Fake Social Security Emails

Fake Social Security Emails, a reader asks…

I’ve been receiving a lot of emails from the Social Security Administration lately asking me to download my statement. I’m thinking this is a scam. Here’s a screenshot, am I right?

Yes, you are – do not click the Download Now link. There are two main indicators that this is fake.

1. The From line of the email. Not the title, but the actual email address. A real email from the Social Security Administration would come from an address that ends in @ssa.gov.
2. The Download Now link. When you hover over a link in an email, the actual URL appears. That shows that the link doesn’t go to ssa.gov, but to campoal.com (most likely a scam site).

This is just one of a growing number of scams that use email, text, and phone calls to try to get you to divulge your login credentials. I’ve seen such scams purportedly coming from other government agencies, from package delivery companies, from banks and credit card companies, health care institutions, commercial businesses, charitable organizations, and more.

You should be suspicious of every communication that comes to you, whether it’s electronic, by phone, or from people who come to your door unannounced. Hackers and scammers are highly motivated, and their methods are becoming increasingly sophisticated. They even fool the smartest, most educated, and most internet-savvy people.

I’ve even seen emails where the From line matches the domain of the purported sender, but other indicators reveal they’re fake. I even came across one where the indicators made me suspicious, but it turned out not to be fake. In that case, the legitimate entity inadvertently (stupidly?) used one of the same methods scammers use: giving a phone number to call. These days, that is one of scammers’ calling cards.

In all cases where you receive unsolicited communications, you should keep your uber-suspicious hat on and be very wary about clicking links or taking any action (like calling a number provided) in response to the communication. Look for:

1. Mismatch between the title of the From line and the actual email address (you may have to click on the title to reveal the email address),
2. A phone number to call to address or dispute something,
3. Wording that includes a warning that you must take action to prevent something bad from happening,
4. A link to click to take action – hover over the link to reveal the actual URL where you’ll be directed if you click that link,
5. Wording that uses poor punctuation, sentence structure, syntax, etc., or
6. Any offers that seem too good to be true (free stuff or stuff that only costs you shipping, etc.)

The importance here is to be suspicious, even if everything looks legit. Do not take action right away; take a beat and consider. If you’re not 100% sure it’s real, then it’s fake (99.999 or less).

Scammers and hackers often try to fool the most vulnerable among us, particularly the aged. If you have a relative or friend who’s not as young as they used to be, you should be a good family member or friend and keep them safe. Likewise, don’t think that you’re immune to scams and hacks; these criminals are smart and savvy, and know psychology, usually better than you do.

Be safe out there on the internet and at home. Your digital identity should be as precious to you as your physical identity. Don’t let it be compromised.