Most Equifax settlement emails you receive are scams, not official notices
The Equifax data breach of 2017 exposed the personal information of roughly 147 million people. A settlement followed, and scammers have been using that settlement to trick people ever since. If you received an email about claiming money from the Equifax settlement, the odds are high it is a phishing email designed to steal your information — not a real notice from Equifax or the settlement administrator.
Real settlement notices come through the mail, not email. Equifax and the settlement administrator, JAMS (Judicial Arbitration and Mediation Services), do not initiate contact by email to tell you about money owed to you. If you got an email claiming you can claim a settlement payout, delete it.
Key Takeaways
- Legitimate Equifax settlement notices arrive by postal mail, never by email, and they come from JAMS or the settlement website equifaxbreachsettlement.com.
- Phishing emails about the settlement typically ask you to click a link, enter personal information, or read an attachment — all red flags.
- The real settlement website is equifaxbreachsettlement.com; scammers create lookalike domains with slight misspellings or different extensions.
- If you were affected by the breach, you can check your status on the official settlement site without clicking any email links.
- Reporting the phishing email to the Federal Trade Commission and your email provider helps shut down the scam faster.
How the real Equifax settlement works
The settlement created two paths for affected people. The first is free credit monitoring for up to ten years. The second is a cash payout for people who can show they suffered identity theft or spent time dealing with the breach — though the payout per person is typically small, usually between $25 and $125, depending on how many people file claims.
To receive either benefit, you do not need to do anything if you only want the free credit monitoring. It was automatically enrolled for most affected people. If you want to claim cash, you had to submit a claim form by a important date that has already passed in most cases. The settlement is no longer accepting new claims.
Because the settlement is closed to new claims, any email offering you a chance to claim money now is definitely a scam. The scammers are counting on you not knowing the important date has passed.
What a phishing email looks like
Scam emails about the Equifax settlement follow a pattern. They usually say something like "You are owed money from the Equifax settlement" or "Claim your settlement payout now." They ask you to click a link, log in with your personal information, or read a form. Some include a sense of urgency: "Claim by [date]" or "Your window is closing."
The email may come from an address that looks official but is not quite right — for example, equifax-settlement@gmail.com or support@equifaxsettlement-claims.com. The sender name might say "Equifax" or "Settlement Administrator," but the actual email address tells the real story.
The link in the email often goes to a fake website that looks similar to the real settlement site but has a slightly different URL. Common tricks include adding a hyphen, changing .com to .net, or misspelling a word. Once you land on the fake site and enter your information, the scammers have what they need to commit identity theft.
How to verify if a settlement notice is real
If you want to know whether you were affected by the breach or what benefits you may have received, go directly to equifaxbreachsettlement.com by typing the address into your browser yourself — do not click any link in an email. The site has a tool where you can enter your name and date of birth to check your status.
You can also call the settlement administrator directly at 1-833-759-2982. This number is listed on the official settlement website. If you call, you can ask whether any settlement notices have been sent to you and what your status is.
Real settlement mail comes from JAMS and includes specific information about your claim, the settlement amount, and how to receive payment. It will not ask you to click a link or enter sensitive information. If you receive physical mail that claims to be from the settlement, you can verify it by calling the number above.
What to do if you received a phishing email
Do not click any links or read any attachments from the email. Do not reply to it. straightforward delete it.
If you want to report it, forward the email to the Federal Trade Commission at spam@uce.gov. Include the full email header if possible — most email programs have an option to view the original message or show headers. You can also report it to your email provider by using the "Report Phishing" or "Report Spam" button in your email account.
If you already clicked the link or entered information, change your passwords for any accounts that use the same email address or password. Monitor your credit reports for signs of identity theft. You can order free credit reports from annualcreditreport.com, which is the official site run by the three major credit bureaus.
Why scammers target Equifax settlement victims
The 2017 breach was massive and public. Scammers know that millions of people are aware they were affected and are expecting some kind of settlement. They also know that people are more likely to trust an email about something they already know happened. This makes the Equifax settlement a perfect vehicle for phishing attacks.
Scammers also count on people not knowing that the settlement important date has passed or that real notices come by mail, not email. By the time someone realizes the email was fake, the scammer already has their personal information.
Protecting yourself from settlement scams in the future
The rule is straightforward: legitimate settlements and government benefits never contact you by email asking you to claim money or enter personal information. Real notices come by mail. If you receive an email about a settlement payout, it is a scam.
When you receive an email claiming to be from a company or government agency, never click the link in the email. Instead, go to the official website by typing the address yourself or calling the phone number listed on a bill or official document. This one habit stops most phishing attacks.
If you are unsure whether something is real, you can always search the company name plus the word "scam" to see if others have reported it. You can also contact the company directly using a phone number you find yourself, not one provided in the email.
Frequently Asked Questions
Can I still claim money from the Equifax settlement?
The important date to file a claim has passed. The settlement is no longer accepting new claims. If you missed the important date, you cannot file a claim now. Any email offering you a chance to claim money is a scam.
What if I already gave my information to a phishing email?
Change your passwords when ready, especially for email and banking accounts. Check your credit reports at annualcreditreport.com for signs of fraud. Consider placing a fraud alert with one of the three credit bureaus (Equifax, Experian, or TransUnion) — one call triggers alerts at all three. You can also freeze your credit for free to prevent new accounts from being opened in your name.
How do I know if I was actually affected by the Equifax breach?
Go to equifaxbreachsettlement.com and use their status tool, or call 1-833-759-2982. You can also check by entering your information on the official site. Do not use any links from emails to do this.
Is the free credit monitoring from Equifax actually useful?
The settlement includes free credit monitoring for up to ten years, which is a real benefit. However, you can also order free credit reports yourself from annualcreditreport.com three times per year. Credit monitoring is most useful if you want alerts when something changes on your credit report, but it is not required to protect yourself.
What should I do if I see this scam email being sent to others?
Report it to the Federal Trade Commission at reportfraud.ftc.gov or forward it to spam@uce.gov. You can also report it to your email provider. The more people who report the same scam, the faster it gets shut down.