{"success":true,"data":{"id":"fake-401k-retirement-early-withdrawal-phish","label":"Fake 401k, IRA, or retirement account early withdrawal or hardship distribution phishing — fraudulent email impersonating Fidelity, Vanguard, Charles Schwab, or another retirement account provider claiming the recipient is eligible for a penalty-free early withdrawal, hardship distribution, or COVID hardship relief from their 401k, IRA, or pension account — directing them to click a link to claim the funds, provide their Social Security number, date of birth, or bank account details to receive the distribution — a financial data theft attack exploiting the opportunity framing of accessible retirement savings to harvest identity and financial account information","description":"Phishing emails impersonating Fidelity, Vanguard, Charles Schwab, or other retirement account providers — claiming the recipient is eligible for a penalty-free early withdrawal, hardship distribution, or COVID hardship relief from their 401(k), IRA, or pension plan — then directing them to click a link to claim the funds, provide their SSN, date of birth, bank account details, or plan number to receive the distribution. Retirement account phishing is a financially devastating category because victims may surrender both their identity and access to their retirement savings. Key facts: (1) The CARES Act (2020) created a real COVID hardship 401(k) withdrawal provision — up to $100,000 penalty-free distributions from retirement accounts; this legitimate government program created the phishing template that actors continue to exploit years later, making \"hardship withdrawal\" lures permanently in the scammer toolkit; (2) Early 401(k) withdrawal phishing exploits the genuine financial pressure many Americans face — with 40%+ of American workers living paycheck to paycheck, the promise of accessible retirement funds without penalty is a powerful lure that bypasses normal skepticism; (3) Retirement account phishing victims face a compounded harm: SSN + date of birth + account details enable identity theft, and the harvested account credentials may additionally enable direct fraudulent transfers out of the retirement account; (4) Fake \"Required Minimum Distribution\" (RMD) lures specifically target seniors over 73 who must take annual distributions from retirement accounts; scammers use RMD language to appear legitimate to older recipients who are already taking required distributions; (5) Legitimate retirement account providers (Fidelity, Vanguard, Schwab) never initiate contact about withdrawal opportunities via email — all distributions, hardship requests, and account actions are initiated through the authenticated account portal. Warning signs: unsolicited email about penalty-free early withdrawal or hardship distribution, SSN or date of birth requested to \"claim\" retirement funds, bank routing number requested via email for distribution.","tier":"danger","category":"phishing","isThin":false}}