Social security phone scam costing victims millions, FTC says