Direct Deposit Hijacking: The Scam That Redirects Your Social Security Check Without Stealing a Password

Last updated: 2026-07-31

The bottom line up front: You don't have to hand over your password for a scammer to steal your Social Security check. A growing scam targets the routing and account number on file, not your login — fraudsters change where your monthly deposit lands, and by the time you notice, that month's payment is gone. It happens through a hijacked "my Social Security" online account, a convincing phone call to your bank, or a forged form mailed to the wrong office. The fix takes about fifteen minutes and works whether the threat comes from a stranger online or someone closer to home.

---

Most retirement fraud advice focuses on stopping money from leaving your account — wire transfers, gift cards, fake tech support charges. Direct deposit hijacking is different. Nothing leaves your account, because the money never arrives there in the first place. Your bank sees an ordinary incoming deposit; it's just landing in someone else's bank, because the routing and account number tied to your Social Security, pension, or annuity payment was quietly swapped out before the transfer went through.

This guide explains exactly how that swap happens, the specific steps to lock down every payment stream you rely on, and what to do in the first 48 hours if you think it's already happened to you.

How the Redirect Actually Happens

There are three common paths, and none of them require a scammer to guess your password.

The "my Social Security" account takeover. The Social Security Administration lets you manage your benefits, including direct deposit information, through an online account at ssa.gov. If you've never created one, that's actually the risk — it means nobody is watching that account, and a scammer who assembles enough of your personal information (name, date of birth, Social Security number, and a few identity-verification answers, often pulled from data broker sites or a prior breach) can create the account for you, in your name, before you ever do. Once they control it, changing your direct deposit information takes a few clicks.

The bank impersonation call. A caller poses as your bank's fraud department, claims your account was compromised, and "helps" you move your direct deposit to a new, supposedly safer account number — one they control. This works because it mirrors real fraud-protection language banks actually use, and because the caller often already has your last four digits or recent transaction details from a prior data leak, which makes the call sound legitimate.

The paper trail. Pension funds, some annuities, and a handful of state retirement systems still accept direct deposit change requests by mailed form or fax. A forged signature on a change-of-deposit form, sent by someone with access to your mail — a predatory caregiver, a distant relative, or a stranger who intercepted mail from an unlocked box — can redirect a payment with no online account involved at all.

Where Scammers Get the Information to Pull This Off

Creating a fraudulent "my Social Security" account or convincing a bank representative to change your direct deposit requires more than a guess — it requires enough real information about you to pass an identity check. Scammers typically build that profile from a combination of sources: data broker sites that compile your name, age, and address into a public-looking report; a prior data breach at a retailer, hospital, or insurer that exposed your Social Security number; and information you may have shared yourself in response to an earlier phishing email or text that looked like it came from SSA, your bank, or Medicare.

That's why this scam rarely arrives as a single event. It's usually the last step in a longer process: a phishing email asks you to "verify your account" a few weeks earlier, a follow-up call references details from that email to sound credible, and only then does the actual direct deposit change happen — often without a second call to you at all, because the scammer now has what they need to make the change directly through the online account or over the phone with your bank. Treating every unexpected request to "confirm your information" as a potential first step in this chain, rather than an isolated inconvenience, is one of the most effective ways to break it before it reaches the deposit itself. If you've gotten a call claiming your Social Security number is "suspended" or under investigation, that's the same setup — see our guide on what that suspended-number call really is and how to respond.

Because so much of this scam depends on information that's already leaked, it's worth checking directly whether your information was exposed in a prior data breach rather than assuming you'd know.

Why This Scam Is Easy to Miss Until It's Too Late

Ordinary fraud alerts don't catch this. Your bank has no reason to flag anything, because nothing suspicious happens inside your account — the deposit that should have arrived simply never shows up. Most people don't notice a missing Social Security deposit until several days after the expected date, and by then the SSA or pension administrator has already sent the payment to whatever account was on file. Recovering a misdirected federal benefit payment is possible, but it involves a fraud claim, an investigation, and — realistically — weeks of waiting, not an instant reversal.

This is also why the scam disproportionately targets retirees: a paycheck-earning household usually has other income arriving the same week, so a single missed deposit gets noticed and questioned immediately. For someone whose Social Security or pension check is the month's income, a redirected payment isn't a delay — it's a real, immediate gap.

Lock Down Your "My Social Security" Account Today

If you haven't created an online account at ssa.gov yourself, do it now — not to use it regularly, just to claim it before someone else does. An unclaimed account is an open door. Once you're set up:

1. Enable two-factor authentication if it isn't already required. SSA has moved toward requiring a second verification step (a text code or authenticator app) for exactly this reason.
2. Set your communication preference to email or text alerts for any change to your account, including direct deposit updates. If you get a notification for a change you didn't make, you have a same-day window to act instead of finding out weeks later.
3. Review your "my Social Security" account annually even if you never log in otherwise — check that the bank account on file is still correct and that no address or contact information has changed.

