Fake Social Security Emails Distribute Dangerous Malware
Don’t Download That "Social Security Statement". It’s a Scam!
tl;dr
Scam emails posing as messages from the US Social Security Administration claim you must download your “Social Security statement” from a provided link. The download actually installs malware that lets criminals remotely access your computer and steal personal and financial information.
Scammers continue to distribute fake emails that appear to come from the US Social Security Administration (SSA). These messages are designed to trick you into downloading a malicious file that allows criminals to take control of your computer.
How the Scam Works
The fraudulent emails:
Include the official SSA logo to make them look legitimate.
Claim you can download your Social Security statement to review your earnings and benefits.
Warn that the files can’t be accessed on a mobile device and must be opened on a laptop or desktop computer.
The message may look convincing, but it has no connection to the Social Security Administration.
What Really Happens
If you follow the instructions and download the file, you won’t receive a statement. Instead, you’ll install malware that gives criminals remote access to your system.
Once installed, the malware can:
Steal your banking and financial information
Access personal documents and stored passwords
Collect ID details used for identity theft
Allow attackers to take full control of your device
With this access, scammers can drain bank accounts, open new credit lines in your name, or sell your data on criminal markets.
How to Stay Safe
Do not click links or download attachments from unsolicited emails, even if they appear official.
Access your Social Security account directly by typing the official address (www.ssa.gov) into your browser.
Use security software and keep it up to date to help detect and block malware.
Report phishing attempts to the SSA’s Office of the Inspector General at oig.ssa.gov.
Key Takeaway
The Social Security Administration does not send statements via unsolicited emails that require you to download files. Any message that urges you to do so is a scam designed to infect your computer and steal your information.
A screenshot of one of the scam emails:
