Medicare Scams, Pressure, and Protection: What to Watch For

Reading about Medicare scams is uncomfortable. That discomfort is appropriate — this is a topic that warrants attention, not alarm.

Scams are not the same as marketing

Most of what fills the Medicare ad landscape is marketing — sometimes aggressive, sometimes confusing, sometimes misleading, but generally from licensed companies operating within a regulated framework. An ad that overstates a benefit or omits important plan details is a problem worth understanding, but it is a different problem from identity theft, fraud, or criminal activity.

Not every Medicare ad is a scam. Not every confusing phone call is a fraud attempt. Not every company that contacts you is trying to steal your information.

That distinction matters because conflating ordinary marketing with criminal fraud makes it harder to respond appropriately to each. Aggressive marketing deserves skepticism and verification. Fraud deserves a different response: refusal, documentation, and reporting.

This article is about recognizing the difference — and knowing what to do when a contact crosses from marketing into territory that is genuinely dangerous.

Common warning signs

Unexpected contact claiming to be Medicare or a Medicare plan: Medicare itself does not cold-call beneficiaries to sell plans or review accounts. If someone calls saying they are from "Medicare" and wants to verify your information or send you a new card, treat this with significant caution. Official CMS communications come by mail.

Request for your Medicare number: Your Medicare number is the key to your Medicare benefits. Once someone has it, it can be used to submit fraudulent claims. Per Medicare.gov guidance, you should not share your Medicare number with anyone who contacts you — only with providers who are actively treating you, official Social Security or CMS contacts you initiated, or your pharmacist.

Request for your Social Security number, bank information, or payment credentials: Legitimate Medicare plan enrollment does not require your Social Security number over the phone in a cold call, and it never requires your bank account number as part of a benefits review.

Pressure to act immediately: "Your plan is being discontinued," "You have 24 hours," "This is the last day to lock in these benefits." Pressure language that does not align with actual enrollment calendar dates is a reason to verify independently before acting.

Threats about losing coverage: No legitimate Medicare plan or government agency will threaten to cancel your coverage if you do not call back or confirm information immediately. If you receive such a communication, call the number on your Medicare card or Medicare.gov to verify before responding.

Free item or gift in exchange for your Medicare number: Offering a free gift in exchange for Medicare information is a documented fraud pattern flagged by the HHS Office of Inspector General. The item is not worth the risk.

Vague company identification: A caller who is reluctant to clearly name the company they represent, or who gives a company name that is difficult to verify, is worth being skeptical of. Licensed Medicare agents and carriers are required under CMS marketing rules to identify their company and the plans they represent.

Refusal to send information in writing: Any caller describing benefits or plan options and refusing to send anything in writing before you give your information is a pattern worth stopping. Requests for sensitive information should follow written disclosure, not precede it.

Asking to "confirm" information you did not initiate: A common social engineering approach involves asking you to "confirm" details you supposedly already shared — starting with something like "I just need to confirm your Medicare number." This creates a false sense of familiarity. If you did not initiate the contact, do not confirm anything.

What not to share

With anyone who contacts you unexpectedly:

• Your Medicare number (the red, white, and blue card number)
• Your Social Security number
• Your bank account or routing number
• Your credit card number
• Login credentials or verification codes for any account
• Personal identification details beyond your name

These are not items you share to receive Medicare information. They are items that, once shared with the wrong person, can cause lasting harm that is difficult to reverse.

What to do instead

Hang up or stop the conversation. You do not owe a caller who contacted you unexpectedly a polite conclusion to their pitch. Ending the call is always an option.

Call the number on your card or the official number from Medicare.gov. If you want to verify whether the contact was legitimate, call 1-800-MEDICARE (1-800-633-4227) or the number printed on your Medicare card. Do not call back a number the suspicious caller provided.

Report the contact. You can report suspicious Medicare contacts to the HHS Office of Inspector General at 1-800-HHS-TIPS (1-800-447-8477), the FTC at reportfraud.ftc.gov, and the Senior Medicare Patrol (SMP) at smpresource.org. SMP is a federally funded program specifically designed to help beneficiaries recognize, report, and prevent Medicare fraud.

Document the call. Note the date, time, phone number if visible, what the caller said, and what they asked for. This documentation is useful if you file a report.

Review your Medicare Summary Notice (MSN). Your MSN lists all the services that Medicare has been billed for on your behalf. If you see services you did not receive, providers you did not visit, or equipment you did not order, those are signs of potential billing fraud. Report them to 1-800-MEDICARE.

A note for caregivers

If you are helping a parent or another person manage their Medicare, this category of risk is worth a direct conversation.

A simple rule can help: "I do not handle Medicare by phone unless I started the call." Establishing that rule as a household norm — and practicing it together — reduces the chance of an unexpected call resulting in shared sensitive information. Create a short script for your parent to use: "I don't handle Medicare by phone. Please send whatever you have in writing." Hang up after saying it.

You can also help by reviewing your parent's Medicare Summary Notice each quarter and checking that the services listed reflect actual care received. This review is one of the most effective ways to catch fraudulent billing early.

How this applies to you

If you received a suspicious call: Do not call back the number the caller gave you. Verify through official channels — 1-800-MEDICARE or Medicare.gov — whether the contact was legitimate. Report the call to the FTC and consider contacting your state SMP.

If you already shared information with someone who seems suspicious: Contact 1-800-MEDICARE to place a note on your account about potential misuse of your Medicare number. Consider contacting Social Security if you shared your Social Security number. Review your Medicare Summary Notices carefully over the next several months.

If you are not sure whether a contact was legitimate: Slow down. An offer that disappears because you took a day to verify it was not a legitimate offer. Official Medicare resources do not evaporate when you ask for time to verify.

If you are managing Medicare for a parent: Build the habit of checking in about Medicare contacts. Ask periodically whether your parent has received any unusual calls or mail. Review their Medicare Summary Notices together. The earlier a potential fraud issue is identified, the easier it is to address.

A four-question conversation tool

1. How does this apply to me? Did I initiate this contact, or did it come to me unexpectedly?
2. What am I assuming? Am I assuming this caller is from Medicare or a real plan because they said so?
3. What should I verify? Can I confirm this contact through an official number I find myself — not one the caller provided?
4. What might be harder to change later? If I share my Medicare number or bank information and this turns out to be fraudulent, what does fixing it look like?

Caution is not the same as fear. Being alert to these patterns is not paranoia — it is a routine that protects you.