A woman named Janet — a retired school librarian in Ohio — answered her phone last October and didn't hang up for three hours. The first caller said he was from Medicare, verifying her new card. He transferred her to a "pharmacy specialist." That person transferred her to a "doctor's office" for a "required health assessment." By the time Janet realized what had happened, she'd handed over her Medicare number, her bank routing number, and her Social Security number to three different people, none of whom worked for the federal government.
I heard about Janet's story from a colleague, and it stuck with me because of how sophisticated the operation was. This wasn't some amateur reading off a script. It was a coordinated relay — each handoff made the next request feel more legitimate. And Janet is sharp. She ran a library system for 30 years.
Here's the scale of what we're dealing with: the Department of Justice announced its largest health care fraud takedown in U.S. history in 2025 — 324 defendants, $14.6 billion in alleged fraud. That doubled the previous record of $6 billion. Americans over 60 reported $2.4 billion in fraud losses in 2024, up from roughly $600 million in 2020. The FTC estimates the true number, including unreported cases, may be as high as $81.5 billion. I've been working with retirees for 35 years, and I have never seen anything like this.
So let me walk you through what the Medicare scams look like right now, how to recognize them, and — most importantly — what to do about it.
The Six Medicare Scams You're Most Likely to Encounter
I always tell my clients to study the playbook before the season starts. Here are the six plays scammers are running in 2026.
The impersonation call. Someone calls claiming to be from Medicare, says your card needs updating or your benefits are about to lapse. The caller ID might even show a government number — spoofing technology makes that trivially easy. They need your Medicare number "to verify your identity." Medicare will never make this call. Period.
The "free" medical equipment offer. You get a call or see an ad offering free knee braces, back braces, or catheters. All they need is your Medicare number to "process the order." Behind the scenes, they bill Medicare thousands for equipment you never asked for — or that arrives and is worthless. Operation Brace Yourself, a federal investigation, has uncovered billions in fraudulent Medicare claims for durable medical equipment using stolen identities.
The Medicare Advantage switching scam. Fake agents — sometimes going door to door — pressure you to switch plans during enrollment periods. They earn a commission, and you end up in a plan that doesn't cover your doctors or medications. Medicare Advantage plans are actually prohibited from making unsolicited sales calls, so any cold call offering to "review your plan" is a red flag by definition.
Fake telehealth websites. These have exploded since the pandemic. Slick-looking sites offer free consultations, collect your information, and generate AI-written medical documents to bill Medicare for services that never happened.
AI voice cloning. A scammer calls and sounds exactly like your grandson, your daughter, or even your doctor. They need money wired immediately — an emergency. It takes as little as three seconds of recorded audio to clone a voice convincingly. Three seconds. I'll come back to this one.
Medicare card replacement scams. You receive a text or a piece of mail saying your Medicare card is expiring or damaged and you need to "verify" your information to get a new one. Medicare cards don't expire. If yours is damaged, you request a replacement through Medicare.gov or by calling 1-800-MEDICARE yourself.
How Scammers Get Your Medicare Number in the First Place
A client of mine, a retired electrician named Vincent, came in last spring baffled. He'd received a Medicare Summary Notice showing charges for three telehealth visits he'd never had, billed to a provider in a state he'd never visited. He hadn't responded to any scam calls. He hadn't given his number to anyone. So how did they get it?
The answer, most likely, was a data breach. Health care data breaches exposed tens of millions of records in 2024 and 2025. In May 2025, roughly 103,000 Medicare.gov accounts were fraudulently created using stolen personal information. And here's the number that should concern you: health records sell for 10 to 40 times more than credit card numbers on the dark web. A credit card can be canceled in five minutes. Your Medicare number is tied to your Social Security number and your medical history — that's much harder to unwind.
Beyond breaches, scammers obtain numbers through those "free offer" traps I mentioned, through physical mail theft (yes, people still steal mail), and through plain social engineering — calling with a convincing story until someone volunteers the information. Vincent's case was almost certainly a breach. We reported it, froze his credit, and spent the better part of two months cleaning it up.
Red Flags: What Medicare Will Never Do
Let me be direct about this. I keep a short list posted on the wall at the Westport Senior Center where I teach financial literacy classes, and I'm going to give it to you here. Medicare will never:
- Call you and ask for your Medicare number. They already have it.
- Send you a text message asking for personal information or payment.
- Send someone to your door. Not for sales, not for verification, not for anything.
- Ask you to pay with gift cards, wire transfers, or cryptocurrency. No government agency will.
- Threaten to cancel or suspend your benefits if you don't "act now."
That last one is the big tell. Every Medicare scam I've seen in the past decade relies on urgency. "Your benefits expire at midnight." "This is your final notice." "We need to verify today or your coverage will lapse." Medicare doesn't work that way. Your Part A and Part B coverage doesn't evaporate because you missed a phone call.
