Threat Intelligence Directory
Social Engineering

Social Security Administration Suspension Scam

Attack Trigger

Caller or email claims your Social Security number has been suspended due to criminal activity

What Attackers Want

$1,000–$50,000 via wire transfer, crypto, or mailed cash

How This Attack Works

Fraudsters contact victims by email, phone, or text impersonating the Social Security Administration, claiming their SSN has been suspended due to suspicious activity or involvement in a drug trafficking investigation. To resolve the matter, victims must verify their SSN, provide their bank account details, or transfer funds to a "safe government account" to protect the money from seizure.

Red Flags to Watch For

  • The SSA does not suspend Social Security numbers — this is not a real thing
  • SSA communicates primarily by mail, not unsolicited phone calls or emails
  • Caller mentions an active drug trafficking investigation linked to your name
  • You are instructed to withdraw cash and send it via mail, wire, or crypto to a "safe account"
  • Caller uses part of your real personal information to appear legitimate
  • Threat of immediate arrest if you do not cooperate right now

Known Malicious Domains

These domains have been associated with this attack. Never click links going to these addresses.

  • ssa-number-suspended.comMALICIOUS
  • social-security-legal-notice.netMALICIOUS
  • ssn-suspension-alert.comMALICIOUS
  • ssa-account-freeze.netMALICIOUS

Glance automatically blocks emails from domains on this list. Domain list is not exhaustive — attackers register new domains continuously.

How Glance Stops This

  • Domain similarity analysis catches lookalike sender addresses at millisecond speed
  • SPF / DKIM / DMARC validation flags authentication failures before you ever see the email
  • VirusTotal + Google Safe Browsing checks every link in real time
  • Urgency language detection scores the email higher for manual review
  • Known malicious domain blocklist updated continuously from live scan data

Don't wait to get hit.

Glance scans every incoming email against 12 detection layers — including the exact tactics described above — before it reaches your inbox.

Protect My Inbox — Free