Someone who steals enough personal data to log into a my Social Security account can change the bank routing number on file and divert an entire monthly benefit payment before the real recipient notices. The Social Security Administration has acknowledged this risk for over a decade, and its Office of the Inspector General warned as early as 2013 that identity thieves target these online accounts to redirect deposits. A single administrative tool, the Direct Deposit Fraud Prevention block, can shut down that attack in about two minutes, yet SSA has never widely promoted it to the tens of millions of people who depend on monthly benefits.
Why online deposit rerouting is an active threat right now
The same digital convenience that lets beneficiaries manage payments from home also gives criminals a fast path to steal those payments. SSA’s own consumer FAQ confirms that eligible beneficiaries can change direct deposit information online, which means anyone who compromises a my Social Security login inherits that ability. The OIG’s 2013 fraud advisory spelled out the exact scenario: thieves establish or take over an account and redirect benefits to a bank account they control.
Phone-based changes carry their own risks. SSA stated in March 2025 that roughly 40% of direct-deposit fraud is associated with phone-based changes, a figure the agency highlighted in a press release on payment security. That share implies the remaining incidents flow through online channels and financial-institution auto-enrollment, the two other pathways the fraud prevention block is designed to seal. SSA has since introduced a 30-day hold on online direct-deposit changes and tightened identity-proofing requirements, but those measures protect only the online channel and do not cover phone or auto-enrollment routes.
SSA’s own outreach underscores the continuing risk. In a March 2025 blog post on protecting benefits, the agency urged beneficiaries to monitor their accounts, beware of impostor calls, and report suspicious changes quickly. Yet that same guidance places most of the burden on individuals to spot fraud after the fact, rather than steering them toward tools that can prevent unauthorized changes from going through in the first place.
A separate OIG audit released in September 2025 found that beneficiaries did not always authorize telephone deposit changes, resulting in misdirected payments. That finding reinforces the gap: identity-proofing upgrades on the website do not stop unauthorized changes made through other channels. As long as criminals can exploit phone procedures or auto-enrollment, tightening only the web portal leaves a large attack surface exposed.
How the Direct Deposit Fraud Prevention block works
The block is a flag placed on a beneficiary’s record inside SSA’s systems. Once active, it prevents anyone, including the beneficiary, from enrolling in or changing direct deposit or changing an address through my Social Security or through a financial institution’s auto-enrollment, according to the agency’s own fraud information page. The block covers every remote pathway at once rather than relying on per-channel fixes like stronger passwords or one-time codes.
Internal SSA policy manuals confirm the practical consequence. POMS GN 02402.005 states that when a Direct Deposit Auto-Enrollment Fraud Prevention block is on the record, the beneficiary or representative payee may be required to make direct-deposit changes in person. That trade-off, giving up online convenience for in-person verification, is exactly what makes the block so powerful as a fraud deterrent: a criminal would have to appear at an SSA field office, present identification, and withstand questioning, rather than slipping through remote authentication checks.
Technically, the block does not stop benefits themselves. Payments continue, but they can only be rerouted after face-to-face confirmation. For many retirees and disabled workers who rarely change banks, that added friction is minimal compared with the disruption of losing a month’s income to fraud and then waiting weeks for SSA to investigate and reissue funds.
Why so few people know this option exists
Despite its potential, the Direct Deposit Fraud Prevention block remains obscure. It does not appear as a self-service toggle in my Social Security, and SSA’s public-facing fraud tips emphasize general cyber hygiene, such as guarding Social Security numbers and ignoring suspicious calls, rather than advertising this specific safeguard. Even the March 2025 security announcements focused on new holds and verification steps instead of encouraging high-risk beneficiaries to opt into the block.
Part of the reluctance may stem from operational concerns. Encouraging millions of people to require in-person visits for any future direct-deposit changes could increase foot traffic at already strained field offices. SSA also has to balance security with accessibility for beneficiaries who live far from an office, have mobility challenges, or rely on caregivers to help manage their finances.
Still, the current approach effectively hides one of the agency’s strongest defenses at the very moment criminals are exploiting the gaps between online, phone, and bank-initiated channels. A more transparent strategy would at least inform beneficiaries that this option exists, explain the trade-offs clearly, and recommend it for people at higher risk of identity theft or those who rarely need to change their banking details.
What beneficiaries can do now
For now, the only way to activate the Direct Deposit Fraud Prevention block is to ask SSA directly, either by calling the national 800 number or contacting a local field office and requesting that staff add the block to the record. Beneficiaries who choose this route should document the date, time, and name of the representative who confirms the change, and then verify at their next in-person visit that the block remains in place.
Until SSA brings this tool into the spotlight, people who depend on monthly benefits face a difficult choice: accept the convenience and vulnerability of remote changes, or proactively trade some of that convenience for a stronger guarantee that their payments cannot be quietly redirected. For those living on fixed incomes, the extra layer of protection may be worth the hassle of an occasional trip to the local office.
Free for readers: The free Retirement Shield newsletter sends plain-English help keeping more of your money in retirement — the scams to dodge, the benefits you’re owed, and what’s changing with Social Security and Medicare, a couple times a week. Get the free newsletter.