If you get a call and you're not sure, hang up. Call 1-800-MEDICARE (1-800-633-4227) yourself. Use the number on your card or the one you look up independently. Never call back a number someone gives you during a suspicious interaction.
If you're getting strange text messages asking you to click links or verify information, that's almost certainly a scam too — Medicare handles enrollment and communication through mail and through Medicare.gov.
AI Is Changing the Scam Playbook
This is the part that keeps me up at night (and I've been doing this for 35 years, so that's saying something).
AI voice cloning technology is commercially available, inexpensive, and terrifyingly effective. A scammer pulls a few seconds of your grandchild's voice from a social media video, runs it through cloning software, and calls you in a panic. "Grandma, I'm in trouble, I need money, please don't tell Mom and Dad." The voice sounds right. The emotion sounds real. And the request is designed to bypass every rational filter you have by hitting you straight in the heart.
A client last year, Phyllis, got a call from her "grandson" saying he'd been in a car accident and needed $3,000 for bail. She was at the bank withdrawing cash before she thought to call her daughter. Her grandson was fine. He was in class.
Beyond voice cloning, AI-generated websites now pass casual visual inspection. They have professional layouts, stock photos, even fake patient testimonials. The old advice — "look for bad grammar and typos" — doesn't hold anymore. AI writes clean, professional English. You can't rely on sloppy writing to identify a Medicare scam.
This is where understanding how AI tools actually work becomes a matter of financial self-defense, not just tech curiosity.
Seven Steps to Protect Yourself Right Now
Here's what I recommend to every client, and what I practice myself:
1. Lock your Medicare card away. Don't carry it in your wallet. Take a photo for your records if you'd like, but the physical card should stay home in a secure place. If someone steals your wallet, you don't want your Medicare number walking out with it.
2. Check your Medicare Summary Notice every quarter. This is the statement that shows what providers billed and what Medicare paid. Read it the way you'd read a credit card statement — look for charges you don't recognize. That's how Vincent caught the fraudulent telehealth visits.
3. Create and protect your Medicare.gov account. If you haven't set one up, do it now. Those 103,000 fraudulently created accounts in May 2025? Scammers were creating accounts for people who hadn't claimed theirs yet. Once you have an account, use a strong password and enable every security feature available. Understanding your Medicare enrollment options starts with having a secure account.
4. Set a family code word. Pick a word or phrase that only your family knows. If you get a call from someone claiming to be a relative in distress, ask for the code word. No code word, no money, no exceptions. This single step defeats most voice-cloning scams.
5. Freeze your credit at all three bureaus. It's free. Contact Equifax, Experian, and TransUnion and place a freeze. This prevents anyone from opening new accounts in your name, which is often the next step after a Medicare scam succeeds. You can lift the freeze temporarily when you need to apply for credit. It's a minor inconvenience that prevents major damage — and it fits into any retirement budget because it costs nothing.
6. Know exactly where to report. If you suspect a Medicare scam, you have several options, and I'd encourage using more than one:
- 1-800-MEDICARE (1-800-633-4227) for billing issues
- OIG Hotline (1-800-HHS-TIPS) for fraud
- FTC at reportfraud.ftc.gov
- Senior Medicare Patrol at smpresource.org — these are trained volunteers who help seniors identify and report Medicare scams
- Your State Attorney General's office
7. Before Open Enrollment, call SHIP. The State Health Insurance Assistance Program (shiphelp.org) offers free, unbiased Medicare counseling. Open Enrollment runs October 15 through December 7, and the Medicare Advantage Open Enrollment Period runs January 1 through March 31 — these are prime seasons for Medicare scams because confusion is highest and scammers know it. SHIP counselors can help you compare plans without anyone trying to earn a commission off your decision.
Trust the Feeling That Something Is Wrong
Here's what connects every story I've shared — Janet on the phone for three hours, Vincent's phantom telehealth visits, Phyllis racing to the bank for her "grandson." In every case, there was a moment where something felt off. A half-second of hesitation. A thought that maybe this was moving too fast.
That feeling is the warning.
Medicare will not cancel your benefits over a phone call. No legitimate agency will demand immediate payment in gift cards. Your grandson can wait sixty seconds while you call his mother. The urgency is manufactured — it's the scammer's most reliable tool, and it works because decent people want to be helpful, want to be compliant, want to protect their families.
I'm not going to tell you that vigilance solves everything. It doesn't. The scams are getting better, the technology is getting cheaper, and the volume is getting worse. But the fundamentals of protecting yourself haven't changed: guard your information, verify independently, and never let anyone rush you into a decision about your money or your health coverage. In my experience working with retirees, the people who get through these situations best aren't the ones who never encounter a Medicare scam — they're the ones who gave themselves permission to slow down and ask questions.
If something feels wrong, it probably is. Hang up. Call back on a number you trust. Talk to someone you trust. That's not paranoia — that's the prudent course.
