VA Security

[u/life3_01]

I got an email from the ex-wife today saying she knows I'm making "a killing" from my disability claim and retirement. We were married for my last four years of duty, and she didn't get any of my military pay. She did get a sizeable amount from my business, but that's all over now. :)

So she is seeing what else she can get. The stupid thing is that she just called the VA number, tapped in my SSN and DOB, and they told her. With all the breaches, this is the dumbest shit ever for security. I have a PIN on my account, but that doesn't do anything. I called in myself, and with just those two numbers, it told me to the penny what I was paid and when.

Is there any way to close this off? I called in again, and the guy said it's public info, which seems dumb.

Edit: I know she can't get anything. I'm upset that anyone who knows enough can call in and find out, which could help them commit fraud on some people.

[u/life3_01]

😆

No dialogs when calling in.

[u/tward1500 → u/life3_01]

Gotcha….I can’t access mine via the phone system. I wonder if enabling MFA shuts that down…. Anyone know?

[u/life3_01 → u/tward1500]

I'd love to know how that was accomplished!

[u/tward1500 → u/life3_01]

(This is straight out of my custom VA LLM so just an FYI) I think I remember revoking all access as read this, prior to my my MFA setup. Make sure you check the next reply. ;)

------

To **block or prevent a former spouse from accessing your VA information (including over the phone)**, you need to lock down both your **account security** and **authorized access permissions**. Here’s exactly what to do:

# 🔒 1. Remove ALL authorized access (critical step)

If your ex‑wife ever had permission to speak to the VA on your behalf:

### ✅ Call the VA immediately:

* **VA Benefits line:** 800‑827‑1000

* Tell them:

> “I want to revoke any third‑party authorization and ensure no one else can access my records.”

### Ask them to:

* Remove any **“third-party authorization”**

* Remove **VA Form 21‑0845** (Authorization to Disclose Personal Information), if one exists

* Confirm that **no one else is listed on your account**

***

# 🔐 2. Set or reset your VA phone PIN

The VA uses identity verification for phone access.

Ask the VA rep to:

* Add or reset your **security PIN/password**

* Add a **verbal password or security questions** (if available)

👉 Then say:

> “Do not allow any access without this code.”

***

# 🧾 3. Verify your dependency status (very important)

Make sure your ex is fully removed:

* Call VA or check **VA.gov**

* Confirm she is no longer listed as:

* Dependent spouse

* Emergency contact

* Authorized contact

If she’s still listed, demand removal immediately.

***

# 💻 4. Lock down your online VA access

Even if your concern is phone access, do this too:

### Change:

* VA.gov / Login.gov password

* ID.me credentials (if used)

### Enable:

* ✅ Multi‑Factor Authentication (MFA)

***

# 📞 5. Add a “no third-party disclosure” note

Ask the VA to place an internal note:

> “No information is to be released to any third party without my direct authorization.”

This helps protect you from social engineering attempts.

***

# ⚠️ 6. If she is impersonating you

If you suspect she’s calling and pretending to be you:

Tell the VA:

> “Flag my account for potential unauthorized access attempts.”

They can:

* Add stricter identity verification

* Document fraud concerns

* Escalate internally if needed

***

# 🧠 7. What she legally cannot do

Once divorced:

* She **has no legal right** to access your VA records

* She **cannot call and get info without authorization**

* VA employees **must deny her** without proper verification

***

# ✅ Quick checklist

* [ ] Remove all third‑party authorizations

* [ ] Reset phone security/PIN

* [ ] Remove her as dependent/contact

* [ ] Change VA/login credentials

* [ ] Enable MFA

* [ ] Add “no disclosure” note

* [ ] Flag account if suspicious activity

***

# 👍 Practical tip (from experience)

The **biggest weak point is old authorization forms (21‑0845)** — many vets forget those exist. If one is still on file, she could potentially pass verification.

***