Medicare and health insurance scams: guard your number like a credit card
Scammers call, text, and show up offering "free" braces, tests, or a "new Medicare card" — all to harvest your Medicare number and bill fraudulent claims in your name. Here is how medical identity theft works, why Medicare will never cold-call you, and how to protect and check your coverage.
The scam often opens like a kindness. A friendly caller — or a text, a TV ad, a booth at a health fair — offers something free: a back or knee brace, a DNA or genetic test “covered by Medicare”, or help getting your “new Medicare card”. All they need is your Medicare number to set it up. That number is the entire point, and handing it over is how medical identity theft begins.
It’s a costly, distinctly nasty form of fraud, because the damage isn’t just money. The HHS Office of Inspector General defines medical identity theft as someone using your personal information — “like your name, Social Security number, or Medicare number — to submit fraudulent claims to Medicare and other health insurers without your authorization.” That can drain benefits you’ll need later and even put false information into your medical records.
The one rule: guard your number like a credit card
Both Medicare and the OIG give the same core instruction, and it’s the thing to remember: treat your Medicare number like a credit card number. Guard it, and give it only to your own doctors and the people you know should have it — never to anyone who contacted you.
That single habit defuses most of these scams, because they all depend on talking you out of your number. You’d never read your credit card number aloud to a stranger who cold-called you; the same rule applies here.
Why “Medicare” calling you is the tell
Real Medicare doesn’t cold-call you to sell things or hand out freebies. Medicare’s own guidance is explicit: Medicare will never call you to sell you anything or visit you at your home, and you should not give your Medicare or Social Security number to anyone except your doctor or people you know should have it. The OIG echoes it — legitimate Medicare representatives “will not unexpectedly contact you” asking for your Medicare or Social Security number.
So the unsolicited contact is the red flag. A call, text, or visitor claiming to be from Medicare and asking you to “verify” or provide your number is a scam by definition — the same authority-costume trick used by government imposters posing as Social Security or the IRS. The move is Go Direct: hang up, and if you genuinely need to check something, contact Medicare yourself at 1-800-MEDICARE or Medicare.gov, never through whoever reached out.
The “free offer” trap
The most common hook is a free product or service: braces, “genetic cancer screening”, COVID or other test kits, or medical equipment, offered with no cost to you because “Medicare covers it”. Once they have your number, the scammer bills Medicare for expensive items you never needed or received. You may not lose cash directly, but your benefits get used up, your records get polluted, and untangling it takes real effort. If an offer requires your Medicare number and arrived unsolicited, that’s your cue to stop — Medicare isn’t running a giveaway.
Open Enrollment brings lookalike sites and fake “official agents”
The pressure rises every fall. The FTC warns that health insurance scams happen year-round but pick up as Open Enrollment approaches — Medicare’s Oct. 15 to Dec. 7 window and the ACA Marketplace’s own enrollment period. Two tactics show up every season: scammers and dishonest marketers pay for search ads that can outrank the genuine government site, and they register web addresses that use similar keywords and official-looking logos so you think you’ve landed on the real HealthCare.gov or Medicare.gov when you haven’t. Once you’re on the fake page, it’s built to harvest your Medicare number, Social Security number, or payment details.
The other seasonal lure is a title: someone on an unsolicited call claims to be an “official Medicare agent” or a government sales representative. The FTC’s standing guidance on Medicare Open Enrollment rights is explicit that no such title exists — the Centers for Medicare & Medicaid Services does not employ Medicare sales representatives, so anyone using that title on an unsolicited call is lying. Treat the claim itself as the tell, hang up, and go to coverage the way you would any other year: type HealthCare.gov or Medicare.gov into your browser yourself, or call 1-800-MEDICARE, rather than clicking a search ad or trusting a caller’s self-description.
Catch it early: read your statements
Your statements are the smoke alarm. Compare the services and dates on your Medicare Summary Notices against what you actually received, and watch for any provider, visit, test, or item you don’t recognize. Medicare suggests keeping a simple log of your appointments and checking it against your statements, and setting up a secure account at Medicare.gov to review claims as soon as they post. Catching a stray claim early is the difference between a quick correction and a tangled mess.
