I've gotten several like that.
Some of them ARE REAL and came from an SSA.gov account in the email header, not the "from" address which can be spoofed. And arrived in the email box I use with official accounts like that.
At least one came from a gibberish account and was phishing for info. And some showed up in emails that I've never used with SSA.
You can always go to SSA.gov and log into, or create, your own account and check it there.