The voice on the line sounds official. The caller identifies himself as a Medicare fraud investigator, recites a case number, and warns that suspicious charges have appeared on the beneficiary’s account. To “secure” it, he asks the person to read back the Medicare Beneficiary Identifier printed on their card. The caller ID even shows a Washington, D.C., area code. But the entire call is a scam. Federal agencies have continued to warn through June 2026 that criminals are aggressively impersonating government officials to steal Medicare numbers from seniors. The real Medicare program will never place an unsolicited call asking anyone to verify personal information.
How the phone scam works
The scripts vary, but the pressure tactics stay the same. A caller claims to work for Medicare, the Centers for Medicare & Medicaid Services (CMS), or the Department of Health and Human Services Office of Inspector General (HHS-OIG). The beneficiary hears that fraudulent billing has been detected and that their benefits could be suspended unless they immediately confirm their Medicare number, Social Security number, or banking details.
Some callers sweeten the pitch by offering to send a replacement Medicare card. That detail is designed to confuse: the FTC has confirmed that Medicare cards are paper, always free, and mailed automatically by CMS. No one from the program will ever call to verify card details or charge a fee for a replacement.
What makes these calls particularly effective is caller-ID spoofing. The HHS-OIG has documented cases in which scammers display real OIG phone numbers on the recipient’s screen, making the call look like it is coming from a legitimate government office. That single trick dramatically increases the chance a beneficiary will comply.
Once a scammer has a Medicare number, they can submit fraudulent medical claims, order durable medical equipment the patient never requested, or sell the data to organized fraud rings.
Why stolen Medicare numbers are so valuable
A compromised Medicare number opens a direct billing channel to the federal government. The OIG defines medical identity theft as the use of someone else’s Medicare information to submit false claims. The consequences for victims can include corrupted medical records, delayed care, and unexpected bills for services they never received.
Law enforcement cases show how quickly the damage scales. In Operation Brace Yourself, the Department of Justice charged 24 individuals in a telemarketing-driven scheme that lured hundreds of thousands of elderly and disabled patients into accepting orthopedic braces they never needed. According to the FBI, Medicare was paying between $17 million and $22 million per week to telemedicine companies tied to the conspiracy before the scheme was dismantled. The total fraud exceeded $1.2 billion. That case relied on telemarketers cold-calling beneficiaries to harvest their information, the same basic playbook scammers use today when they pose as fraud investigators on the phone.
What federal agencies have said clearly
The guidance from CMS is unambiguous. The official Medicare card page states that the program “will never call you uninvited” and ask for personal or private information. Anyone who receives such a call should hang up immediately and dial 1-800-MEDICARE (1-800-633-4227) to report it.
The FTC reinforces that instruction, noting that real government agencies do not contact beneficiaries out of the blue to request Medicare numbers. The FTC classifies these calls as government impersonation scams, a category that also includes fake IRS, Social Security Administration, and law enforcement calls.
One important nuance: a Medicare Advantage plan or Part D prescription drug plan that a beneficiary is already enrolled in may call for care coordination or plan-related business. Those calls come from the plan itself, not from “Medicare,” and the plan will already have the member’s information on file. A legitimate plan representative will never ask a member to “verify” their Medicare number as a condition of keeping their benefits.
What remains difficult to track
Despite clear warnings, no federal agency has published call-volume data specific to the “fraud investigator” variant of this scam. The HHS-OIG alert confirms that its phone numbers have been spoofed but does not include a timeline or complaint count. CMS does not break out “verification” requests as a distinct complaint category, so there is no reliable public estimate of how often scammers use the fraud-investigation pretext compared to other pitches like free genetic testing kits or back braces.
Many victims may never realize their information was misused. Fraudulent claims can be buried in lengthy Medicare Summary Notices that beneficiaries do not always review line by line. That gap in reporting makes it harder for policymakers to measure the true scope of the problem or direct enforcement resources where they are needed most.
How to protect yourself or a family member
Consumer protection officials agree on a straightforward first rule: if someone calls you about Medicare and you did not initiate the contact, hang up. Do not press any buttons, do not confirm your name, and do not read back any numbers. The following steps further reduce risk:
- Never share your Medicare number, Social Security number, or bank details with anyone who contacts you first, even if the caller already seems to know partial information about you.
- Verify independently. If you are concerned about your account, call 1-800-MEDICARE directly or log in at Medicare.gov. Do not use a callback number provided by the caller.
- Recognize pressure tactics. Threats of arrest, benefit suspension, or fines are hallmarks of a scam. So are demands for payment by gift card, wire transfer, or cryptocurrency. Medicare does not operate this way.
- Review your Medicare Summary Notices. Check every statement for services, equipment, or providers you do not recognize. Report unfamiliar charges to Medicare and to the provider listed on the notice.
- Use the Senior Medicare Patrol. The Senior Medicare Patrol (SMP) program is a federally funded network that helps beneficiaries detect and report Medicare fraud. Local SMP volunteers can walk you through your statements and help you file complaints.
- Report the call. File a complaint with the FTC at ReportFraud.ftc.gov, and contact the HHS-OIG hotline at 1-800-HHS-TIPS (1-800-447-8477) if you believe your Medicare information has been compromised.
If you already gave out your number
Acting quickly can limit the damage. Call 1-800-MEDICARE to report the incident and ask about getting a new Medicare Beneficiary Identifier. Review recent Medicare Summary Notices for any claims you did not authorize. Consider placing a fraud alert on your credit file through one of the three major credit bureaus (Equifax, Experian, or TransUnion), since a stolen Medicare number is often paired with other personal data that can fuel broader identity theft. Document everything: the date and time of the call, what the caller said, and any information you provided. That record will help both Medicare and law enforcement investigate.
Tell people before the phone rings
These scams work because they exploit trust in government institutions and the natural anxiety that comes with hearing the word “fraud” attached to your health coverage. The single most effective defense is making sure beneficiaries know the rule before a scammer ever dials their number: Medicare will not cold-call you to verify anything. Families, caregivers, doctors’ offices, and community organizations that repeat that message give seniors a reason to hang up without a second thought. That one action is enough to shut the scam down.



