Be warned that "phishing" E-mails encouraging you to create a my Social Security account are circulating. Here is a word of caution:

In a few instances, we will use marketing firms to help raise awareness of Social Security's online services, and this includes creating a my Social Security account. We allow these firms to send E-mails that will take individuals directly to our website. Any links that you find within these E-mails should always point to a ".gov" web address.

If you are not certain that an E-mail you received came from Social Security or one of our marketing partners, DO NOT click the links. Instead go directly to the Social Security website,, and click on the my Social Security icon.

How to detect a fraudulent E-mail message:

  • Most E-mails from Social Security will end in ".gov". If an E-mail address does not end in ".gov", use extreme caution before clicking any of the pictures or links.
  • Links to Social Security websites will always begin with or The link MUST include the slash (/) after .gov.

    For example, you should not trust links that look like these:


    If you are suspicious of a link in an E-mail, "hover over" the link with your mouse to see the web address.

  • Look for poor choices in wording, phrasing, spelling, or extra words in the E-mail text.

If you receive phishing E-mails, please forward them to the U.S. Computer Emergency Readiness Team at (

In general, you should follow these rules when you are using the Internet:

  • Do not open or respond to E-mails from people you do not know. They may contain viruses or spyware.
  • Never respond to E-mails requesting personal information. No reputable business or public agency will ever ask you for personal information in an E-mail.
  • Only go to websites you trust and never click on links that appear suspicious. Criminals use phony websites and links to trick you into giving them personal information or downloading viruses or spyware.

For more information about "phishing," go to OnGuard Online.