Fake 401k, IRA, or retirement account early withdrawal or hardship distribution phishing — fraudulent email impersonating Fidelity, Vanguard, Charles Schwab, or another retirement account provider claiming the recipient is eligible for a penalty-free early withdrawal, hardship distribution, or COVID hardship relief from their 401k, IRA, or pension account — directing them to click a link to claim the funds, provide their Social Security number, date of birth, or bank account details to receive the distribution — a financial data theft attack exploiting the opportunity framing of accessible retirement savings to harvest identity and financial account information

Phishing emails impersonating Fidelity, Vanguard, Charles Schwab, or other retirement account providers — claiming the recipient is eligible for a penalty-free early withdrawal, hardship distribution, or COVID hardship relief from their 401(k), IRA, or pension plan — then directing them to click a link to claim the funds, provide their SSN, date of birth, bank account details, or plan number to receive the distribution. Retirement account phishing is a financially devastating category because victims may surrender both their identity and access to their retirement savings. Key facts: (1) The CARES Act (2020) created a real COVID hardship 401(k) withdrawal provision — up to $100,000 penalty-free distributions from retirement accounts; this legitimate government program created the phishing template that actors continue to exploit years later, making "hardship withdrawal" lures permanently in the scammer toolkit; (2) Early 401(k) withdrawal phishing exploits the genuine financial pressure many Americans face — with 40%+ of American workers living paycheck to paycheck, the promise of accessible retirement funds without penalty is a powerful lure that bypasses normal skepticism; (3) Retirement account phishing victims face a compounded harm: SSN + date of birth + account details enable identity theft, and the harvested account credentials may additionally enable direct fraudulent transfers out of the retirement account; (4) Fake "Required Minimum Distribution" (RMD) lures specifically target seniors over 73 who must take annual distributions from retirement accounts; scammers use RMD language to appear legitimate to older recipients who are already taking required distributions; (5) Legitimate retirement account providers (Fidelity, Vanguard, Schwab) never initiate contact about withdrawal opportunities via email — all distributions, hardship requests, and account actions are initiated through the authenticated account portal. Warning signs: unsolicited email about penalty-free early withdrawal or hardship distribution, SSN or date of birth requested to "claim" retirement funds, bank routing number requested via email for distribution.