'You can see the name, date and the balance': Scammers are selling Social Security accounts on the dark web, researcher says — here's what you can do to protect your benefit checks

Maimon shared a video with the local broadcaster, described as showing access to an account for sale and revealing a beneficiary’s personal data, including the amount of their monthly payment — in this case $1,855.30.

So, how exactly does this scam work, and what can Americans do to protect their benefits?

How does the scam work?

How can someone benefit from purchasing access to a stranger’s Social Security account? According to Maimon, it’s disturbingly simple.

"They will just go to the Social Security Administration website, will change the details there and funnel the money to the new — and fake — John Doe account," Maimon explained.

Scammers can gain access to online accounts through various means, including stolen login credentials and successful phishing attempts.

It’s the type of fraud the Trump administration says it’s been trying to prevent. A new Social Security Administration (SSA) policy was set to roll out April 14. It aimed to make identity theft harder by requiring in-person verification for those unable to apply for services online, while previously you could verify your identity by phone. But the agency backed down from these changes due to accessibility concerns.

Protect your Social Security account

If you’re interested in protecting your Social Security account from fraud, here are some steps you can take.

Regularly check your account

If you have a “my Social Security” account, review your earnings history, personal information and payment status often. Any unfamiliar changes could be a sign your account has been compromised. Consider printing your benefits report so you can easily spot changes.

Don't click on suspicious links

Phishing emails and text messages from people posing as the SSA may urge you to “verify” your identity by logging into your account using a supplied link. Don’t take the bait — always access your account through the official site and never enter personal details through a link given to you out of the blue.

Use two-factor authentication when possible

The SSA allows users to enable two-factor authentication (sometimes called multi-factor authentication) to access their accounts for added security. When turned on, you’ll need to enter a code sent to your phone or email address in addition to your username and password. This offers additional protection from account takeovers.

Don't give cash to protect assets

Another common scam involves in-person visits from someone claiming to be law enforcement. Scammers pretending to be police or government agents may claim your assets are “at risk” and urge you to convert money into gold or gift cards for safekeeping. This is a classic scam. Real agencies will never ask for payment or offer protection this way.

Stay informed on new scams

Criminals thrive in times of change, and SSA-related scams are evolving. Sign up for fraud alerts, read SSA security updates and follow trusted consumer protection sources, such as the Federal Communications Commission (FCC).

Talk to a trusted person before making changes

Some scammers count on urgency and isolation to pull off their fraud. If you’re being pressured to do something like change your direct deposit information or respond to an unexpected notice, talk to a friend or family member first.

Being careful and proactive is the best defense against Social Security scams, and it could mean the difference between a secure retirement and financial chaos.