Yes, Medicare card scams are active right now and targeting seniors

Scammers are actively calling, texting, and emailing people with Medicare to steal their Medicare number, Social Security number, bank details, or personal information. These scams happen every day — they do not stop. The scammers pose as Medicare staff, Social Security workers, or health plan representatives and create false urgency to pressure you into giving information over the phone or clicking a link.

Medicare and Social Security will never call you out of the blue asking for your number, password, or bank details. If someone contacts you claiming to be from Medicare or Social Security, hang up or delete the message. If you are unsure whether a call was real, call Medicare directly at 1-800-MEDICARE (1-800-633-4227) using the number on your actual Medicare card — not a number the caller gave you.

Key Takeaways

  • Medicare and Social Security never call, text, or email asking for your Medicare number, Social Security number, password, or bank account information.
  • Scammers often claim you have a problem with your account, a refund waiting, or a new benefit, then pressure you to act when ready.
  • If you receive an unsolicited contact, hang up or delete it, then call Medicare directly at 1-800-MEDICARE using the number on your card to report it.
  • Giving a scammer your Medicare number puts your identity and medical records at risk and can lead to fraudulent charges billed to Medicare.
  • Report suspected scams to the Office of Inspector General at 1-800-HHS-TIPS or online at oig.hhs.gov.

Common Medicare scam tactics and what they sound like

Scammers use several repeated scripts. One common approach is the "refund" call: the caller claims Medicare overpaid you and a refund is waiting, but they need your Medicare number and bank details to process it. Another is the "new benefit" pitch: they say you now may have access to for a new program (often dental, vision, or hearing coverage) and need to verify your information right away. A third is the "account problem" message: they claim suspicious activity was found on your account and you must confirm your details to protect it.

Some scammers text a link claiming it is from Medicare or your health plan, saying you must update your information or your coverage will end. Others call pretending to be from Social Security, saying there is a problem with your number or benefits. The common thread is pressure — they create a sense that something is wrong and you must act now, which makes you less likely to stop and think.

What information scammers are after

Your Medicare number is the primary target because it is linked to your identity, medical history, and billing. With your Medicare number, a scammer can see your doctors' visits, prescriptions, and medical conditions. They can also bill Medicare for services or equipment you never received, which gets charged to your account and can affect your coverage.

Scammers also want your Social Security number, because it opens doors to identity theft, credit fraud, and access to other government benefits in your name. Bank account numbers and routing information let them withdraw money directly. Passwords or PINs give them access to your online Medicare account. Even your date of birth and address, combined with other details, can be sold to other criminals or used to open accounts.

How to recognize a real Medicare contact versus a scam

Medicare will contact you by mail if there is a real issue with your account — not by unsolicited phone call, text, or email. If Medicare needs to reach you urgently, they will send a letter first. You can then call them using the number on your Medicare card or official Medicare materials.

Real Medicare communications will never ask you to provide your Medicare number, Social Security number, or bank details over the phone or by email. They will not ask you to click a link in a text or email to log into your account. They will not threaten to cancel your coverage if you do not act when ready. If a caller says any of these things, it is a scam.

If you are unsure whether a call or message is real, do this: hang up or do not click the link. Wait a few minutes. Then call Medicare directly at 1-800-MEDICARE using the number on your actual Medicare card. Tell them what the caller said, and Medicare can tell you whether it was legitimate. This straightforward step stops almost all scams.

What to do if you think you have been scammed

If you gave a scammer your Medicare number, Social Security number, or bank details, act quickly. Call Medicare at 1-800-MEDICARE and tell them what happened. They can flag your account and watch for fraudulent charges. If you gave your Social Security number, contact the Social Security Administration at 1-800-772-1213. If you gave bank details, call your bank when ready and ask them to watch your account for unauthorized charges.

You can also place a fraud alert with the three major credit bureaus (Equifax, Experian, and TransUnion) by calling one of them — they will notify the others. This makes it harder for someone to open new accounts in your name. You may also want to check your credit report for free at annualcreditreport.com to see if any accounts were opened without your permission.

Report the scam to the Office of Inspector General at 1-800-HHS-TIPS (1-800-447-8477) or online at oig.hhs.gov. You can also report it to the Federal Trade Commission at reportfraud.ftc.gov. These reports help law enforcement track scam patterns and shut down operations.

Steps to protect your Medicare information

Never give your Medicare number, Social Security number, or bank details to anyone who calls you, even if they sound official. Legitimate Medicare staff will never ask for these over the phone. Keep your Medicare card in a safe place at home, not in your wallet where it can be lost or stolen. If your card is lost or stolen, call Medicare at 1-800-MEDICARE to report it and request a replacement.

Be cautious with emails and texts that appear to come from Medicare or your health plan. Do not click links or read attachments from unsolicited messages. If you receive a suspicious message, go directly to Medicare.gov or your health plan's website by typing the address into your browser yourself — do not use a link from the message.

If you have a Medicare Advantage plan or prescription drug plan, be aware that your plan may contact you about coverage changes or enrollment, but they will not ask for your password or bank details unsolicited. If you are unsure, call the number on your plan's materials, not a number provided by the caller.

How to report a scam and help protect others

Reporting scams matters because it helps law enforcement identify patterns and shut down operations. If you received a scam call, text, or email, report it to the Office of Inspector General at 1-800-HHS-TIPS or oig.hhs.gov. Include the phone number or email address used, what the caller said, and when you received it. If it was a text with a link, take a screenshot before deleting it and include that in your report.

You can also report it to the Federal Trade Commission at reportfraud.ftc.gov. The FTC collects reports from across the country and shares patterns with law enforcement. If you received a robocall, you can report it to the Federal Communications Commission at fcc.gov/complaints.

Tell family members and friends about the scams you have heard about. Many seniors are targeted because scammers believe they are less likely to question authority, but awareness stops scams. If an older family member receives a suspicious call, help them report it and check their Medicare account for unauthorized activity.

Frequently Asked Questions

Can a scammer do anything with just my Medicare number?

Yes. With your Medicare number alone, a scammer can see your medical history, doctors' visits, and prescriptions. They can also bill Medicare for services or equipment you never received, which gets charged to your account and can affect your coverage and claims. This is why protecting your Medicare number is as important as protecting your Social Security number.

What should I do if I accidentally clicked a link in a scam text?

Do not panic. Clicking a link does not automatically compromise your account. However, if the link took you to a page that looked like Medicare or your health plan and you entered your username, password, or other information, change your password when ready. Call Medicare at 1-800-MEDICARE and tell them what happened so they can monitor your account. Do not enter any information if you are unsure the page is real.

Will Medicare ever call me first about a problem with my account?

No. Medicare contacts you by mail if there is a real issue. If you receive an unsolicited call claiming to be from Medicare, it is a scam. If you think there might be a real problem with your account, you can call Medicare yourself at 1-800-MEDICARE using the number on your card, but Medicare will not call you first.

How do I know if a charge on my Medicare bill is fraudulent?

Review your Medicare Summary Notice (the statement Medicare sends you) and look for services or equipment you do not recognize. If you see something you did not receive, call Medicare at 1-800-MEDICARE and report it. Medicare can investigate and remove fraudulent charges. Keep records of your actual doctor visits and prescriptions so you can compare them to your bill.

Can I get my money back if a scammer stole from my bank account?

It depends on how quickly you report it. Call your bank when ready if you notice unauthorized charges. Banks can often reverse charges if you report them within a certain timeframe (usually 60 days). Report the fraud to your bank in writing as well as by phone. The sooner you act, the better your chances of recovering the money.