Beware of the 'Social Security Account Missing Information' Scam
After conducting a brief investigation, we figured out that the "Social Security Account Missing Information" email is a phishing scam.
The letter claims to contain an encrypted attachment with information regarding the recipient's social security account. When opened, the file requires the user to log in with their email account in order to access it. However, this is a ploy by scammers to collect personal data from unsuspecting victims.
The email states that the attached document has been encrypted for security purposes and asks the recipient to review it for accuracy and notify them of any errors or changes needed. Upon downloading and opening the attachment, it appears as an HTML file presented as an encrypted PDF document. It instructs users to sign in with their mail account in order to decrypt it.
It is important to note that this email is fake and any information entered into the phishing file will be disclosed to scammers. Furthermore, they may be able to steal content registered via exposed emails such as identities of social accounts owners (e.g., email, social media, etc.) and ask contacts/friends/followers for loans or spread malware by sharing malicious files/links.
The full text of the scam email
The complete contents of the scam email are as follows:
Hello :
Your Social Security account seem to be missing some information. For your security the document required to address this issue has been securely uploaded and attached to your email.
We encourage you to check your document and review the information :
Your earnings record (to make sure it’s accurate and notify us if you see any errors);
Your personalized monthly retirement benefit estimates (which now display how much you can expect to receive depending on when you decide to start your benefits between ages 62 and 70);
Other useful information that will explain your benefits and help you prepare for your financial future; and
New fact sheets that provide additional information based on your specific age group and earnings situation.You can access your new Statement by signing into your account at socialsecurity.gov/reviewyourstatement.
For your protection, we use multi-factor authentication to make sure, only you can access your account. When you sign in, you will complete two steps:
Step 1: Enter your Email and password.
Now that you can access your Statement instantly and anytime online, we will not automatically send one by mail.
We hope you find your new Statement useful and informative.
What are the top signs that an unsolicited email in your inbox is a scam?
- The email is sent from an unknown sender or a suspicious domain.
- The email contains spelling and grammar mistakes.
- The email asks for personal information, such as passwords, credit card numbers, or bank account details.
- The email includes a sense of urgency or threatens legal action if you do not respond immediately.
- The email includes attachments that you did not request or expect to receive.
- The email offers something that seems too good to be true (e.g., free money, prizes, etc.).
