I got this from our Payroll Dept. and thought I'd let people know:
The Social Security Administration has learned of a new scam. The Social Security Statement is automatically mailed about two months before their birthday to most people over age 25 if not receiving SSA monthly benefits. It is a concise, easy-to-read personal record of the earnings on which you have paid Social Security taxes during your working years and a summary of the estimated benefits you and your family may receive as a result of those earnings. The actual SSA website is
There have been several reports about an email purportedly from SSA that claims Social Security statements may have errors. The email advises opening a link which leads to screens that mimic SSA's website and to a page that asks for the SSN. If an individual enters his/her SSN and selects to generate a statement, a malicious executable file is downloaded. The malware attempts to intercept the user's online banking traffic to steal funds.
The latest spam run informs users that their latest Social Security statement is available but it may contain errors. The subject of the mail will be something like "Review annual Social Security statement" and the body warns of a potential identity theft risk and asks you to review your annual statement at the link they provide. Do not provide your Social Security Information to any email solicitations.