Cybersecurity and Privacy Awareness for Veterans

Bad actors are always finding new and sophisticated ways to steal information. Now more than ever, it’s important to augment your thinking and creativity regarding password protection.

Passwords are often the only locks on your account door, and with such a vast security threat landscape, you need more than just a lock to minimize cyber risks. Adding an extra layer of protection with multi-factor authentication (MFA) can block over 99.9 percent of cyber-attacks.

What is multi-factor authentication?

Multi-factor authentication, sometimes known as two-factor authentication, is an extra layer of protection on your account. Each time you sign into a VA website or app, you’ll use multi-factor authentication to verify you’re you. You’ll do this using a device to which only you have access, such as your mobile phone.

Prevent identity theft and fraud when you enable MFA. A bad actor may guess or steal your username and password, but multi-factor authentication will stop them.

For a guide to implementing MFA, play our video on multi-factor authentication (YouTube).

Are your accounts at risk?

Most likely because password reuse can present security issues like phishing and breaches. Chances are you’re reusing the same credentials across multiple sites, which is one of the leading security problems with passwords. The U.S. Department of Interior found that watchdog staff members decrypted the passwords for 16 percent of the agency’s user accounts in 90 minutes, while 5 percent of active credentials at the agency used a variation of the word “password” in their password.

A double step to double check

Enabling MFA on your accounts is a significant line of defense that can lessen your chances of getting hacked. This is because even if a malicious cyber actor cracks your code, they won’t be able to meet the second verification requirement, which immediately blocks their access to your accounts. Other benefits of this double step include:

• Reducing cyber vulnerability
• Removing password and username risks
• Boosting online security
• Improving cyber hygiene 

This layered security approach, combined with a complex password, can protect your online purchases, bank accounts, and identity from potential hackers. The extra step is crucial to minimizing attacks and enhancing your digital experience.

Other security tips to follow

Being vigilant in cybersecurity efforts is essential to thwart online cyber-attacks. It’s up to you to make it harder for hackers to crack your code. Keep your accounts secure by reading a guide to cybersecurity hygiene, or by following these tips:   

• Always use multi-factor authentication as an additional layer of protection.
• Ensure passwords have a minimum of 12 characters. Create a custom acronym.
• Do not use passwords compromised in security breaches.
• If a site provides a temporary password, immediately change it after logging in.
• Never share your passwords.

Cybersecurity works when you do!

When incorporated with complex passwords, multi-factor authentication can be the barrier between hackers and your accounts. An increasing number of services we rely upon are managed online through websites or mobile applications. Creating unique passwords and implementing multi-factor authentication when prompted gives you cyber peace of mind knowing bad actors must work harder to crack your code.

Have you been charged a fee to file a VA disability claim? As the number of fraudulent predatory companies and their boldness increases, the Department of Veterans Affairs (VA) remains vigilant against scams targeting Veterans’ entitlements. Particularly scams where unscrupulous entities may try to charge Veterans fees for accessing their benefits or helping Veterans file initial claims. “Claim Predators” is the term VA uses to describe these aggressive companies or individuals that prey on Veterans and their loved ones and steal their disability entitlements. Predators will promise a 100% disability rating, unrealistic claim processing times, and charge thousands of dollars for services that trusted Veteran Service Organizations (VSOs) provide Veterans for FREE. Remember, only VA has the authority to determine disability ratings.  VA is committed to informing Veterans about these exploitative practices and emphasizing that Veterans and their families should not have to pay anything when they seek help in filing their initial benefit claims.

How To Identify A Claim Predator

Claim Predators target Veterans’ benefits via mail, telephone, or online channels. Here are a few unlawful red flags to watch out for from entities that are not accredited by the VA:

• Charging High Fees: Predatory companies charge absurd fees or require you to pay them a portion of your VA benefits. You should never pay a fee to a file an initial claim for benefits.
• Making Deceitful Promises: No one can promise or guarantee a VA disability rating or an accelerated claims processing time. 
• Require Binding Contracts:  Never sign a contract to pay an unauthorized individual or company a percentage of your benefit payment in exchange for help with your VA claim.

The best way to prevent being preyed on is to educate yourself about these shady tactics and be aware of these red flags. 

