Scammers redirected Social Security payments away from thousands of beneficiaries by exploiting weak identity checks on the agency’s 800-number telephone line, according to a September 2025 report from the Social Security Administration’s Office of the Inspector General. The OIG identified 3,109 beneficiaries between October and December 2023 alone who reported they never received payments after someone called in and changed their direct deposit information without authorization. Locking a my Social Security account, a step SSA says blocks all automated telephone and electronic access, takes roughly two minutes and shuts down the exact channels scammers use.
How direct deposit fraud drains benefits before recipients notice
The attack is straightforward. A scammer who gathers enough personal data about a beneficiary can call SSA’s national 800-number, pass the agency’s telephone verification questions, and swap the bank account on file to one the scammer controls. The next monthly payment then lands in the wrong account. The OIG report on unauthorized changes documented thousands of such diversions in just one quarter, and those were only the beneficiaries who contacted SSA to report the problem. The real count could be higher because some victims may not immediately realize why a deposit failed to arrive.
SSA offers several legitimate ways to update bank details. Beneficiaries can sign in to a personal my Social Security account online, use a bank’s Automated Enrollment process, or generate a one-time code at ssa.gov/PIN. The agency calls the online route the fastest way to make changes, and its page on how to update direct deposit walks through those options step by step. That same speed, though, is what makes the system attractive to criminals who gain access to an account or impersonate a beneficiary over the phone. Beneficiaries receiving Supplemental Security Income payments cannot currently use the online direct deposit tool, which means they depend on phone or in-person channels that carry their own verification risks.
The two-minute lock that closes phone and online channels
SSA’s own guidance describes a feature that effectively freezes the record. On its official blog, the agency tells beneficiaries they can “block access to your electronic Social Security record.” The consequence is absolute: “Once you request it, we’ll block any automated telephone and electronic access to your Social Security record. No one, including you, will be able to see or change your personal information.” That single step disables the exact pathways the OIG report flagged as vulnerable.
SSA rolled out stronger identity-proofing requirements in 2025, including tighter rules for people filing claims or changing direct deposit details. Beneficiaries who cannot use the online portal can visit a local office or call to schedule an in-person appointment. Those added friction points help, but they do not eliminate the risk that a determined fraudster could still clear a phone-based identity check. The account lock goes further by removing automated access entirely until the owner lifts the block.
The trade-off is real. A locked account means the beneficiary also loses the ability to view statements, update an address, or change bank information online until the block is removed. For someone who rarely needs to adjust their record, that inconvenience is minor compared to the risk of a diverted payment. For someone who travels frequently, moves often, or manages benefits for a family member, the block can feel burdensome because every change requires extra steps.
When an account lock makes sense
The beneficiaries most exposed to direct deposit diversion are those who do not log in regularly, rely heavily on the 800-number, or have had prior issues with identity theft. For them, placing a block can serve as a low-effort, high-impact safeguard. It is especially useful for people who keep the same bank account for years and have no plans to switch institutions or open new accounts.
Others may prefer a middle path. Instead of locking their records permanently, they can leave access open while actively monitoring deposits and bank activity, then request a block if they detect suspicious contact or if their personal data is compromised in a breach. Because removing a block requires direct contact with SSA and additional verification, beneficiaries can treat the lock as a temporary shield during periods of heightened risk.
Practical steps beneficiaries can take now
Beneficiaries worried about fraud do not have to wait for new safeguards from SSA. They can start by confirming that their current bank information on file is correct, either through a my Social Security account or by contacting the agency directly. Anyone who notices a missing or misdirected payment should report it immediately so SSA can investigate and restore future deposits to the right account.
Next, beneficiaries can decide whether an account block fits their situation. Those who rarely change banks and are comfortable handling updates in person may find that the extra security outweighs the loss of online convenience. People who rely on digital access can instead focus on strong, unique passwords for their SSA login, enabling multifactor authentication, and being cautious about sharing personal details that could help a scammer pass phone verification.
Finally, beneficiaries should treat unsolicited calls, texts, or emails about their benefits with skepticism, especially if the caller pressures them to confirm bank details or provide full Social Security numbers. SSA says it will not suspend a number or threaten arrest over the phone. When in doubt, hanging up and dialing the official SSA 800-number directly is safer than continuing a suspicious conversation.
The OIG’s findings show that direct deposit diversion is not hypothetical-it is already affecting thousands of households. Until SSA’s identity checks and phone procedures fully catch up with the threat, the fastest way for many beneficiaries to close off a key attack vector is also the simplest: decide how much online access they truly need, and use the tools SSA already offers to lock down the rest.
Free tool for readers: You check your blood pressure — when did you last check your retirement? You can get your free Retirement Safety Score in about five minutes, with no sign-up to see it.
