Report to USAA
Last updated September 18, 2026
The short answer
Report USAA phishing to abuse@usaa.com, and check the Security Zone
USAA builds a check into its own emails. A real one carries a personalized "USAA Security Zone" showing your name and the last four digits of your USAA number. If that is missing or wrong, the email is not from USAA.
What they handle
- Emails, texts and calls impersonating USAA
- Fake USAA websites
- Unauthorized activity on a USAA account
- Imposter scams aimed at military members and families
How to file a report
- 1
Forward it to abuse@usaa.com
Include the phone number and the details of the call or message along with it.
- 2
Or call the fraud line
USAA gives 800-531-8722, which spells 800-531-USAA, for suspicious emails, texts, calls or websites.
- 3
Check the Security Zone
A legitimate USAA email shows your name and the last four digits of your USAA number in a personalized Security Zone. Wrong or missing means fake.
- 4
Never give a code to a caller
USAA states it will never call to ask for your password, PIN or a one-time code. Caller ID can be manipulated to look like USAA, so the number proves nothing.
What you'll need
- The message and the number or address it came from
- The last four digits of your USAA number
- The date and amount of any transaction you dispute
What to expect
abuse@usaa.com is intake for the message. Anything touching your account or money goes to the phone line, which is the faster route when funds have moved.
Frequently asked questions
The caller knew my name and the last of my account. Was it USAA?
Not necessarily. Those details leak from breaches and are used to build trust. USAA never calls asking for a password, PIN or one-time code, so that request is the tell.
Company guide
USAA scams
Knowing which scam you were hit by makes the report better. This is how scams impersonating USAA actually work, what the company will never ask you for, and the warning signs to recognise next time.
Read the guide →