A scammer with your Medicare number can open accounts in your name, file false claims, and drain your benefits

Your Medicare number is tied to your Social Security number and contains enough personal information for someone to commit identity theft. A scammer can use it to bill Medicare for services you never received, open credit accounts in your name, or file tax returns to steal your refund. Because Medicare fraud happens in your name, you may not notice it for months — by then the damage spreads across your credit report, your bank account, and your Medicare record itself.

The risk is real but the steps to protect yourself are concrete. You need to know what signs to watch for, how to report it if it happens, and what to do right now to reduce your exposure.

Key Takeaways

  • A scammer can use your Medicare number to bill Medicare for fake medical services, prescription drugs, or equipment you never received.
  • Medicare fraud in your name can damage your credit score, trigger debt collection calls, and create false medical records that affect your actual care.
  • You should check your Medicare Summary Notice or online account every three months to spot unauthorized claims before they compound.
  • Report suspected fraud to Medicare at 1-800-MEDICARE and to the Office of Inspector General, and place a fraud alert with the three credit bureaus when ready.
  • Scammers often get your Medicare number from phishing emails, fake Medicare websites, or data breaches — never give it to someone who calls you first.

What fraudsters actually do with a Medicare number

The most common fraud is billing Medicare for services that never happened. A scammer uses your number to submit claims for doctor visits, lab tests, imaging scans, or durable medical equipment — wheelchairs, oxygen tanks, diabetic supplies. Medicare pays the provider (who may be a fake clinic or a real one that the scammer has compromised), and you see the charge on your Medicare Summary Notice months later, if you see it at all.

Prescription drug fraud is another path. A scammer fills prescriptions under your name using your Medicare Part D coverage, either selling the drugs or using them personally. Your Part D plan tracks the claim, and your deductible and out-of-pocket costs climb even though you never filled the prescription.

Beyond Medicare itself, your number is a foothold for broader identity theft. Combined with your name and address — often already public — it can be used to open credit cards, take out loans, or file a false tax return claiming your Social Security number as the filer. These crimes take longer to discover but cause deeper damage.

How to spot Medicare fraud in your own account

Your first line of defense is your Medicare Summary Notice, which arrives quarterly by mail if you are on Original Medicare, or your plan's Explanation of Benefits if you have Medicare Advantage. Read it carefully. Look for doctor visits, tests, or equipment you do not remember receiving. Do not assume the date is wrong — scammers often submit claims months after the supposed service date.

If you have a Medicare.gov account, log in every three months and check your claims history. You can see what has been billed in your name and when. Original Medicare users can view claims at www.mymedicare.gov. Medicare Advantage members should check their plan's website or app instead.

Watch for other red flags: bills from collection agencies for medical debt you do not recognize, calls from providers asking about services you never had, or notices from Medicare about claims you did not file. Any of these can signal fraud in progress.

when ready steps if you think your Medicare number was stolen

Call Medicare directly at 1-800-MEDICARE (1-800-633-4227). Tell them you suspect fraud and ask them to review your account. They can flag suspicious claims and may be able to stop payment if the claim is recent. Have your Medicare card handy when you call.

Report the fraud to the Office of Inspector General at oig.hhs.gov or by phone at 1-800-HHS-TIPS (1-800-447-8477). This creates an official record and helps law enforcement track patterns.

Place a fraud alert with the three credit bureaus — Equifax, Experian, and TransUnion. Call one bureau and ask for a fraud alert; they are required to notify the other two. A fraud alert makes it harder for someone to open new accounts in your name because creditors must verify your identity first. You can do this free at equifax.com, experian.com, or transunion.com, or by phone.

Request a copy of your credit report from all three bureaus at annualcreditreport.com (the only free site authorized by federal law). Look for accounts you did not open. You can dispute fraudulent accounts directly with the bureau and the creditor.

How scammers get your Medicare number in the first place

Phishing emails are the most common entry point. You receive an email that looks like it is from Medicare, asking you to "verify your information" or "update your account." The link goes to a fake website that copies Medicare.gov's design. You enter your Medicare number, and the scammer has it.

Phone calls are another route. Someone calls claiming to be from Medicare, Social Security, or your insurance company and says there is a problem with your account. They ask for your Medicare number "to look it up." Medicare and Social Security never call you first asking for personal information — they contact you by mail.

Data breaches at hospitals, clinics, or insurance companies expose millions of Medicare numbers at once. You have no control over this, but you can monitor your account more closely if you know a breach occurred.

Unsecured mail is a slower but real risk. Thieves steal mail containing your Medicare card or statements. Keep your physical card in a safe place and shred documents with your number before throwing them away.

Protecting your Medicare number going forward

Never give your Medicare number to someone who calls you, emails you, or approaches you in person — even if they claim to represent Medicare. Medicare contacts you by mail, not by phone or email asking for information.

Do not carry your physical Medicare card unless you have a doctor's appointment that day. Leave it at home in a find place. If your card is lost or stolen, call Medicare at 1-800-MEDICARE to report it and request a replacement.

When you visit a doctor or hospital, ask what information they collect and how they store it. Reputable providers use encryption and access controls. If a provider seems careless with your data, you can ask to see their privacy practices or consider switching providers.

Use strong, unique passwords on your Medicare.gov account and any insurance plan accounts. Enable two-factor authentication if the site offers it. This makes it much harder for a scammer to log in even if they have your number.

Be skeptical of unsolicited offers for free medical equipment, free tests, or free services. Scammers often use these to generate fraudulent claims. If you did not request it and did not see a doctor who prescribed it, do not accept it.

What happens to your medical records if fraud occurs

When a scammer bills Medicare for fake services in your name, those claims can create false entries in your medical record. If a fraudulent claim says you had a lab test, that test result may appear in your record even though you never had it. This can confuse your actual doctors and lead to wrong treatment decisions.

Contact your healthcare providers directly if you discover fraud. Ask them to review your medical record for entries you do not recognize and request that they remove false information. Providers are required to correct inaccurate records under federal privacy law.

If you are denied coverage for a service because your record shows you already had it (due to fraud), you can dispute this with your insurance plan. Bring documentation showing the fraudulent claim and ask the plan to correct their records.

Frequently Asked Questions

Can a scammer use my Medicare number to get prescription drugs?

Yes. A scammer can fill prescriptions under your Medicare Part D coverage. The drugs are billed to your plan, your deductible increases, and your out-of-pocket costs climb. Check your Explanation of Benefits for prescriptions you did not fill, and report any you do not recognize to your plan and to Medicare.

Will Medicare hold me responsible for fraudulent charges?

No. You are not liable for fraudulent claims billed to your Medicare account. However, you must report the fraud so Medicare can stop payment and investigate. If you ignore it, the false claims remain on your record and can affect your coverage or create confusion with your doctors.

How long does it take Medicare to investigate fraud?

Medicare's investigation can take weeks to months. In the meantime, you should monitor your account and dispute any remaining false claims. The Office of Inspector General handles criminal cases and can take longer, but they coordinate with law enforcement.

What if I gave my Medicare number to someone I thought was legitimate?

Contact Medicare when ready at 1-800-MEDICARE and report the incident. Place a fraud alert with the credit bureaus. Monitor your Medicare Summary Notice and credit report closely for the next several months. Early reporting limits the damage a scammer can do.

Can I change my Medicare number if it has been compromised?

Your Medicare number is tied to your Social Security number, so you cannot change it without changing your Social Security number — a process that is difficult and rarely recommended. Instead, focus on monitoring your accounts, reporting fraud promptly, and protecting the number going forward.