Seniors searching online for Medicare plan options face a concrete risk: the first result they click may belong to a company that federal regulators have already caught faking government affiliation to harvest personal data. The FTC settled charges against two lead-generation firms, Assurance IQ and MediaAlpha, for $145 million after finding they ran false or misleading paid search ads designed to look like official government sites. A separate FTC consumer alert, published in June 2026, warns in plain terms that scrolling past top search results is now necessary to avoid impostor sites when looking for health coverage, including Medicare.
How paid search auctions push scam sites above Medicare.gov
The mechanics are straightforward. When someone types “Medicare plans” into a search engine, advertisers bid for the top slot. The winner is not chosen for accuracy or legitimacy but for how much it is willing to pay per click. A congressional investigation led by Senator Ron Wyden found that Medicare Advantage insurers have rapidly increased their spending on marketing middlemen, the very firms that buy those ad slots. That spending growth means more money chasing Medicare-related keywords, and more non-government pages sitting above the official federal plan finder at Medicare.gov.
The FTC described the specific tactic in its enforcement action against MediaAlpha: the company and its partner Assurance IQ used “false or misleading social media, paid search, and other ads” that faked an affiliation with the government to get consumers to hand over personal information. Once a person entered their name, phone number, and health details, the data was sold as a “lead” to insurance agents and call centers. Those leads then triggered robocalls and aggressive sales pitches, often before the consumer realized they had never reached a government website at all.
The $145 million settlement between the FTC and the two companies reflects the scale of harm regulators identified. The agency’s case page for MediaAlpha links to the complaint and order documents detailing how the scheme worked. For beneficiaries, the practical result was confusion: people who believed they were comparing plans on a neutral, official tool were instead feeding a commercial pipeline they never agreed to enter. In some instances, consumers reported being enrolled in plans they did not understand or want, after being steered by agents who had purchased their information.
Federal enforcement and new CMS rules targeting deceptive marketing
Regulators have responded on multiple fronts. CMS finalized its Contract Year 2025 Medicare Advantage and Part D rule, known as CMS-4205-F, which placed new limits on the contract terms and financial incentives that Medicare Advantage plans can offer to third-party marketing organizations. The rule directly targets the commission structures that reward aggressive lead generation over accurate consumer information, including restrictions on volume-based bonuses and cross-selling arrangements that can pressure agents to move beneficiaries into higher-paying plans.
CMS has also emphasized transparency and accountability for plan sponsors. The agency maintains a public enforcement portal that logs warning letters, civil monetary penalties, and corrective action plans issued to Medicare Part C and Part D sponsors for marketing violations. These enforcement actions often cite misleading television and online ads, failure to clearly identify plan sponsors, and the use of third-party call centers that do not follow required disclosure scripts. By making these sanctions public, CMS aims to pressure plans to tighten oversight of their marketing vendors.
The Department of Justice has also weighed in. While the FTC and CMS focus on civil enforcement and administrative penalties, DOJ prosecutors have pursued criminal cases where lead generators and agents allegedly used stolen identities or falsified enrollment data to collect higher commissions. These prosecutions underscore that deceptive Medicare marketing is not just a consumer-protection issue but, in some cases, a form of health-care fraud that can carry prison time.
Together, the FTC settlement, CMS’s rulemaking, and DOJ’s criminal cases send a coordinated message: Medicare marketing cannot be a free-for-all where the most aggressive bidder wins the first click. But enforcement tends to lag behind innovation in online advertising. Lead-generation firms can quickly spin up new domains, tweak ad copy, or shift traffic from search to social platforms, staying a step ahead of specific orders and guidance. That dynamic leaves beneficiaries and caregivers with an ongoing burden to distinguish legitimate resources from commercial funnels.
What Medicare beneficiaries can do to protect themselves
For people approaching Medicare eligibility, the safest path is to start at known official sites rather than search results. Typing Medicare.gov directly into a browser, or navigating from the Social Security Administration’s website, avoids the auction entirely. Once on the official site, beneficiaries can use the plan finder tools without entering information into third-party forms that may sell their data.
When using search engines, consumers should look carefully at the small labels that identify paid advertisements and check the URL before clicking. Government health sites will end in .gov, not .com or .org, and will not ask for detailed health information just to “see plans.” Any page that immediately requests a phone number in exchange for quotes is likely a commercial lead generator, not an official resource.
Experts also recommend treating unsolicited calls and texts about Medicare plans with skepticism, especially during open enrollment periods. If a person receives a call from someone claiming to be “from Medicare,” they can hang up and call the number listed on the back of their Medicare card or on Medicare.gov to verify. Legitimate plan representatives should be willing to send information in writing and should not pressure consumers to make decisions on the spot.
Ultimately, the combination of aggressive online advertising, opaque data-brokerage practices, and complex Medicare plan rules has created an environment where confusion is profitable. Federal regulators are attempting to rebalance that system through settlements, public enforcement databases, and tighter rules on marketing intermediaries. Until those efforts fully take hold, however, seniors and their families will need to approach the top of the search page with caution, assume that the first click may not be the safest, and rely on verified government channels whenever possible.
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