How to Protect Yourself Against Claim Predators

VA and accredited representatives provide free assistance to help you obtain the benefits you have earned. Veterans can shield themselves from fraudulent activities by being vigilant and adhering to a set of guidelines:

• Do not pay ANYONE to help you file an initial claim for benefits. 
• Work with an accredited representative, Veteran Service Officer (VSO), or trusted attorney before filing a claim, appeal, or providing personal information. 
• Do not sign a contract agreeing to pay an unauthorized individual or company a percentage of your benefit payment in exchange for their assistance with your VA claim. 
• Verify accreditation by utilizing the Office of General Counsel accreditation tool before filing a claim or providing personal information.  
• Always review all forms and documents. Do not sign a fee agreement with someone or a company who refuses to sign a VA representation from (VA Form 21-22A).
• Understand accredited individuals may charge a reasonable fee for service regarding a denied claim; generally, no one should charge you a fee greater than 33%.
• Know you never have to make fee payments yourself.  You can rely on VA’s direct payment process, where VA will directly pay your representative for securing your past-due benefits. If someone is unwilling to be paid that way, you should question why. 
• Protect your personally identifiable information and never provide any systems login credentials, such as user IDs or passwords to VA.gov and eBenefits, to anyone to access your personal information.
• Be aware of companies which advertise they have special relationships with medical professionals and can guarantee your VA benefits award percentage.  

How To Report Fraud

If you miss a VA benefits payment, identify a discrepancy in payments, or find suspicious activity with your direct deposit account, contact the VA immediately at 1-800-827-1000.  If a Veteran or loved one has been the victim of fraudulent activity, they should immediately file a complaint with the Federal Trade Commission (FTC).

• If you believe the attorney or claims agent that represented you did not earn the fee in your fee agreement or the fee was too high or unreasonable or both, you should immediately file a motion challenging the reasonableness of the fee.
• If you believe an accredited representative has acted in an illegal or unethical manner in assisting you in filing a VA benefit claim, you should immediatelyfile a complaint regarding their conduct.
• Verify accreditation credentials to avoid unnecessary fees, dishonest promises, and keep your benefits safe! VA Office of General Counsel – Accreditation Search.
• VA has safeguards in place for Veterans’ benefits. Find out more information at the VSAFE website.

VA is dedicated to protecting Veterans from predatory practices. This commitment involves equipping Veterans with the necessary resources to recognize such practices, connecting them with accredited representatives to assist with their benefits claims, and providing support to both contest excessive fees and report unaccredited representatives. Remain vigilant and educate yourself about the proactive steps you can take to protect both yourself and your VA entitlements.

Have you received an email, text, or seen a social media post that says something like “Now Hiring” “Get your VA Benefits” or “How to Apply for VA Disability,” but after clicking, brings you to a non-.gov website?

It might look official—and even include the VA seal or logo—but unless the image or post links to a .gov official website (like VA.gov or USAJobs.gov) or official social media channels, it’s not from VA. You want to be cautious about clicking on such posts and ads that appear to come from VA, and you want to be extra cautious about sharing any personal information.

Scammers often put out this type of post or send such emails looking to hijack your highly coveted personal information. They target Veterans particularly to try to steal your benefits as well as health care and other personally identifiable information.

Companies or groups misrepresenting themselves as VA are also frequent culprits. They misuse the VA logo and seal to catch your attention and take advantage of your trust, often collecting your personal information to get sales leads or build their mailing lists and followers.

Take these precautions

Whether it’s a scammer or a company trying to get your personal information, it’s best to ignore these kinds of posts. Even for legitimate companies offering to help you “Apply for VA Benefits Online,” be on guard against sharing your personal information or paying a fee for these services. Applying for VA health or benefits is free, and you can do this directly at VA.gov. If you choose to work with a Veterans Service Organization (VSO), verify their official accreditation first by using the VA Office of General Counsel accreditation tool before filing any claim or providing personal information.  

One more note of caution: Misleading ads are not just misrepresenting VA. They’re also out there misrepresenting other agencies such as the U.S. Postal Service and Transportation Security Administration, and Social Security Administration. It’s important to make it a habit to always verify you’re interacting with a .gov website, whether filing a VA claim or checking the USPS tracking status of that product you just bought from eBay.

Stay on guard!

More consumer advice

• Beware of job scams targeting Veterans – VA News
• Scammers impersonate well-known companies, recruit for fake jobs on LinkedIn and other job platforms – FTC

Watch VA’s free, recorded “Protecting the Promise to Address Comprehensive Toxics (PACT) Act Benefits from Identity Theft Scammers” webinar to learn valuable tips to protect your VA benefits and financial well-being.

Veterans are prime targets of scams and identify theft, so VA’s Privacy Service hosted the webinar to help you understand how to safeguard your Veterans benefits and other finances from scammers. If you missed the webinar live in February, you can watch it now for free. No login required.

Three primary take-aways from the webinar include:

• Apply as soon as you can for PACT Act benefits by filling out the online application or calling 1-800-MYVA411.
• Watch out for illegitimate businesses offering PACT Act claim filing services in exchange for excessive fees or a percentage of the Veteran’s benefit.
• Learn how to have good financial hygiene. A first step is to visit Annual Credit Report.com to get your free credit reports. 

Veterans can also visit VA Privacy Service’s website for additional information about protecting the privacy of you and your families.  

For any questions regarding the event, please contact VAPrivacyCommunications@va.gov.