Social Security Administration Security Authentication PIN (SAP) for Direct Deposit Changes
AI-generated summary for informational purposes only. Not legal advice. See the original source for the authoritative text.
The Social Security Administration is renewing its OMB clearance for the mySocial Security—Security Authentication PIN (SAP) process under OMB No. 0960-0846. This hybrid identity verification method requires individuals requesting direct deposit changes by telephone to first log into their my Social Security account, complete multifactor authentication, and generate an 8-digit one-time SAP code. The code is valid for three hours and is provided to the SSA technician during a callback to verify identity before processing changes. The requirement applies only to individual beneficiaries and individual representative payees making direct deposit changes over the phone. Organizational payees are exempt. The process was introduced in 2025 to replace weaker knowledge-based authentication due to fraud risks. An emergency approval was granted in April 2025, and this notice begins the full renewal with a 30-day public comment period ending April 30, 2026.
AI-generated summary. May contain errors. Refer to official sources for legal decisions.
Key Changes
- Effective since July 2025, enhanced identity verification (SAP) applies only to direct deposit changes, not to new benefit claims
- Individuals must generate an 8-digit SAP valid for 3 hours via mySocial Security account before telephone direct deposit changes
- SAP process introduced in April 2025 following emergency OMB approval published at 90 FR 16583
+ 3 more changes with Pro
Obligations
What this law requires
SSA must require individuals requesting direct deposit changes by telephone to log into their mySocial Security account and complete multifactor authentication before generating a Security Authentication PIN (SAP) code
SSA must implement an 8-digit one-time SAP code that remains valid for exactly three hours from generation before expiring
SSA technicians must verify the SAP code provided by the respondent during callback before processing any direct deposit changes
SSA must exempt organizational payees from the SAP requirement and apply the requirement only to individual beneficiaries and individual representative payees
SSA must accept public comments on the accuracy of burden estimates, need for information, practical utility, and ways to minimize respondent burden until April 30, 2026