{"success":true,"data":{"id":"social-security-benefit-verification-phish","label":"Fake SSA benefit verification requiring my Social Security login re-authentication via a non-ssa.gov link — enables benefits diversion and SSA account takeover.","description":"Fake SSA benefit verification requiring my Social Security login re-authentication via a non-ssa.gov link — enables benefits diversion and SSA account takeover. The SSA NEVER emails links for benefit verification, direct deposit updates, or my Social Security re-authentication — all SSA transactions require secure login at ssa.gov. A non-.gov sender claiming SSA verification with a clickable link is high-confidence phishing that can redirect benefits payments. Detection: social security/SSA/benefit verification vocabulary + verify benefits/direct deposit update/re-authenticate action + off-brand href (not .gov) + sender NOT on ssa.gov/.gov + no In-Reply-To + no List-Unsubscribe. Trash score: +5. Source: GC1-R18; SSA Office of Inspector General phishing advisory 2025; FTC SSA impostor scam report.","tier":"danger","category":"phishing","isThin":false}}