Medicare Open Enrollment season (Oct 15 - Dec 7) drives scams harvesting health, insurance and financial data
Scammers are exploiting the annual Medicare Open Enrollment period (October 15 to December 7) as a pretext to impersonate insurers, agencies or Medicare itself. Contact comes by phone, SMS, email, social media and malicious Google ads that lead to spoofed, official-looking websites. Lures include plan changes, card replacement, lower premiums, coverage changes and account verification, combined with urgency tied to the real December 7 deadline. Victims are pushed to give up health, insurance and banking data, which is then used for identity fraud, fraudulent Medicare claims and enrollment manipulation to generate commissions. The article cites FinCEN, which in September 2026 identified about $17.5 billion in suspicious financial activity potentially linked to healthcare fraud.
Technical Details
- Delivery channels: calls, text messages, emails, social media messages and paid search ads leading to spoofed sites.
- Social engineering: urgency, fear of missing out, impersonation of legitimate insurers or government bodies, and claims of fraudulent activity on the account.
- Data targeted: health information (doctors, prescriptions, medical records), insurance details (provider, plan, member ID, policy) and bank or card details.
- Monetization: identity fraud, new credit lines, fraudulent Medicare claims, obtaining goods and services in the victim's name, enrollment manipulation and follow-on recovery fraud.
- The article lists no IOCs, CVEs or named threat actors.
Remediation
- Treat unsolicited contact asking for personal, financial or health data with suspicion, and verify the sender using separately sourced contact details.
- Avoid clicking Google ads; type official sites directly (Medicare.gov, HealthCare.gov) and check for a .gov domain.
- If victimized, report to Medicare (800-633-4227), the FTC (ReportFraud.ftc.gov), the state attorney general and IdentityTheft.gov; contact the bank to freeze cards; review Medicare claims; change reused passwords.
- Ignore offers to recover lost money for a fee, as these are recovery scams.
Linha do tempo
-
Medicare Open Enrollment season (Oct 15 - Dec 7) drives scams harvesting health, insurance and financial data
ler a análise desta fonte ocultar
Scammers are exploiting the annual Medicare Open Enrollment period (October 15 to December 7) as a pretext to impersonate insurers, agencies or Medicare itself. Contact comes by phone, SMS, email, social media and malicious Google ads that lead to spoofed, official-looking websites. Lures include plan changes, card replacement, lower premiums, coverage changes and account verification, combined with urgency tied to the real December 7 deadline. Victims are pushed to give up health, insurance and banking data, which is then used for identity fraud, fraudulent Medicare claims and enrollment manipulation to generate commissions. The article cites FinCEN, which in September 2026 identified about $17.5 billion in suspicious financial activity potentially linked to healthcare fraud.
Technical Details
- Delivery channels: calls, text messages, emails, social media messages and paid search ads leading to spoofed sites.
- Social engineering: urgency, fear of missing out, impersonation of legitimate insurers or government bodies, and claims of fraudulent activity on the account.
- Data targeted: health information (doctors, prescriptions, medical records), insurance details (provider, plan, member ID, policy) and bank or card details.
- Monetization: identity fraud, new credit lines, fraudulent Medicare claims, obtaining goods and services in the victim's name, enrollment manipulation and follow-on recovery fraud.
- The article lists no IOCs, CVEs or named threat actors.
Remediation
- Treat unsolicited contact asking for personal, financial or health data with suspicion, and verify the sender using separately sourced contact details.
- Avoid clicking Google ads; type official sites directly (Medicare.gov, HealthCare.gov) and check for a .gov domain.
- If victimized, report to Medicare (800-633-4227), the FTC (ReportFraud.ftc.gov), the state attorney general and IdentityTheft.gov; contact the bank to freeze cards; review Medicare claims; change reused passwords.
- Ignore offers to recover lost money for a fee, as these are recovery scams.