mySocial Security – Security Authentication PIN (SAP)

ICR 202507-0960-006

OMB: 0960-0846

Federal Form Document

ICR Details
0960-0846 202507-0960-006
Received in OIRA 202504-0960-002
SSA
mySocial Security – Security Authentication PIN (SAP)
No material or nonsubstantive change to a currently approved collection   No
Emergency 04/24/2025
07/18/2025
  Requested Previously Approved
09/30/2025 09/30/2025
7,442,778 5,811,000
2,808,175 2,001,567
0 0

To mitigate fraud concerns, in April 2025, SSA increased the level of identity proofing needed for customers to make payment method changes during phone interactions. While necessary to protect the public and the integrity of SSA’s programs, this limits the accessibility of the phone as a service channel for direct deposit requests (including post entitlement/post-eligibility direct deposit changes). To bridge this gap, SSA developed a hybrid identity proofing process called the Security Authentication PIN (SAP) that will provide identity proofing parity with our online modality, as well as in-person verification. Utilizing the SAP process provides the necessary identity verification to allow payment method changes to direct deposit records via phone or in person, while ensuring fraud protection through verification of the identity of the individual prior to accessing or revising their account. SSA is implementing the new hybrid Security Authentication PIN (SAP) to digitally verify the identity of a telephone or in person customer when requesting changes to their direct deposit information. This supports the agency’s changes to its identity proofing policy for post-entitlement/ post-eligibility actions for direct deposit enrollments, updates or cancellations. To ease the burden on customers, SSA created a vanity URL that navigates customers directly to the Security Settings page within their online mySocial Security account, allowing them to quickly and easily generate the SAP after accessing their account. This feature reduces the burden on the customer to navigate within their online account to the Security Settings pages where they may generate the SAP. The code generates immediately once the customer selects the “Generate PIN” button. To allow for continued security for respondent’s personal information, and to ensure SSA is able to accurately verify the callers’ identities prior to accessing any SSA number holders’ sensitive information, we implemented this hybrid SAP process for telephone access to the direct deposit services. In this way, we continue to offer maximum flexibility and options to the public while ensuring the security of the public’s social security number and benefits payments. We expect this new identity proofing will be a powerful fraud prevention tool. The respondents are individuals who wish to do business with SSA over the telephone or in person for the purposes of direct deposit enrollments, updates or cancellations. We are submitting a Change Request to increase the scope of the SAP Process to include the following telephone services: (1) Generating a Benefit Verification Letter; (2) Obtaining a Tax Statement or replacement Form 1099, (3) Change of Address, and (4) Request for Claims Status. We will make no changes to the current SAP process; however, due to the sensitive nature of the information we need to divulge for these requests, we will now use the SAP process to conduct business with SSA over the phone for respondents requesting these additional 4 services. As we are planning to implement the SAP process for these four services by August 18, 2025, we are requesting approval of this Change Request by COB, August 15, 2025.
To allow for continued security for respondent’s personal information, and to ensure SSA is able to accurately verify the callers’ identities prior to accessing any SSA number holders’ sensitive information, we are implementing this hybrid SAP process for telephone access to the direct deposit services. In this way, we continue to offer maximum flexibility and options to the public while ensuring the security of the public’s social security number and benefits payments. We expect this new identity proofing will be a powerful fraud prevention tool. The respondents are individuals who wish to do business with SSA over the telephone or in person for the purposes of post-entitlement/post-eligibility actions for direct deposit enrollments, updates or cancellations, or to discuss flagged initial claims for all Title II non-disability benefits (Retirement, Survivors, Auxiliary Spouses, Lump Sum Death Payments (LSDP), and Children benefits applications).

None
None

Not associated with rulemaking

  90 FR 16583 04/18/2025
No

  Total Request Previously Approved Change Due to New Statute Change Due to Agency Discretion Change Due to Adjustment in Estimate Change Due to Potential Violation of the PRA
Annual Number of Responses 7,442,778 5,811,000 0 1,631,778 0 0
Annual Time Burden (Hours) 2,808,175 2,001,567 0 806,608 0 0
Annual Cost Burden (Dollars) 0 0 0 0 0 0
Yes
Miscellaneous Actions
Yes
Miscellaneous Actions
We are updating the burden figures for this information collection to reflect the change in scope for the use of the SAP process, as we will continue to use the SAP process for direct deposit requests via telephone, but will also expand the use of the SAP process for four more sensitive telephone services. While we are making no changes to the SAP process, the increase in scope significantly increases the number of responses who will use the SAP process. * Note: The total burden reflected in ROCIS is 2,808,175, while the burden cited in the Justification for the Changes is 990,072. This discrepancy is because the ROCIS burden reflects the average teleservice center and field office waiting times as well as the burden per response. In contrast, the chart in the Justification document reflects actual burden.

$1,168,709,600
No
    No
    No
No
No
No
No
Faye Lipsky 410 965-8783 faye.lipsky@ssa.gov

  No

On behalf of this Federal agency, I certify that the collection of information encompassed by this request complies with 5 CFR 1320.9 and the related provisions of 5 CFR 1320.8(b)(3).
The following is a summary of the topics, regarding the proposed collection of information, that the certification covers:
 
 
 
 
 
 
 
    (i) Why the information is being collected;
    (ii) Use of information;
    (iii) Burden estimate;
    (iv) Nature of response (voluntary, required for a benefit, or mandatory);
    (v) Nature and extent of confidentiality; and
    (vi) Need to display currently valid OMB control number;
 
 
 
If you are unable to certify compliance with any of these provisions, identify the item by leaving the box unchecked and explain the reason in the Supporting Statement.
07/18/2025


© 2025 OMB.report | Privacy Policy