mySocial Security – Security Authentication PIN (SAP)

To mitigate fraud concerns, in April 2025, SSA will increase the level of identity proofing needed for customers to make payment method changes during phone interactions. While necessary to protect the public and the integrity of SSA’s programs, this limits the accessibility of the phone as a service channel for direct deposit requests (including post entitlement/post-eligibility direct deposit changes). To bridge this gap, SSA developed a hybrid identity proofing process called the Security Authentication PIN (SAP) that will provide identity proofing parity with our online modality, as well as in-person verification. Utilizing the SAP process will provide the necessary identity verification to allow payment method changes to direct deposit records via phone or in person, while ensuring fraud protection through verification of the identity of the individual prior to accessing or revising their account. SSA is implementing the new hybrid Security Authentication PIN (SAP) to digitally verify the identity of a telephone or in person customer when requesting changes to their direct deposit information. This supports the agency’s changes to its identity proofing policy for post-entitlement/ post-eligibility actions for direct deposit enrollments, updates or cancellations. To ease the burden on customers, SSA created a vanity URL that will navigate customers directly to the Security Settings page within their online mySocial Security account, allowing them to quickly and easily generate the SAP after accessing their account. This feature will reduce the burden on the customer to navigate within their online account to the Security Settings pages where they may generate the SAP. The code generates immediately once the customer selects the “Generate PIN” button. To allow for continued security for respondent’s personal information, and to ensure SSA is able to accurately verify the callers’ identities prior to accessing any SSA number holders’ sensitive information, we are implementing this hybrid SAP process for telephone access to the direct deposit services. In this way, we continue to offer maximum flexibility and options to the public while ensuring the security of the public’s social security number and benefits payments. We expect this new identity proofing will be a powerful fraud prevention tool. The respondents are individuals who wish to do business with SSA over the telephone or in person for the purposes of direct deposit enrollments, updates or cancellations. We are submitting a Non-Substantive Change Request to increase the scope of the SAP to more telephone services, and update the documentation to show that the SAP process is voluntary.

The latest form for mySocial Security – Security Authentication PIN (SAP) expires 2026-07-31 and is listed under ICR 202507-0960-011.

Respondents requesting phone-based assistance changes for sensitive services using the SAP Process

Federal Enterprise Architecture: Income Security - General Retirement and Disability