Exposing the Underworld of Social Security Scams: A Cyber Security Expert‘s Analysis

Social Security scams are a growing menace ripping off America‘s retirees and aging population to the tune of hundreds of millions per year. In 2022 alone, nearly 400,000 Social Security-related scams were reported to the FTC, with victim losses topping $450 million.[^1] And those are just the known cases – experts believe the true impact could be magnitudes worse, as most scams go unreported out of fear or embarrassment.

I‘ve spent over a decade in the cyber security trenches, protecting cloud data for Fortune 500 companies, and I‘ve seen firsthand how scammers‘ tactics have evolved. As more of our financial lives have moved online and over the phone, fraudsters have followed suit with increasingly sophisticated schemes to steal identities and siphon off benefits. Social Security scams, in particular, have exploded with the aging Boomer population and the isolation of the COVID-19 pandemic.

In this deep dive, I‘ll expose the shady underworld of Social Security scams: who they target, how they operate, and the untold damage they leave behind. Most importantly, I‘ll share my battle-tested tips for protecting your identity, securing your benefits, and keeping these bottom-feeders at bay.

Scammers‘ Prime Targets: The Elderly, the Isolated, and the Unaware

Make no mistake, Social Security scammers are predators, and they go after the most vulnerable prey. According to the Consumer Financial Protection Bureau, Americans aged 60 and older were over 5 times more likely than younger adults to report losing money to a Social Security scam in 2021.[^2] The median loss for victims 60+ was a staggering $6,400, wiping out two months of the average Social Security retirement benefit.

Why are seniors disproportionately targeted? A few key reasons:

• Dependence on benefits: For 37% of men and 42% of women over 65, Social Security provides 50% or more of their income.[^3] Any perceived threat to that lifeline is a powerful motivator.
• Accumulated wealth: A lifetime of saving and homeownership makes seniors an appealing jackpot for identity thieves.
• Cognitive decline: The steep rise in Alzheimer‘s and dementia after 65 can make it harder to spot scams.
• Social isolation: Many seniors live alone and crave interaction, making them susceptible to impersonation scams.
• Uneven tech savvy: Though more seniors are going online, they often lack awareness of digital threats like malware, phishing and password hygiene.

Of course, seniors aren‘t the only targets. Low-income beneficiaries, non-native English speakers, and anyone unaware of Social Security‘s official procedures can fall prey. Scammers also exploit the recently bereaved at their most vulnerable, tricking them into misdirecting survivor benefits.

The Scammer‘s Playbook: Fear, Greed and Stolen Data

Social Security scams come in many guises, but most aim to steal your SSN, extract payment, or both. The criminal‘s tools are simple but effective: fear, greed, and just enough personal data to seem legit.

The most common technique is impersonation – posing as an SSA official to conjure a sense of authority. Until recently, this meant spoofing the SSA‘s real 1-800 number. But thanks to a new FCC rule that took effect in June 2023, carriers must now block spoof calls from invalid government numbers.[^4] Scammers still try to get around this by cycling through other "official-looking" numbers.

Lately, I‘ve seen a disturbing trend of scammers using AI voice cloning and deepfake videos to impersonate real SSA agents. By scraping an official‘s public social media posts and interviews, fraudsters can generate highly convincing fake audio and even videos. When a scammer calls with your full name, SSN and date of birth, then "proves" their identity with deepfaked verification, it‘s enough to fool even the sharpest seniors.

So how do scammers score all that juicy personal data in the first place? It‘s shockingly easy and cheap. Massive databases of hacked and leaked personal info are bought and sold every day on the dark web. In 2022, security researchers found an 11 gigabyte file with 22.5 million SSNs, full names, addresses and phone numbers free for the taking on a public hacking forum.[^5] With just a few clicks, scammers can download all they need to target thousands of potential victims.

Once they‘ve got you on the hook, Social Security scammers spin a web of fear and lies. The classics include:

• Your SSN has been suspended due to suspicious activity or unpaid taxes.
• Your benefits have been terminated due to incomplete paperwork.
• You‘re owed bonus payments or a cost-of-living adjustment, but must pay a "processing fee" to collect.

Whatever the story, the goal is to pressure you into revealing sensitive info or sending untraceable gift cards, wire transfers or crypto. And of course, the scammer‘s work has only just begun.

