GOVERNMENT IMPERSONATION - VERDICT

Does the "Veterans Savings Program" exist? No. And that is the whole answer.

A postcard arrives naming your state and real VA benefits, offering extra monthly money, telling you to call within days. The FTC and the Department of Veterans Affairs each published a warning about it. There is no programme, no application, and nothing being missed.

SB

SafeBrowz Threat Research Security Research · 1 September 2026 · 9 min read

What the postcard says

It tells you that you, or your spouse, may qualify for extra monthly veterans benefits. The VA's own alert describes the mailers as claiming entitlement to extra VA benefits or additional payments covering CHAMPVA, TRICARE and dental coverage, and adds a detail worth noticing: regardless of your VA disability rating. That phrase is doing work, because it pre-answers the objection a veteran would otherwise raise.

Then it applies time. The FTC describes the message as telling you to call right away or risk losing out. The VA puts a number on it, saying the postcards often pressure a response as soon as possible, or within five days.

There is no website to visit and no form to fill in. The whole postcard exists to produce one action: a phone call to the number printed on it.

Why it reads as real

Almost everything on the card is true. That is the design.

• Your state is correct. It was mailed to your address, so it costs nothing to print.
• CHAMPVA and TRICARE For Life are real programmes. Anyone can look them up and find they exist, which makes the fake one beside them feel like a fourth item on the same list.
• It arrives on paper. Most people have been taught to distrust links and unexpected emails. A postcard sits outside that training entirely.
• It asks for a call, not a click. Picking up the phone feels like the careful option compared with clicking something.

The reasoning it defeats is the common one: they knew something true about me, so this must be genuine. Knowing your state, or the name of a benefit you actually hold, is not evidence of anything. It is the same mechanism behind the MyChart Medicare Kit emails, where a real brand name carried an invented reward, and behind Social Security impersonation calls.

What happens on the call

This is the part the VA describes most directly, and it is not what people expect.

There is no threat and no hostility. According to the VA, the scammer will often use flattery and praise regarding your military service to gain trust, and only then work toward personal identifying information: Social Security number, bank account details, or other sensitive information.

That is a deliberate inversion. Most government-impersonation fraud runs on fear, the way the FTC and bank imposter scripts do. This one runs on respect, which is harder to be suspicious of, and which lands on an audience that has genuinely earned it. Being thanked for your service is not a warning sign in ordinary life. Here it is the trust mechanism.

The VA's instruction for the call is short: never give that information over the phone or on the internet.

The check that settles it, and the number to use

1. Do not call the number on the postcard. Both agencies say this in the same words. The number is the payload.
2. Call the VA yourself on 1-800-827-1000, the VA Benefits Hotline named by both the FTC and the VA, dialled from a source you trust rather than the mailer.
3. Ask directly whether any programme applies to you. A real entitlement will still be there tomorrow. The FTC notes that legitimate VA communications will not pressure you to respond immediately or hand over sensitive information by phone.
4. Report it. The FTC takes reports at reportfraud.ftc.gov, and the VA at vsafe.gov or 1-833-38V-SAFE.
5. Tell someone else. The FTC makes this a step of its own, because these mailings go out in batches across whole states rather than to one person.

If you already called and gave details

1. Call the VA on 1-800-827-1000 and say what was shared.
2. Contact your bank about the specific account you named, and ask what monitoring they can put on it.
3. Consider a credit freeze. A Social Security number cannot be reissued the way a card can, so the response is monitoring rather than replacement.
4. Watch your VA direct deposit. The VA asks you to call the same number immediately if you miss a benefits payment or notice a discrepancy on your direct deposit.
5. Expect a second contact. Someone offering to help recover what you lost is the standard follow-up and is usually the same operation, which is covered in what to do after a scam.

Where a link checker helps here, and where it plainly does not

Being straight about this matters more than usual, because this particular scam is mostly outside what any browser tool can reach.

A postcard has no URL in it. A phone call has no URL in it. If those are the two things in front of you, the checks above are the entire defence, and nothing on this page changes that. We cannot read your mail and we cannot listen to a call.

What we can judge is the adjacent step, and it is worth knowing it exists: the VA's own alert warns about a suspicious postcard, email, text or call, and tells veterans not to click links in them. Fake benefit-claim pages and lookalike VA sites are a real part of this wider set, and that is a link. Layer 1 reads the shape of an address locally before the page loads. Layer 2 checks the destination server-side against reputation sources, our blocklist, and a brand database of more than 550 names. Layer 3 is the AI deep scan, a Premium feature with one free scan a day for everyone else, which reads what a page actually serves rather than the seal at the top of it. It is also how a benefits-claim page gets judged on the domain it lives on rather than on the agency it names, in the way the fake Medicare search ads did.

So the honest split: the postcard and the call are settled by dialling 1-800-827-1000 yourself. Anything with a link in it is the part we can check.