The Social Security Administration's Office of the Inspector General issued a warning in February 2026 regarding a sharp rise in deceptive messages that impersonate official statement notifications. These fraudulent emails mimic the agency's branding and formatting to lure recipients into clicking links designed to steal credentials or install malware.
The specific scam example arrives as a routine notification stating that a 2025 Social Security statement is available. The message displays a sender name of "Social Security Administrator" and features a prominent blue button for viewing the document. However, the underlying sender address uses the domain loradmiadministraciones.com, which bears no apparent connection to the federal government and lacks the .gov suffix.
According to the Social Security Administration, legitimate communications typically originate from government addresses, although the agency utilizes authorized outside services such as echosign.com for certain notifications. Because scammers can customize display names to impersonate trusted organizations, the visual appearance of an email is not a reliable indicator of its origin. The SSA's inspector general specifically noted that these fake notifications contain dangerous links that could expose personal information or compromise devices.
To protect against these scams, experts advise examining the full sender address rather than relying on the display name. On computers, users can hover over links without clicking to preview their destination, while mobile users should be cautious as some apps may begin loading previews. The most reliable method is to bypass the email entirely and visit ssa.gov directly in a new browser window. The official SSA phone number, 1-800-772-1213, is published on its website and should be used for verification instead of contact details provided in suspicious messages.
If a recipient has already clicked a link, guidance recommends closing the website immediately and avoiding any additional prompts or file downloads. Simply visiting a phishing page does not automatically mean information was stolen, but running a security scan with updated antivirus software is prudent. If passwords were entered, they should be changed immediately through the legitimate website using a trusted device. Users should also review account activity for unauthorized changes and consider placing a free credit freeze with Equifax, Experian, and TransUnion.
Victims of Social Security impersonation scams can report the incident to the SSA's Office of the Inspector General at oig.ssa.gov/report/, as well as to the FBI's Internet Crime Complaint Center at ic3.gov and the Federal Trade Commission at reportfraud.ftc.gov. Scammers often use data from people-search websites to make messages more convincing, suggesting users consider removing their information from such sites to limit exposure.