Kroll Settlement Administration: Why You Got That Letter — and How to Verify It
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
If an email or letter from “Kroll Settlement Administration LLC” landed in your mailbox, the company itself is legitimate: courts appoint Kroll to run some of the biggest class-action settlements in the country, including the $177M AT&T and $350M T-Mobile data breach cases. But the most common Kroll envelope is a different animal entirely — one stamped “Return to Kroll, P.O. Box 980108, West Sacramento, CA 95798”, which is a data-breach notice offering free identity monitoring, not a settlement payment. Scammers also impersonate Kroll, so the right move is to verify the specific notice, not just the name.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What Is Kroll Settlement Administration?
Kroll Settlement Administration LLC is the class-action administration arm of Kroll LLC, the global risk and financial advisory firm formerly known as Duff & Phelps. When a class action settles, the court appoints a neutral administrator to notify class members, run the official settlement website and call center, verify claims, and send payments — Kroll is one of the largest firms doing exactly that. By its own count it has administered 4,000+ settlements and distributed over $30 billion (Kroll's marketing figures, not independently audited). Getting mail from Kroll usually means one thing: a company that had your data — or your money — is part of a settlement, and you're in the class.
Case Details
Kroll LLC corporate HQ: One World Trade Center, 285 Fulton Street, 31st Floor, New York, NY 10007, +1 (212) 593-1000. Two different return addresses matter. Settlement mail uses case-specific New York P.O. Boxes — each settlement has its own box and its own toll-free number printed on the notice (e.g., AT&T: (833) 890-4930; T-Mobile: (833) 512-2314). Data-breach notification mail is different: on the notices we have verified it carries “Return to Kroll, P.O. Box 980108, West Sacramento, CA 95798” — for example the Educational Employees Credit Union notice dated May 29, 2026 and filed with the California Attorney General. There is no single universal Kroll consumer hotline — always use the number on the official case website.
Why Did I Get a Letter or Email From Kroll?
How to Tell a Real Kroll Notice From a Scam
Five checks: (1) The notice cites a real case name and number you can look up (court website, news coverage). (2) The settlement website it names is also cited by independent news outlets and by Kroll's own case list at kroll.com/en/settlement-administration-cases. (3) Filing is free — any "processing fee" means scam. (4) Sender domains match kroll.com, krollsettlementadministration.com, or the case's official domain — beware misspelled lookalikes. (5) When in doubt, don't click anything: type the settlement website into your browser yourself, or call the number listed on that site — not the one in the message.
How Kroll Actually Pays You
Which firm actually mailed your letter?
Kroll is one of about a dozen court-appointed administrators. The envelope tells you which one, and each works differently. If the return address is not Kroll, find it here.
Epiq Class Action
One of the largest administrators
JND Legal Administration
Seattle-based, high-profile cases
Verita (formerly KCC)
Renamed in 2024 — same firm
Rust Consulting
Minneapolis, long-running cases
Simpluris
California, wage-and-hour cases
Angeion Group
Philadelphia, privacy and consumer
Atticus Administration
Minnesota, mid-size funds
A.B. Data
Milwaukee, securities and antitrust
RG/2 Claims
Philadelphia, smaller class funds
Analytics Consulting
Minnesota, notice and claims
CPT Group
California, employment cases
IDX breach letter
Not an administrator — a breach notice
CyberScout breach letter
Also a notice, not a settlement
Major Settlements Kroll Is Handling Right Now
- 1
AT&T Data Breach — $177 million
Two 2024-disclosed breaches, ~4.38 million claims filed. Official site: telecomdatasettlement.com, hotline (833) 890-4930. Final court approval still pending as of August 2026 — no payout date yet.
- 2
T-Mobile Data Breach — $350 million
The 2021 breach affecting ~76 million people. First full payment round completed around May 30, 2025; a residual second distribution follows. Official site: t-mobilesettlement.com, hotline (833) 512-2314.
- 3
Comcast Xfinity Data Breach — $117.5 million
Flat $50 payments or up to $10,000 in documented losses for the 2023 Xfinity breach. Claims window open into 2026 — check comcastbreachsettlement.com for the current deadline.
- 4
Plus thousands of smaller cases
From privacy suits to consumer-product settlements. Kroll publishes its active case list at kroll.com/en/settlement-administration-cases — the fastest way to confirm your notice matches a real Kroll case.
