2026-10-09
OPM now requires proof for every family member added to FEHB this Open Season. Its own guide doesn't say how to send the documents safely.
The Federal Benefits Open Season for Plan Year 2027 runs Nov. 9 through Dec. 14, 2026, and it's the first one to fall under a rule OPM finalized on short notice this summer. Effective July 2, 2026, OPM's own final rule — implementing Section 90101 of the FEHB Protection Act of 2025 (Public Law 119-21) — requires, rather than merely permits, every FEHB and PSHB enrollee to submit documentation proving a family member's eligibility before that family member can be added to coverage, including during Open Season. OPM's own Benefits Administration Letter 26-202, issued July 15, 2026, spells out what that means this year: "employing offices must verify 100 percent of Open Season elections in which a family member is added," up from the 10 percent sample OPM had been running since 2024. The documents behind that verification — marriage certificates, birth certificates, tax returns that list a spouse's or child's Social Security number — are the same kind of paperwork that's been quietly emailed between federal employees and their agency's HR office for years. What's new is that, for the first time, almost everyone adding a family member this Open Season has to produce it.
Why OPM is doing this now
The push traces back to a GAO audit, released Jan. 10, 2023 (GAO-23-105222), which found OPM had no mechanism to catch ineligible family members once they were already enrolled, and estimated the resulting improper payments could be costing the program up to roughly $1 billion a year. GAO's own report describes what that looks like in practice: one documented case of an employee keeping an ineligible family member on FEHB coverage for as long as 14 years, racking up more than $150,000 in claims before anyone caught it. Three years later, OPM told Federal News Network that preliminary data now puts it at roughly 3 percent of the program's estimated 4 million enrolled family members in 2025 — not fraud in every case, but enough that OPM has stopped treating it as a qualifying-life-event-only or spot-check problem.
What you'll actually be asked to send — and where OPM's own guide stops
OPM's own 2027 Open Season Highlights, the guide the agency publishes for the roughly 7.9 million Federal and Postal Service employees, Tribal employees, annuitants, and family members the FEHB and PSHB programs cover, states the new rule plainly and then stops: "anyone that is adding a new family member to their FEHB or PSHB plan during Open Season must submit supporting documentation to allow verification of the family member's eligibility. Visit OPM.gov for more information or speak to your employing office benefits officer." Based on the final rule and reporting on it, the documents that satisfy this are things like a government-issued marriage certificate for a spouse, a birth certificate or Consular Report of Birth Abroad for a biological child, a final adoption decree, or — commonly — a joint federal tax return, whose Form 1040 lists every dependent you claim together with that dependent's Social Security number. What OPM's own guidance doesn't do is name a single, agency-wide secure channel for sending that packet. No FEHB-wide upload portal turned up in any official source for this post. "Speak to your employing office benefits officer" means the actual process is set independently by whichever of the government's many individual HR offices you happen to work for — and for a workforce that's increasingly remote or hybrid, the plain email attachment that's long been the default way to send HR paperwork is the obvious channel most of those offices will keep using.
What encrypting that file before you attach it actually fixes
NearSeal runs entirely in your browser — the marriage certificate, the birth certificate, the tax return never upload anywhere to get encrypted. By default it's sealed on your own device with AES-256-GCM and a passphrase-derived key (PBKDF2-SHA256 at 220 iterations) before it goes into an email to your benefits officer at all. That removes the plaintext copy from the two places you actually control: the file sitting in your Downloads folder or Sent mail, and the attachment as it crosses the wire. For the passphrase to do any good once the file arrives, it has to travel a separate channel from the file itself — a phone call to your HR office's published number, not a reply in the same email thread.
What it honestly can't do
Encryption doesn't do anything about the strength of your employing office's own mail server or HR system once the file lands there — NearSeal has no presence on a system it never touches. And because this is the very first Open Season under a brand-new, unfamiliar mandatory-documentation requirement, with no single published process every agency follows the same way, it's also the kind of moment where a message claiming to be "your benefits officer, requesting your verification documents" is hardest to immediately sort from a legitimate one. If the account on the other end isn't really your agency's HR office, encrypting the file and then sending the passphrase back in the same reply hands over exactly what that person needs — encryption has nothing to say about an authorized, dishonest recipient. The actual defense there is confirming the request through your agency's own published employee directory or help line, not a stronger container around the file.
Two more honest limits
NearSeal's default container keeps the original filename in a plaintext header field, so a file named "spouse-marriage-cert-fehb-verify.pdf" tells anyone who intercepts it exactly what's inside before they've broken anything — rename it to something unremarkable first, or use the opt-in age-encryption.org format, which carries no filename field at all. And there's no passphrase recovery of any kind, which matters more here than usual: if a family member is found ineligible, OPM's own rule gives you only 60 days from the initial decision to request reconsideration, through your employing office or OPM — and that reconsideration is final. A forgotten passphrase in the middle of that 60-day clock costs you the time it takes to re-request a birth or marriage certificate from scratch, with a hard deadline already running.
Where NearSeal fits
OPM's push for 100 percent verification answers a real problem its own watchdog measured in the hundreds of millions of dollars. It doesn't answer how roughly 7.9 million FEHB and PSHB participants are supposed to get marriage certificates, birth certificates, and SSN-bearing tax returns to their employing office without a plaintext copy sitting in a Sent folder along the way. That's the narrow gap NearSeal closes — not the fraud GAO measured, and not a convincing scam using this year's new requirement as cover, but the ordinary plaintext copy of paperwork every honest FEHB enrollee adding a family member this Open Season is now required to produce.