what other steps can I take to make sure no one uses you guys to try to scam me?
If an email includes a business name , telephone number , or website link , verify the legitimacy of these items by searching for the official number or website in a search engine .Do not respond to emails requesting personal information .Reputable businesses and public agencies will not ask you for personal information in an email .
what are some places I should look out for?
here are two that we know of; https://www.socialsecurity.gov.gmx.de/ and http://www.socialsecurity.gov.bx.co.rx/setup