What the AARP warning is about

AARP has issued repeated warnings about scams that use AARP's name or logo to trick people into giving up their Social Security number, bank details, or passwords. These scams arrive by email, text, phone call, or fake websites that look like the real AARP site. The scammers pose as AARP staff, Social Security Administration (SSA) workers, or Medicare representatives — sometimes claiming you have unclaimed benefits or that your account is locked.

The real AARP, the SSA, and Medicare will never contact you first asking for your Social Security number, bank account information, or passwords. If you receive an unsolicited message claiming to be from any of these organizations and asking for personal details, it is a scam.

AARP publishes these warnings because older adults are targeted more often, and because the organization's name carries trust. Scammers count on that trust to get you to act quickly without checking whether the message is real.

Key Takeaways

  • AARP, the SSA, and Medicare never contact you first asking for your Social Security number, password, or bank details — any message that does is a scam.
  • Scammers use fake emails, texts, phone calls, and websites that look nearly identical to the real ones, so do not trust the appearance of a message.
  • If you receive a suspicious message, contact AARP, the SSA, or Medicare directly using the phone number or website from your official documents, not from the message itself.
  • If you have already given out personal information, contact your bank, the SSA, and the Federal Trade Commission (FTC) right away to report the scam and protect your accounts.

How scammers impersonate AARP and Social Security

Scammers create fake emails that copy the exact layout, colors, and logos of real AARP and SSA messages. They may include official-looking headers, your real name, and details pulled from public records to seem legitimate. The email or text usually contains a link that takes you to a fake website — one that looks almost identical to the real site but is actually controlled by the scammer.

Phone scammers use caller ID spoofing to make their number appear to come from AARP, the SSA, or a government agency. They may already know your name and some personal details, which makes the call feel more real. They often create false urgency by claiming your benefits are frozen, your account has suspicious activity, or you are owed money that expires soon.

Text message scams (SMS phishing) follow the same pattern: a message that looks official, a link to a fake site, and pressure to act when ready. Because texts feel more personal than emails, people often trust them more — which is exactly why scammers use them.

Red flags that a message is not real

The SSA, AARP, and Medicare have specific rules about how they contact people. If a message breaks these rules, it is a scam. The SSA will never email you, text you, or call you asking for your Social Security number — they already have it. They will not threaten to suspend your benefits or Social Security card. They will not ask you to click a link or read software.

AARP will not email or text asking for your password, Social Security number, or bank details. If AARP needs to contact you about your membership, they will use information you provided when you joined, and they will never ask you to verify sensitive information by email or text.

Watch for these specific warning signs: a message asking you to "verify" or "confirm" your Social Security number, bank account, or password; a link to log in or update your information; pressure to act within hours or your benefits will be lost; a request to pay a fee to unlock benefits or receive a payment; a message from someone claiming to be from Social Security, AARP, or Medicare that you did not expect.

What to do if you receive a suspicious message

Do not click any links or read any files from a message you are not sure about. Do not call the phone number in the message — scammers control those numbers. Instead, contact the organization directly using the phone number or website from your official documents or a recent bill.

If the message claims to be from the SSA, call the SSA's main number at 1-800-772-1213 (TTY 1-800-325-0778) during business hours. If it claims to be from AARP, call AARP's main number at 1-888-687-2277. If it claims to be from Medicare, call 1-800-MEDICARE (1-800-633-4227). Tell them what message you received and ask whether it is real.

You can also report the scam to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov or by calling 1-877-438-4338. The FTC tracks these scams and uses the reports to shut down scammers and warn the public.

If you already gave out personal information

Act quickly. Call your bank and credit card companies right away and tell them you may have been scammed. Ask them to watch your accounts for unauthorized charges and to freeze your accounts if needed. If the scammer has your bank account number, ask your bank to issue you a new account number.

Contact the SSA at 1-800-772-1213 to report that your Social Security number may have been compromised. They can flag your account and watch for unauthorized use. You can also place a fraud alert on your credit report by calling one of the three major credit bureaus: Equifax (1-800-525-6285), Experian (1-888-397-3742), or TransUnion (1-800-680-7289). A fraud alert tells creditors to verify your identity before opening new accounts in your name.

File a report with the FTC at IdentityTheft.gov. This creates an official record and gives you a recovery plan. Keep records of every call, email, and message you received from the scammer, and every call you made to report it — you may need these for your bank or the SSA.

How to protect your Social Security account going forward

Create a my Social Security account at ssa.gov. This is the official SSA website where you can view your earnings record, check your benefit estimate, and change your password. Once you have an account, you control who can access your Social Security information — scammers cannot see it unless they have your password.

Use a strong, unique password for your my Social Security account — one that uses uppercase and lowercase letters, numbers, and symbols, and that you do not use anywhere else. Write it down and store it somewhere safe, or use a password manager. Do not share your password with anyone, and do not use obvious passwords like your birth date or address.

Enable two-factor authentication on your my Social Security account if the SSA offers it. This means that even if someone has your password, they cannot log in without a second form of verification — usually a code sent to your phone or email. Check your my Social Security account regularly to make sure no one else has accessed it.

Frequently Asked Questions

Can AARP or Social Security contact me by email or text?

The SSA will not contact you by email or text asking for personal information. AARP may send you emails about your membership, but they will never ask you to verify your password, Social Security number, or bank details by email or text. If you receive such a message, it is a scam.

What should I do if I clicked a link in a suspicious email?

Do not enter any information on the page that loads. Close the browser when ready. Run a malware scan on your computer using reputable antivirus software. If you entered any information before realizing it was fake, follow the steps in the "If you already gave out personal information" section above.

Is it safe to call the phone number shown on my caller ID if it says it is from Social Security?

No. Scammers can spoof caller ID to make their number appear to come from any organization. Always hang up and call the official number from your documents or a recent bill. The SSA's official number is 1-800-772-1213.

How do I know if a website is the real SSA or AARP site?

The real SSA website is ssa.gov. The real AARP website is aarp.org. Check the web address in your browser's address bar — scammers often use addresses that look similar but are slightly different, like "ssaa.gov" or "aarp-login.com". If you are unsure, type the address yourself instead of clicking a link.

What if I am not sure whether a message is real?

When in doubt, contact the organization directly using the phone number from your official documents or a recent bill. It is always better to make one extra call than to risk giving out personal information to a scammer. The SSA, AARP, and Medicare expect these calls and will not be annoyed.