Scammers Circulate 2025 Social Security Statement Emails to Steal Data

Q: You clicked a realistic SSA email link by mistake; what immediate, hidden step must you take to prevent total identity theft?

If you clicked the fake SSA link and entered any information, the critical hidden step is to lock down your identity immediately by placing a fraud alert — or better, a security freeze — on your credit files, while also changing your real SSA password from the legitimate site. Security experts and SSA guidance say closing the phishing page and running a full malware scan should happen right away, because some versions of the scam can install malicious software or steal session data even before you notice. Then open a fresh browser window, go directly to ssa.gov or ssa.gov/myaccount, and change your password there. If you reused that password anywhere else, change those too. The bigger identity-theft risk begins if you entered your Social Security number, banking details, or other personal data. In that case, go beyond just changing passwords: place a fraud alert with one of the three major credit bureaus or freeze your credit with all three. A freeze is stronger because it can stop criminals from opening new accounts in your name. You should also file reports at IdentityTheft.gov, the SSA Office of the Inspector General, and the FBI’s IC3. If financial information may have been exposed, contact your bank or card issuer’s fraud department immediately. That credit-lock step is the one many victims miss, and it is often what prevents a phishing mistake from turning into full-scale identity theft.

3 articles · Updated · Fox News · Oct 25

Fake emails claiming a 2025 Social Security statement is "ready" are circulating with SSA branding and a "View statement" button meant to lure recipients into clicking malicious links.
The clearest warning sign is the sender address: one example used the unrelated domain loradmiadministraciones.com rather than a .gov address, even though the display name read "Social Security Administrator."
The scam is especially convincing because SSA does send legitimate annual reminder emails, usually about 3 months before a user's birthday, letting criminals mimic routine account notices without urgent threats.
The SSA inspector general warned in February 2026 about a significant rise in similar phishing emails and advises users to verify messages by going directly to ssa.gov or calling 1-800-772-1213.
Anyone who entered credentials, shared a Social Security number or exposed financial details should change passwords, consider freezing credit with all 3 bureaus and report the incident to IdentityTheft.gov, IC3 and the FTC.