed in February 2026, when the office said the volume of these emails had increased sharply. By April, the scam no longer needed forged letterhead at all.
Table of Contents
What Does a Social Security Scam Actually Sound Like?
Two claims turn up repeatedly in the reports investigators have collected, regardless of whether the contact arrives by phone, text, email, or letter.
One is that a Social Security number is about to be suspended, and that only an immediate payment or callback can stop it. Steve Baker, a former Federal Trade Commission official who now tracks fraud independently, has described one version of this to AARP: callers tell the victim their Social Security number was linked to a rental car found abandoned with drugs inside, and that arrest is imminent unless they cooperate right away.
The other is a suggestion to move money into a different account to keep it safe from fraud or a supposed investigation. The Social Security Administration has stated plainly what it will never do:
- Tell someone their money is not safe and needs to be moved to protect it
- Threaten to suspend a Social Security number or benefit over an unpaid fee
- Ask for payment by gift card, cryptocurrency, wire transfer, or payment app
None of those three things happen in a real contact from the agency.
What to Do if You Already Responded
Anyone who has given out a Social Security number, sent money, or clicked a suspicious link has a few concrete options right away. A my Social Security account at ssa.gov/myaccount can be created or checked for unauthorized changes to direct deposit or contact details. Equifax, Experian, and TransUnion can each place a free fraud alert or credit freeze. Identitytheft.gov, run by the Federal Trade Commission, builds a personalized recovery plan based on exactly what was disclosed.
The Federal Response Now Spans 17 Agencies
Reported losses to imposter scams reached $3.5 billion across the United States in 2025, according to the Federal Trade Commission, nearly triple the amount reported in 2020. About $920 million of that came specifically from people impersonating a government agency, up from $866 million the year before.
In June 2026, the Department of Health and Human Services launched a campaign called Never EVER, coordinated through the Elder Justice Coordinating Council alongside 17 federal agencies. Private partners joined as well, including the American Bankers Association, USTelecom, Google, and Microsoft. HHS Secretary Robert F. Kennedy Jr. framed the scale of the problem when the campaign launched:
“Scammers steal an estimated $28 billion from older Americans each year.”
That figure includes cases that never get formally reported to the FTC, which is why it runs well ahead of the FTC’s own tally.
American Retirees in the UK Face a Narrower Path to Verify Contact
Social Security matters for people living in the UK are handled through the Federal Benefits Unit at the US Embassy in London, which serves more than 44,000 beneficiaries across the UK, Bermuda, and several African countries. The unit takes phone calls only two mornings a week, and closes entirely during the last week of every month.
A totalization agreement between the US and UK allows someone who has worked in both countries to combine credits toward a pension from either side, which is why this group of beneficiaries exists in the first place. It also means there is no local Social Security office to walk into when something feels wrong. A call built around urgency has more room to work on someone whose only official channel is open a handful of hours a week.
How to Tell If Social Security Really Contacted You
| Signal | A real Social Security contact | A likely scam |
|---|---|---|
| Links | End in .gov | Look close, but do not |
| Payment | Never requested | Gift cards, crypto, wire transfers |
| A debt or fee | Sent by letter, with appeal rights | Demanded within hours |
| Your money | Never described as unsafe | Called unsafe, needs “moving” |
- Go straight to ssa.gov/myaccount instead of clicking a link in an email or text
- Treat caller ID as unreliable, since numbers can be faked to display as a real government line
- Hang up, then call a number found independently rather than one supplied during the contact itself
Reports can go to Social Security’s inspector general at oig.ssa.gov/report or 800-269-0271, the Federal Trade Commission at ReportFraud.ftc.gov, or the FBI’s Internet Crime Complaint Center at ic3.gov. UK-based beneficiaries can also file with Action Fraud or contact the AARP Fraud Watch Network helpline, which takes calls regardless of AARP membership. None of these require the person reporting to live in the United States.
The three warnings issued since November describe a scam that keeps changing shape rather than disappearing. Fake badges and forged letterhead are simply its most recent versions. What has not changed is the request underneath: an immediate payment, money moved into a new account, or a Social Security number given to a stranger on the phone. That request, whoever appears to be making it, remains the clearest sign something is wrong.
