I don't think I've ever gotten an e-mail from the SSA before.

[canetoad]

8. OK everyone

I appended https to the domain "socialsecurity.gov/reviewyourstatement" and went to the webpage.

The address resolves to:

https://secure.ssa.gov/RIL/SiView.action?utm_source=GovDelivery&utm_medium=email&utm_campaign=reviewyourstatement

Now, this address PROBABLY is Social Security. Obviously not being in the US, I can't log in or test it further but apart from the amateur-ish discrepency between the link and the actual address (what's the point of telling folk to be careful about URLs?) this may be legit.

On edit: The stupid fekkers allowed me to submit feedback. This is what I sent. Had to mark one star, required field.

No stars. What idiot decided it was good practice to send a link by email that differed from the real URL. Amateur work, boys.