- 5
One documented stumble: East Palestine (2025)
In June 2025, a federal judge replaced Kroll as administrator of the Norfolk Southern derailment settlement over payout-calculation errors; a related payment dispute was reported settled in December 2025. Worth knowing — it's about administration quality, not fraud.
Scam Alert: Kroll Impersonation
Precisely because Kroll's name appears on so many legitimate payouts, fraudsters borrow it. The three patterns fact-checkers keep finding:
Unsolicited texts about settlements you never heard of
Snopes has fact-checked fake "Kroll Settlement Administration" text messages impersonating the real T-Mobile case. Real notices tie to a breach or lawsuit you can verify independently — random "you're owed money, click here" texts are phishing.
Fees, gift cards, or crypto to "release" your payment
No court-appointed administrator ever charges class members. A request to pay anything — or to "confirm" your SSN or bank login through a link — is a scam, full stop. Report it at ReportFraud.ftc.gov.
Lookalike domains and fake checks
Typosquatted versions of real settlement sites and counterfeit settlement checks both circulate. Type the official domain yourself (never from the message), and verify an unexpected check by calling the case hotline before cashing it.
Kroll Settlement Administration FAQ
Is Kroll Settlement Administration legit?
Yes. It's the court-appointed settlement administration business of Kroll LLC (formerly Duff & Phelps), running major cases like the $177M AT&T and $350M T-Mobile breach settlements. The company is real — but impersonation scams using its name are also real, so verify each notice.
Why is Kroll emailing me about a settlement I never signed up for?
Class-action notice works from the defendant's records, not from sign-ups. If your data was in the breached system, the court requires the administrator to find and notify you — that's the letter or email you received.
Is Kroll Monitoring the same thing?
No — common mix-up. Kroll Monitoring (krollmonitoring.com) is the free credit/identity monitoring a breached company offers right after an incident. Kroll Settlement Administration runs the later lawsuit settlement. A monitoring offer doesn't mean a settlement exists yet — and vice versa.
How does Kroll pay out settlements?
Mailed checks, direct deposit, PayPal, Venmo, Zelle, or virtual prepaid cards, depending on the settlement's terms. Checks come with expiration reminders; failed digital payments typically fall back to a mailed check.
Is there one phone number for Kroll Settlement Administration?
No — every settlement has its own toll-free line printed on its notice and official website (AT&T: (833) 890-4930; T-Mobile: (833) 512-2314). Use the number from the case website you verified independently, never one from an unsolicited message.
How do I check my claim status with Kroll?
Go directly to the case's official settlement website — for example telecomdatasettlement.com for AT&T — and log in with the Claim ID or Class Member ID from your notice. Kroll's full active-case list is at kroll.com/en/settlement-administration-cases.
I got a Kroll check I wasn't expecting — should I cash it?
Verify first: match the case name on the check to a real settlement (news coverage, Kroll's case list), then call that case's official hotline to confirm the payment. Counterfeit settlement checks exist, and cashing one can expose your account.
What does “Return to Kroll, P.O. Box 980108, West Sacramento, CA” on my envelope mean?
It means Kroll mailed the letter on behalf of a company whose data was breached — the address is real and appears on notices filed with state attorneys general, such as the Educational Employees Credit Union notice of May 29, 2026. It is not a settlement check and there is nothing to claim. Inside is a breach notice on the affected company’s letterhead plus an offer of free identity monitoring you activate at enroll.krollmonitoring.com with the membership number printed in the letter — usually with a deadline to activate. The reason those same three words show up on envelopes from companies with no connection to each other is that they are part of Kroll’s mail template: DentaQuest’s notice letter, as published by ClassAction.org, still carries the unfilled placeholders “<<Return to Kroll>>”, “<<Return Address>>” and “<<City, State ZIP>>” at the top. Enrolling never costs money, and no legitimate notice asks you to pay a fee or confirm a bank login.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
AT&T Data Breach Settlement
$177M settlement administered by Kroll — status and payout dates
Comcast Xfinity Data Breach Settlement
Xfinity breach settlement: payout status and what class members get
700Credit Data Breach Settlement
$17.5M auto-dealer vendor breach — claims closed Sept 22, 2026; hearing Oct 7
Data Breach Settlement Hub
200+ active and settled data breach cases tracked
Settlement Administrator Directory
Kroll, Epiq, JND, Rust, Verita and 9 more — which firm mailed your letter and how to verify it