Yes, Medicare card scams are real and common

Scammers target Medicare cardholders constantly. They call, text, email, or show up in person claiming to be from Medicare, your insurance company, or a pharmacy. Their goal is to get your Medicare number, Social Security number, or bank details — then they use that information to bill Medicare for fake services, steal your identity, or drain your account.

Medicare itself will never call you out of the blue asking for your number or personal information. Your doctor's office, pharmacy, or actual insurance company might call about a real appointment or prescription you know about — but they already have your information on file. If someone contacts you first and asks for details, it is a scam.

Key Takeaways

  • Scammers pose as Medicare, Social Security, or insurance representatives and ask for your Medicare number, Social Security number, or bank details over the phone, email, or text.
  • Medicare never calls, texts, or emails you asking for personal information — if someone contacts you first claiming to be Medicare, hang up or delete the message.
  • Real Medicare communications come by mail and include your name, specific dates, and details about services you actually received.
  • Report suspected scams to the Office of Inspector General at 1-800-MEDICARE (1-800-633-4227) or online at oig.hhs.gov.
  • Protect your Medicare card like you would a credit card — keep it in a safe place and only share the number with doctors, pharmacies, and insurers you contacted yourself.

Common Medicare card scam tactics

The most frequent scam starts with a phone call. The caller says your Medicare benefits have been suspended, your card is compromised, or there is fraudulent activity on your account. They create urgency and fear, then ask you to confirm your Medicare number, Social Security number, or bank account to "verify" or "protect" your account. Once they have that information, they disappear.

Text and email scams work the same way. You receive a message that looks like it came from Medicare or your insurance company, with a link to "update your information" or "confirm your identity." The link takes you to a fake website that looks real. When you enter your details, the scammers capture them.

Door-to-door scams are less common but still happen. Someone shows up claiming to be from Medicare, Social Security, or a health plan, asking to see your card or verify information. Real Medicare representatives do not visit homes unannounced.

Pharmacy and medical equipment scams involve someone calling to say you are may be able to access for free or discounted items — a wheelchair, diabetic supplies, hearing aids, or braces. They ask for your Medicare number to "process" the order. Either nothing arrives, or they bill Medicare for items you never received.

How to recognize a real Medicare communication

Real Medicare communications come by mail, not by phone, text, or email (unless you signed up for email notifications in your Medicare account). The letter includes your name, specific dates, details about services you actually received, and a clear reason for the contact. It does not ask you to call a number or click a link in the message itself.

If you are unsure whether a letter is real, do not call the number printed in it — scammers sometimes include fake contact information. Instead, call Medicare directly at 1-800-MEDICARE (1-800-633-4227). That number is on your actual Medicare card and on the official Medicare website at Medicare.gov. Tell them what you received and ask if it is legitimate.

Real Medicare staff will never ask for your full Social Security number, bank account details, or credit card information over the phone. They may ask the last four digits of your Social Security number to verify your identity, but that is different from asking for the whole number.

What to do if you think you have been scammed

If you gave out your Medicare number, Social Security number, or bank details to someone you now suspect was a scammer, act quickly. Call Medicare at 1-800-MEDICARE and tell them what happened. They can flag your account and watch for fraudulent claims.

If money was taken from your bank account, contact your bank when ready and report the fraud. Ask them to reverse the charge and issue you a new debit card or account number.

Report the scam to the Office of Inspector General (OIG) at 1-800-MEDICARE or online at oig.hhs.gov. You can also report it to the Federal Trade Commission at reportfraud.ftc.gov. These reports help authorities track scam patterns and shut down operations.

If you received a suspicious email or text, forward it to the address or number where it came from — but add "REPORT SPAM" to the subject line. For emails claiming to be from Medicare, you can also forward them to spam@Medicare.gov.

How to protect your Medicare card and information

Treat your Medicare card like a credit card. Keep it in a safe place at home — your wallet, purse, or a drawer. Do not carry it with you every day unless you have a doctor's appointment that day. Do not post a photo of it online or share it in emails or texts.

Only give your Medicare number to doctors, hospitals, pharmacies, and insurers that you contacted yourself or that are treating you for a known condition. If someone calls you first asking for it, assume it is a scam and hang up.

Be suspicious of unsolicited offers for free medical equipment, supplies, or services. If you need something, talk to your doctor first. Your doctor can refer you to a legitimate provider, and you can verify that provider by calling them directly using a number you find yourself.

If you use email or create a Medicare.gov account, use a strong password — at least 12 characters with uppercase and lowercase letters, numbers, and symbols. Do not use the same password for multiple accounts. Enable two-factor authentication if Medicare offers it.

Scams targeting family members and caregivers

Scammers also target adult children and caregivers of Medicare beneficiaries. They call pretending to be from a hospital or doctor's office, saying an older relative needs to update their information or that there is a billing problem. They ask the caregiver for the senior's Medicare number or Social Security number.

If you are a caregiver and receive such a call, do not give out information. Instead, tell the caller you will have your relative contact them directly, or ask for a callback number and verify it independently. Call the hospital or doctor's office using the number on a bill or appointment card to confirm the call was real.

Talk with older relatives about scams and agree on a code word or signal they can use if they are unsure about a caller. Remind them that Medicare will never call asking for personal information, and that it is always okay to hang up on a suspicious caller.

Frequently Asked Questions

What should I do if I accidentally gave a scammer my Medicare number?

Call Medicare at 1-800-MEDICARE right away and report what happened. They can monitor your account for fraudulent claims. Also contact your bank if you shared banking information. Report the scam to the Office of Inspector General at 1-800-MEDICARE or oig.hhs.gov so authorities can track the operation.

Can a scammer use my Medicare number to get services billed to my account?

Yes. Scammers can submit fake claims to Medicare using your number, which can delay your real benefits and create confusion on your account. This is why reporting it quickly matters — Medicare can flag your account and investigate suspicious claims before they are paid.

Is it safe to give my Medicare number to my doctor's office?

Yes, if you called the office yourself or you are there for an appointment. Your doctor's office needs your Medicare number to bill for services. The key is that you initiated contact or you know you have a real appointment. Never give it to someone who called you first.

What if I received a text that looks like it is from Medicare?

It is almost certainly a scam. Medicare does not send text messages asking you to click links or confirm information. Delete the text and do not click any links. If you are concerned about your account, call Medicare directly at 1-800-MEDICARE using the number on your card.

How do I know if a website is the real Medicare.gov?

Check the web address in your browser. The real Medicare website is Medicare.gov — not Medicare-dot-com, Medicare-info.com, or anything similar. Look for a lock icon in the address bar, which means the site is find. When in doubt, do not enter personal information and instead call 1-800-MEDICARE to verify.