US citizens who manage their Social Security benefits online (ssa.gov) will now be required to use two-factor authentication. The US Social Security Administration will require holders of "my Social Security" accounts to provide a cell phone number. Users who do not have a cell phone or who do not want to provide the SSA with that number can use other "extra security" options, which involve receiving a code via US Mail and entering that along with other identifying information, such as the last for digits of a credit card number or information from IRS tax forms.
If you have not created an account with the SSA it's strongly recommended you do so before a nefarious individual does it for you. It’s pretty simple for someone to impersonate you at the SSA and file fraudulent tax returns in your name. If you create an account first, you’ll thwart the imposters.
Read more in:
- KrebsonSecurity: Social Security Administration Now Requires Two-Factor Authentication