The Ripple Effects of Social Security Scams

The financial toll of Social Security scams is just the tip of the iceberg. For victims, the aftermath can upend their health, life savings and emotional well-being. Common consequences include:

Future Social Security losses: Scammers can use your info to fraudulently redirect benefits to their own accounts. In the first half of 2022, the SSA received over 82,000 reports of direct deposit fraud.[^6]

Empty nest eggs: Many seniors have their life savings and retirement investments linked to the same email and login info as their Social Security account. Once scammers have access, draining 401(k)s and IRAs is trivial.

Tax nightmares: With your SSN, scammers can file fake returns in your name and steal refunds. A 2022 Treasury audit found $5.2 billion in confirmed identity theft tax refund fraud.[^7]

Mortgage and deed fraud: Scammers can forge deeds, take out HELOCs, even sell a home out from under the owner if they get the right credentials.

Medical mayhem: Your SSN unlocks your Medicare benefits. If a scammer maxes out your benefits, you could be on the hook or even denied care.

Ruined credit: New accounts, racked up debts and unpaid loans shatter victims‘ credit scores. Seniors can lack the time and tech savvy to undo the damage.

Humiliation and self-doubt: The emotional toll can be the hardest. Many seniors blame themselves and sink into depression, isolation and hopelessness after an attack.

Perhaps the worst part is how quickly the dominoes can fall. Within 24 hours of a Social Security breach, your credit can be ravaged, your bank accounts emptied, your homes deeds stolen. Unraveling the damage can consume months or years you may not have.

Defense Against the Dark Arts: Battling Social Security Scams

Scammers may be clever, but we‘re not helpless. As a cyber security veteran, here are my top recommendations to protect yourself and your loved ones:

Harden your login security: Your Social Security account is only as safe as your weakest link. Start by strengthening your mySSA password to at least 12 characters. Even better, use a password manager like Dashlane or 1Password to create complex, unique passwords for each site.

Use two-factor authentication: 2FA is your best defense against unauthorized logins. Instead of relying on easily-spoofed SMS verification codes, use an authenticator app like Google Authenticator or Authy.

Secure your devices: Keep your smartphone and computer‘s operating systems and antivirus software updated to patch the latest vulnerabilities. Never click on attachments or links from unknown senders. Avoid logging into mySSA on public Wi-Fi networks.

Lock down your credit: Freeze your credit files with all three major bureaus (Equifax, Experian, TransUnion). This prevents scammers from opening new accounts in your name without your PIN. For added safety, place a free fraud alert every year.

Monitor your benefits: Log into mySSA at least monthly to check for suspicious changes in direct deposit info or contact details. Better yet, create an account before scammers do it for you.

Invest in identity protection: Consider a paid monitoring service that alerts you to any activity involving your SSN across credit reports, criminal records, bank accounts and the dark web. The best like Aura and IdentityForce provide up to $1 million in identity theft insurance.

Trust but verify: Whenever you get an unsolicited call, text or email claiming to be from the SSA, hang up and call the agency directly. Remember, the real SSA will never threaten you, demand payment in gift cards or crypto, or ask for your full SSN.

Speak up: If you‘ve been targeted, report it to the SSA‘s Inspector General and the FTC. The sooner you alert the authorities, the faster they can disrupt scammers‘ operations.

Share your knowledge: Scammers thrive in the shadows. Talk to your parents, grandparents and community members about the latest schemes and prevention tips. You could be the one to stop a scam before it starts.

Putting Scammers in Social Security‘s Crosshairs

Social Security is the bedrock of retirement security for millions of Americans. It‘s a sacred trust we‘ve spent our lives paying into, and one that scammers violate with sickening frequency. While we may never eradicate every fraudster, each of us has the power and responsibility to shut them down.

By staying informed, securing our identities, and speaking out against criminals, we can ensure a safe and stable retirement for ourselves and generations to come. The scammers may be sophisticated, but together, we‘re smarter. Let‘s make their job so hard, so risky, and so unprofitable they‘ll wish they never answered our call.

[^1]: Federal Trade Commission Consumer Sentinel Network Databook 2022
[^2]: CFPB Complaint Bulletin Examines Scams and Scammers Targeting Older Americans in 2021
[^3]: Social Security Administration Fact Sheet on Older Americans 2021
[^4]: FCC Rule Strengthens Consumer Protections Against Scam Robocalls From Overseas
[5]: Troy Hunt – The 773 Million Record "Collection #1" Data Breach
[6]: Social Security Administration – Fraud Prevention and Reporting
[7]: Treasury Inspector General for Tax Administration – Interim Results of the 2022 Filing Season