TreasuryDirect Goes ID.me-Only on October 28

By Muhammad Imran · Reviewed for accuracy against TreasuryDirect's official FAQ · Last updated October 2026.

TreasuryDirect is where Americans hold savings bonds and other Treasury securities online. Login changes are a normal part of running a government website. It is also exactly the kind of confusing change that scammers copy. Many people get the same email in the same week, and nobody is quite sure what is real. This short guide gives you the facts from TreasuryDirect's own FAQ, and one safe habit that protects you through the switch.

What changes on October 28

• Your traditional TreasuryDirect login works until October 28, 2026.
• After that date, ID.me is the only way to sign in online.
• Setting up ID.me usually takes about five to ten minutes.
• You need your Social Security number and a government photo ID, such as a driver's license, state ID, or passport.
• A selfie with a smartphone camera is the fastest way to verify.
• You can also verify through a live video call with an ID.me Trusted Referee, on any computer with an internet connection.
• Your Login.gov account does not work here. Login.gov is not affiliated with ID.me, and it cannot be used to log in to TreasuryDirect.

What does NOT change

• Your money stays safe. TreasuryDirect says your funds and investments will not be permanently frozen or seized after the deadline.
• You can restore online access at any time after October 28 by completing the ID.me setup and linking it to your account.
• Reinvestments you already set up will continue.
• You can still manage your account by submitting paper forms.
• If you need a tax form and cannot sign in, you can request a copy by mail after forms are available in January by calling TreasuryDirect at 844-284-2676.

The scam angle: fake emails about the switch

This guide is not about one scam email making the rounds. It is about the switch itself, and the safe habit that protects you through it. A confusing change is easy to copy. A fake email can use the TreasuryDirect name, the October 28 date, and urgent language, and still be fake. TreasuryDirect's own FAQ asks the question for you: "How do I know it wasn't a phishing scam?" Its answer is the safe habit in this guide.

The legitimate notification email comes from [email protected]. Even so, do not sign in from a link inside any email. Check the sender, then type TreasuryDirect.gov into your browser yourself. That one habit defeats almost every copycat email, because the fake link is the trap.

What to do now

1. Set up ID.me if you use TreasuryDirect. Do it before October 28 if you can. If you miss the date, set it up any time after. Your access is restored when you finish.
2. If an email about the switch arrives, do not click its links. Check that the sender is [email protected], then type TreasuryDirect.gov yourself.
3. If you already clicked a suspicious link, do not enter anything else. Go to TreasuryDirect.gov yourself by typing the address, sign in there, and check your account. If you shared login details, change them from the real site right away.
4. Check the email and report it. Paste the suspicious email into our free Scam Checker for a plain-English verdict. Report it to the FTC at ReportFraud.ftc.gov.

Sources: TreasuryDirect, FAQs about ID.me (treasurydirect.gov). Last updated October 2026.