If your number may be compromised
Move promptly. If you shared your Medicare number with someone you now doubt, or you spot claims for care you never got, call 1-800-MEDICARE (1-800-633-4227) to report it, and contact the HHS OIG hotline at 1-800-HHS-TIPS (1-800-447-8477) or tips.oig.hhs.gov. Your local Senior Medicare Patrol (1-877-808-2468) can help you read statements and file reports. Because a Medicare number is tied to your Social Security number, treat it as an identity-theft event too: see what to do after a data breach and consider a free credit freeze, and review our Freeze & Report move. For more, see our defense moves and the 60-second quiz.
- An unsolicited call, text, or visit offers "free" equipment, genetic or DNA tests, braces, or a "new card" — and needs your Medicare or Social Security number to send it.
- Someone claiming to be from Medicare contacts you out of the blue and asks you to "verify" or hand over your Medicare number.
- Your Medicare Summary Notice or statement lists a service, test, or item you never received.
- A search ad or a web address that is close to, but not quite, HealthCare.gov or Medicare.gov — or a caller claiming to be an "official Medicare agent", a title that does not exist.
- Guard your Medicare number like a credit card. Give it only to your own doctors and people you know should have it — never to someone who contacted you.
- Medicare will not cold-call to sell you anything, offer "free" items, or visit your home. Treat any unsolicited "Medicare" contact as a scam and hang up.
- Verify by going direct: if in doubt, contact Medicare yourself at 1-800-MEDICARE or Medicare.gov — never through a number, link, or person that reached out to you.
- Read every Medicare statement and check for services or items you didn't get — early detection limits the damage.
What makes this one insidious is that the bait looks like generosity, not theft. Nobody feels robbed when a friendly caller offers a free brace or a free DNA test 'covered by Medicare' — it sounds like a benefit, not an attack. But your Medicare number is the target the whole time, and unlike a stolen credit card you can’t just cancel it and move on; the fraudulent claims tangle up your benefits and your medical record. The mental shift that helps is to treat the number exactly like a credit card number you’d never read aloud to a stranger who called you. Medicare isn’t going to phone you offering free stuff. So the friendliness is the tell.
Sources
- HHS Office of Inspector General — Medical Identity Theft & Medicare Fraud
- Medicare.gov — Reporting Medicare fraud & abuse / protecting yourself
- FTC Consumer Alert — What to know ahead of Open Enrollment to avoid health insurance scams (September 28, 2026)
- FTC Consumer Advice — Know your rights during Medicare Open Enrollment
Frequently asked
Someone called offering a free knee brace / DNA test / new Medicare card and just needed my number. Was that really Medicare?
No. Medicare does not cold-call to offer free items or to issue a "new card", and a request for your Medicare number from someone who contacted you unsolicited is the scam itself. As the HHS Office of Inspector General states, legitimate Medicare representatives will not unexpectedly contact you requesting your Medicare or Social Security number. The "free" offer is bait: once they have your number, they bill Medicare for equipment or tests you never needed — which is medical identity theft, and it can also disrupt your real coverage. Hang up, and if you want to check anything, call 1-800-MEDICARE yourself.
Why does my Medicare number even matter? It's not a bank account.
It's as valuable as one to a scammer. The OIG describes medical identity theft as someone using your personal information — "like your name, Social Security number, or Medicare number — to submit fraudulent claims to Medicare and other health insurers without your authorization." The official advice from both the OIG and Medicare is the same: guard your Medicare card like a credit card, and don't give the number to anyone except your doctor or people you know should have it. A stolen Medicare number can be used to bill fraudulent claims, drain benefits you may later need, and even put wrong information into your medical record.
How would I even know if my Medicare number was being misused?
Your statements are the early-warning system. Compare the services and dates on the Medicare Summary Notices or statements you receive against what you actually got — look for any visit, test, item, or provider you don't recognize. Medicare suggests keeping a simple record of your appointments and checking it against your statements, and creating a secure account on Medicare.gov so you can review claims as soon as they're processed. If something doesn't match, call your provider first to rule out a billing mistake, then report it.
Is there such a thing as an "official Medicare agent"? A caller during Open Enrollment said they were one.
No. The FTC states plainly that anyone claiming to be an "official Medicare agent" or government sales representative is a scammer, because no such title exists. The claim tends to surface most around Open Enrollment (Medicare's Oct. 15 to Dec. 7 window), when scammers also buy search ads and build web addresses designed to look like HealthCare.gov or Medicare.gov, using similar keywords and official-looking logos so you think you have reached the real government site. If you need to enroll or compare plans, type the .gov address into your browser yourself or call 1-800-MEDICARE rather than trusting a search ad, a lookalike link, or an unsolicited caller's claimed title.