MyGovID impersonation phishing
Email or SMS that looks like it's from MyGovID, asking you to "verify your account", "confirm your details", "reactivate your account" or "prevent suspension" by clicking a link. The official MyGovID never sends links like this. Garda-documented; recurring throughout 2025–2026.
What the scam looks like
A message arrives claiming to be from MyGovID or the Department of Social Protection. It typically says:
- Your MyGovID account has been "locked due to suspicious activity" and needs verification.
- Your account will be "suspended in 24 hours" unless you confirm your details.
- A change has been made to your account (login from a new device, password change, profile update) that you need to "approve" or "decline".
- You are due a "social welfare adjustment", refund or supplementary payment and need to verify your bank details to receive it.
The link goes to a page that may look very like the real MyGovID login page, but on a domain that isn't mygovid.ie. The fake page asks for your MyGovID email, password and (if convincing enough to fool you to that point) your 2FA code, PPS number and bank account details.
How to recognise it — the categorical rule
MyGovID does not, will not, and never has sent emails or texts with a direct link to the login page asking you to "verify" or "reactivate" your account. This is on the record from An Garda Síochána and from MyGovID's own help pages. If you receive such a message it is, by the rule, a phishing attempt — regardless of how convincing it looks.
Additional give-aways:
- Sender address is not
@welfare.ie,@gov.ieor any other clearly state-owned domain. - The link domain is not
mygovid.ieormywelfare.ie. Hover before clicking. - The message creates time pressure (24 hours, 48 hours, "immediate action required").
- It mentions a specific payment or refund that you weren't expecting.
Why this scam works when it works
The PSC and MyGovID are required for so many state interactions that the threat "your account will be suspended" feels disproportionately serious. Combined with timing (around tax-balancing season, before a welfare payment date, around grant deadlines) and the official-looking presentation, the design exploits the legitimate anxiety of relying on a single login for many essential services.
What to do if you received it but haven't responded
- Don't click the link. Don't reply.
- Forward the SMS to 7726.
- Forward the email to reportphishing@garda.ie.
- If you want reassurance that your account is fine: type
mygovid.ieby hand and log in normally. No alerts there = no problem.
What to do if you clicked and entered details
Change your MyGovID password immediately
From a clean device. See forgot password for the safe procedure.
If you entered a 2FA code, log in and check session activity
If anything looks unfamiliar, change the password again and contact MyGovID support via the official Help and Support.
If you entered bank account or card details, contact your bank's fraud line
Freeze the card; watch for unauthorised transactions in the next 48 hours.
Work the first-24-hours checklist
First 24 hours covers the wider lockdown sequence — email, mobile carrier, every account that shares a password.
Report to An Garda Síochána
Local station for a PULSE number. The reference matters for any later claim.
Primary sources
- MyGovID — Help and Support (official channel).
- An Garda Síochána — phishing guidance.
- gov.ie — protect yourself against scams and attempted fraud.