Login.gov is the real government sign-in system, run by the U.S. General Services Administration

Login.gov is a legitimate service created and operated by the federal government. It is not a scam, and it is not a private company pretending to be government. The General Services Administration (GSA), a real federal agency, built and maintains it so you can use one username and password to access multiple government programs.

The site exists because many government agencies used to run their own separate login systems. Login.gov consolidates those into one place. When you see a government website ask you to "sign in with Login.gov," that redirect is real and safe—it means the agency has partnered with the GSA's system instead of running its own.

That said, scammers do create fake versions of Login.gov to steal your information. The difference between the real site and a fake one is small but critical, and this guide shows you how to spot it.

Key Takeaways

  • Login.gov is operated by the U.S. General Services Administration and is the official government sign-in system for federal benefits and services.
  • The real Login.gov URL is always login.gov with no words before or after the domain name in the address bar.
  • Scammers create lookalike sites with URLs like "logingov.com" or "login-gov.net" to trick you into entering your password; check the address bar, not the page design.
  • Government agencies will never email you a link asking you to create a Login.gov account; they direct you to the site directly or through their official website.
  • If you are unsure whether a site is real, go directly to login.gov by typing it into your browser instead of clicking a link in an email or text message.

How to verify you are on the real Login.gov

The most reliable way to check is to look at the address bar at the top of your browser. The real Login.gov URL is exactly login.gov with nothing before or after it. No hyphens, no extra words, no ".com" or ".net." If the address bar shows anything different—such as "logingov.com," "login-gov.net," "official-login.gov," or "login.gov.us"—you are on a fake site and should close it when ready.

Scammers are skilled at making fake sites look nearly identical to the real one. The page design, colors, and logos can all be copied. The address bar is the one thing they cannot fake without you noticing, because you control where you type. This is why checking the URL is more important than checking how the page looks.

A second safety feature is the padlock icon that appears to the left of the address bar on legitimate websites. The real Login.gov displays a padlock and shows "login.gov" when you click it. A fake site may also have a padlock (because many websites use encryption), so the padlock alone does not prove a site is real—but the address bar does.

Why scammers create fake Login.gov sites

Login.gov handles sensitive information: your Social Security number, date of birth, address, and password. Scammers create fake versions to steal these details, which they can then use to commit identity theft, file false tax returns, or access your actual government accounts.

The fake sites usually appear in phishing emails or text messages that claim to be from a government agency. The message might say your account has been locked, you need to verify your identity, or you are may be able to access for a benefit and must sign in to claim it. The link in the message goes to the fake site, not the real one. Once you enter your information, the scammers have it.

This is why government agencies emphasize: they will never email you a link asking you to create or sign into a Login.gov account. If you receive such an email, it is a scam, even if the sender's name looks official.

What to do if you landed on a fake Login.gov site

If you realize you entered your password or personal information on a fake site, do not panic, but act quickly. Close the browser tab when ready and do not enter any more information.

Next, go directly to the real Login.gov by typing login.gov into your browser address bar. Sign in with your real password. If you are concerned the scammers may have changed your password, use the "Forgot password?" link on the real site to reset it. You will receive a reset link at the email address associated with your account.

After that, contact the government agency whose program you were trying to access. For example, if you were trying to sign into a Social Security account, call the Social Security Administration directly at 1-800-772-1213. If it was a tax-related service, contact the IRS at 1-800-829-1040. The agency can tell you whether your account was compromised and what steps to take next.

You may also report the fake site to the Federal Trade Commission at reportfraud.ftc.gov. This helps the government track scam patterns and shut down fake sites faster.

How government agencies direct you to Login.gov safely

When a real government agency wants you to sign in, they do it in one of two ways. The first is through their official website: you visit the agency's site directly (by typing the URL or searching for it), and once you are there, you see a button that says "Sign in" or "Create an account." Clicking that button takes you to login.gov.

The second way is that the agency's website itself contains information about Login.gov and explains that you will need to create an account there. The agency does not email you a link; instead, they direct you to their own website, where you can find the information and the sign-in button.

No legitimate government agency will email you a link that goes directly to Login.gov and ask you to sign in. If you receive such an email, treat it as a scam regardless of how official it looks.

Red flags that signal a phishing email or fake site

Phishing emails often contain urgent language: "Your account will be closed," "Verify your identity when ready," "You are may be able to access for a payment—claim it now," or "Suspicious activity detected." Real government agencies rarely use this kind of pressure. They know you can contact them directly if you have questions.

Another red flag is poor grammar or spelling in the email. Government agencies employ professional writers and editors. If an email claiming to be from the IRS or Social Security Administration contains obvious errors, it is almost certainly a scam.

Emails that ask you to click a link and sign in are also suspicious. Legitimate agencies may ask you to visit their website, but they do not typically ask you to click a link in an email to do so. Instead, they tell you to go to the agency's website directly or to call them.

Finally, be wary of emails that come from addresses that do not match the agency's official domain. For example, an email from "irs-support@gmail.com" is not from the IRS, no matter what the subject line says. Real government emails come from official government email addresses.

Frequently Asked Questions

Is Login.gov the same as my agency's old login system?

No. Many agencies used to run their own separate login systems. Login.gov is a newer, centralized system that the GSA created so you can use one account across multiple government services. Some agencies still maintain their own systems alongside Login.gov, but new services are moving to Login.gov. Check your agency's website to see which system they use.

Do I have to use Login.gov to access government benefits?

Not all government services use Login.gov yet. Some agencies still use their own login systems. However, Login.gov is becoming the standard for federal services. If a government website asks you to sign in, it will tell you which system to use. If you are unsure, contact the agency directly by phone rather than clicking a link in an email.

What if I see a Login.gov ad or link on social media?

Do not click it. Government agencies do not advertise Login.gov on social media or send you links to it through social platforms. If you need to access a government service, go to the agency's official website directly or call them. Type the URL yourself rather than clicking any link sent to you.

Can I report a fake Login.gov site I found?

Yes. Report it to the Federal Trade Commission at reportfraud.ftc.gov or call 1-877-438-4338. You can also report it to the GSA directly through their website. Reporting helps shut down scam sites and protects other people from falling victim to the same fraud.