Your retirement account can be an attractive target for scammers, and imposters continue to find new ways to try to impersonate government agencies, such as NYSLRS or the Social Security Administration. Learn to distinguish fake messages from official NYSLRS communications and protect yourself from scams.

How Scams Work

Imposters pretend to be an agency or organization you already know to gain your trust. They use similar logos or imagery in correspondence. They may contact you from an email address that mimics—but isn’t identical to—those used by employees of the actual organization. Some can even make a real agency’s phone number appear on caller ID (known as spoofing).

Usually, once they contact you, they claim there is a problem (or a prize or a new benefit available) requiring your immediate attention. But here’s the catch: to fix the problem or receive the reward, the imposter needs you to pay them a fee or provide personal data, such as your Social Security number or bank account information. They may even threaten you with legal action, a suspension of your benefits or arrest if you fail to act in time.

If someone contacts you and you notice these signs of a scam, remain calm. Hang up the phone or delete the message if you feel like something is off. It’s the easiest way to avoid accidentally giving away personal information.

AI: A New Tool for Scams

You should also be aware of an emerging threat—artificial intelligence (AI), which allows computers to mimic certain human behaviors, such as speech and writing. Using AI, scammers can personalize phishing emails, making it harder to recognize a fraudulent communication. AI may even be able to impersonate the voice of a family member or friend, making you think they are in trouble or need money.

Here are some things you can do to protect yourself from AI-enhanced scams:

• Don’t share sensitive information through text or social media;
• Don’t send or transfer money to unknown locations;
• Consider designating a “safe word” for your family to use to identify themselves and share that word with family members and close contacts; and
• When in doubt, hang up and call your loved one back.

Doing Business With NYSLRS

Generally, NYSLRS will only call you if we are following up on a previous communication from you, such as a phone call, secure email message, Retirement Online request, form or letter. For security, you can use your NYSLRS ID to identify yourself instead of providing your Social Security number. To find your NYSLRS ID, sign in to Retirement Online, or check your annual statement or other correspondence from NYSLRS.

It’s important to review the communications you receive from NYSLRS. We send you letters or emails (depending on your delivery preference in Retirement Online) whenever you update your Retirement Online account or benefit information.

Keep Your Retirement Online Account Secure

Retirement Online is the fastest and most convenient way to review your retirement account details and conduct business with NYSLRS. And it’s safe to use—it has the same security safeguards used for online banking and by other financial institutions. Please note, it is currently only available from the NYSLRS website; there is no mobile app.

Here are steps you can take to help make sure your Retirement Online account stays secure:

• First, if you don’t have an account, learn more about Retirement Online and click Register Now to sign up. (For help, check out our Retirement Online Tools and Tips blog post.) By creating an account, you can prevent scammers who get a hold of your personal information from impersonating you and registering for a Retirement Online account in your name.

• Choose a strong password. Here are some tips for creating a secure password.

• Once you have an account, keep your username and password in a safe place, and don’t share them with anyone. NYSLRS will never ask for your password.

• Sign in to Retirement Online at least once a year and update your password so it doesn’t expire. If you haven’t signed in recently and forgot your user ID or password, don’t worry—from the customer login page, you can:
  • Click the Forgot ID link to look up your user ID.
  • Click the Forgot Password link to reset your password.

You’ll need to identify yourself and answer security questions you set when you signed in for the first time. Read our Forgot User ID and Forgot Password guides for step-by-step instructions.

• Update your delivery preference to receive an email notifying you when you have correspondence to view in Retirement Online. That way, when there are changes to your account, you’ll receive an email notifying you instead of waiting for printed notices through the mail.
  • Sign in to Retirement Online.
  • Look under My Profile Information.
  • Click update next to ‘Contact by.’
  • Choose Email from dropdown.

If you receive a notification of an account change you did not make, contact us immediately.