Protect your VA benefits.

Pause before responding.

An unexpected message may claim that your benefits will stop or that you must update an account immediately. A familiar logo, caller ID or convincing voice does not prove who is contacting you.

Do not open unexpected attachments or follow a suspicious link. Find the organization through a website or phone number you already know is genuine, then check the request independently.

Verify the destination.

For VA business, start at VA.gov ↗ (opens a new tab). Check the full website address before signing in. A misspelling, extra word or unfamiliar domain can be a warning sign. HTTPS encrypts a connection; it does not by itself prove that a website is legitimate.

If an exam contractor or another organization contacts you, verify it using your appointment letter or an independently obtained official contact. You do not need to decide whether a message is genuine while the sender is pressuring you.

Keep control of your accounts.

• Use a strong, unique password and multifactor authentication for your sign-in account.
• Keep passwords and one-time verification codes private. Enter a code only in a sign-in process you started on the genuine service.
• Keep your device, browser and security software updated.
• Review VA notices about direct deposit or contact-information changes. Check your accounts for changes you did not make.

If you already shared information.

Stop contact with the suspected scammer and save the messages. If financial details were exposed, contact your bank or card issuer promptly using a trusted contact method. For an exposed account, use the genuine service to change the password and follow its recovery instructions.

The FTC provides an identity-theft recovery plan at IdentityTheft.gov ↗ (opens a new tab). If you suspect a harmful download, update your security software and run a scan.

Use official reporting routes.

If a VA benefits payment is missing or you notice a suspicious direct-deposit change, contact VA promptly at 800-827-1000. Reporting does not guarantee that lost money will be recovered.

Keep a simple reminder nearby.

Download a one-page checklist to review before responding to a benefits-related request. It has no fields for passwords, account numbers or medical information.

For a Patriot Summit consultation inquiry, share only the basic contact details and general question requested. Our public form does not accept documents. Ask about an appropriate way to share private records before sending them.

Read how consultation inquiries are handled →