Protect Every Other Deposit Stream the Same Way

Social Security isn't the only target. Pensions, annuities, and any recurring benefit payment deserve the same checklist:

• Call the plan administrator directly — using the number on your official statement, never a number from an email or a caller — and ask what their process is for verifying a direct deposit change. A legitimate administrator requires more than a phone call: usually a notarized form, a mailed confirmation to your address of record, or an in-person verification.
• Ask your bank to flag your account for verbal password protection. Many banks offer this: a phrase or code word required before any account change is processed over the phone, in addition to your normal identifying information.
• Check your bank statement the same week your payment is due, every month, specifically for the deposit itself — not just your balance. A missing deposit is the first and sometimes only warning sign.

Most major banks also let you turn on real-time alerts for account changes and unusual activity — our walkthrough on setting up bank fraud alerts covers exactly which settings to enable.

If Someone Else Manages Your Benefits

Not everyone manages their own Social Security account. If a family member, caregiver, or court-appointed representative payee handles your benefits on your behalf, the same redirect risk applies to them — and the oversight is often thinner. A representative payee is required to use benefit payments for your care and to keep records, but the direct deposit itself still runs through the same online systems and phone-verification processes described above, and a payee's own account can be compromised the same way yours could be. If you're a family member serving as a payee for a parent or spouse, apply the same checklist to the account you manage: two-factor authentication, change alerts, and a monthly check that the deposit actually arrived. If you suspect a payee — family member or otherwise — is mismanaging or redirecting benefits, SSA's fraud hotline handles that report as well, separately from the payee's own conduct being reviewed by SSA directly.

If You Think It's Already Happened

Speed matters more than anything else here.

1. Call the Social Security Administration's fraud hotline directly at 1-800-269-0271 (the SSA Office of the Inspector General) if the missing payment is Social Security. For a pension or annuity, call the plan administrator's fraud line, again using the number from an official statement.
2. File a report with the FTC at ftc.gov/complaint and request a copy for your records — this documentation matters if you need to dispute the redirect with your bank or the benefit administrator.
3. Ask for a written trace on the redirected deposit. Federal benefit payments that are misdirected due to fraud can sometimes be recovered or reissued, but only if you report it promptly and in writing.
4. Change your ssa.gov password and review the account's registered email and phone number — a compromised account often has a scammer's contact information quietly added alongside yours, which lets them keep control even after you notice something's wrong.

Rethinking Reliance on Any Single Deposit Stream

Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.

This isn't a suggestion to distrust direct deposit itself — it's genuinely the safest way to receive federal benefits, and paper checks carry their own, larger fraud risk from mail theft. The point is narrower: for retirees whose income arrives entirely through one automated channel, a redirected or delayed payment isn't a minor inconvenience, it's a real gap with no backup. Some people address that by keeping a modest emergency cash reserve outside of any account tied to automatic transfers. Others look at diversifying a portion of retirement savings into an asset like physical gold or silver held in a self-directed IRA — a structure that doesn't depend on any single monthly transfer arriving on schedule. If you're exploring how that fits into your broader plan, talk it through with your financial advisor first, the same way you would any change to how your retirement savings are structured.

If you're the one holding a financial power of attorney for a parent or spouse, the same direct deposit checks apply to their accounts too — our guide to power of attorney abuse warning signs covers the broader pattern of financial access being misused, including redirected payments.

The Fifteen-Minute Checklist

If you only do three things after reading this:

1. Create (or verify) your ssa.gov account and turn on two-factor authentication and change alerts.
2. Call your pension or annuity administrator and ask exactly what it takes to change your direct deposit information — you want that process to sound inconvenient.
3. Mark your calendar to check your bank statement for the actual deposit, not just the balance, on the day each payment is due.

None of these take more than a few minutes, and together they close the exact gap this scam depends on: nobody watching the account until the money is already gone.

---

Protect Yourself Beyond This One Scam

The instincts that protect you from direct deposit fraud protect you everywhere else scammers target retirees: verify through a number you already trust, question anything that changes where your money goes, and never let a phone call be the only verification step for a financial change. If you want more guidance like this, explore the rest of ClearShield's library on scam prevention, including our breakdown of warning signs of a gold IRA scam for anyone exploring precious metals as part of that diversification conversation.

ClearShield helps adults 55 and older navigate online safety with clarity and confidence. No jargon. No panic. Just practical steps that work.

Want a weekly security tip in plain English? Join thousands of seniors who get ClearShield's free newsletter — one email per week, no spam, unsubscribe any time.