Medicare Open Enrollment scams 2026: the card reissue call that drains your benefits

The October phone call Linda answered

Linda is 71. She lives in a quiet retirement community in north Phoenix, in a one-story house with a small lemon tree by the front door and a framed photo of her late husband on the entry table. She volunteers two mornings a week at the church food pantry. She does her own banking. She is sharp.

It is Friday, October 17, 2025. The second day of Medicare Open Enrollment. At 10:42 in the morning her landline rings. Caller ID, in the bright white letters of the phone she has used for fifteen years, reads "Medicare Help Center."

She picks up. The voice on the other end is friendly. Warm. A woman in her late thirties by the sound of it. "Good morning, is this Linda Rosa Martinez?" Linda says yes. "Hi Linda, my name is Karen and I'm calling from the Medicare Help Center about your benefits. How is your morning going?" Linda says fine, thank you. Karen laughs softly. "Wonderful. Linda, I'm just going to verify a few things on file with us today so we can get you on the new program. Can you confirm your date of birth for me?"

Linda hesitates. She is careful with strangers. Then Karen reads the date herself. March 4, 1954. Correct. Linda exhales. Karen continues. She reads back Linda's street address, including the unit number. Correct. She reads the last four digits of Linda's old Medicare number. Correct. By the third correct piece of information, Linda's guard is down. This person clearly knows who she is. This must be a real Medicare call.

Karen explains. The Medicare card is being reissued under a new program. Linda's existing card will continue to work in the meantime, but to get her enrolled in the new program before the December 7 deadline, Karen needs to confirm the full new Medicare number printed on the front of the card. Just to match the records.

Linda walks to the kitchen drawer where she keeps the new red, white, and blue card. She reads the number out loud. Eleven characters. Letters and digits. Karen confirms it character by character, very patiently. "Wonderful, Linda. You are all set. Your new card will be active in 7 to 10 business days. Have a beautiful day." Click.

Linda goes back to the lemon tree.

For three weeks, nothing happens.

On the morning of November 6, a thick envelope from Medicare arrives in Linda's mailbox. It is a Medicare Summary Notice. She sits at the kitchen table and opens it. Page two lists charges she does not recognize. A pair of orthotic back braces billed at $1,200 by a supplier in Houston. A genetic testing kit billed at $1,800 by a lab she has never heard of. A folding wheelchair commode billed at $400, delivered to an address in Dallas. The total on the page is $3,400. Linda has never been to Texas. She does not own a back brace, has not taken any genetic test, and walks without difficulty.

She calls her daughter Marisol. Marisol drives over within the hour. Together they call 1-800-MEDICARE. The wait time is forty-three minutes. When the rep finally comes on, she has heard this exact story today seven times already. She takes the report calmly. She files a fraud case. She refers Linda to the Arizona SMP (Senior Medicare Patrol). She tells Linda to expect a new Medicare number in the mail within two weeks, because her current one is now considered compromised and must be retired.

Linda's actual out-of-pocket loss is zero. Medicare absorbs the fraudulent claims after investigation. But the cost to her is not measured in dollars. It is measured in three things she will never get back. The certainty she felt about her own judgment, gone for the next year. The afternoon her daughter took off work to sit at the kitchen table with her. And the quiet rage of being, at 71, treated like a target.

That was the moment. That was the only moment. Twenty seconds longer on the call than she should have stayed.

Why your Medicare number is gold to a fraud crew

Stop and think about why anyone wants your Medicare number badly enough to run a national phone operation for eight weeks straight every fall. The answer changes how you respond to every call you get during open enrollment season.

A stolen credit card has a useful life of maybe a few days before the bank flags it and the issuer cuts off the number. A stolen Medicare number is different. It can be billed against for months before the beneficiary even notices, because most people do not read their Medicare Summary Notices line by line. The fraud window is enormous. And the billing payout is enormous too.

According to the HHS Office of Inspector General (HHS-OIG) Semiannual Report to Congress published in late 2024, Medicare fraud cases in fiscal year 2024 produced over $7 billion in expected investigative receivables and recoveries, with durable medical equipment, genetic testing, and hospice categories among the most heavily targeted. The Centers for Medicare and Medicaid Services (CMS) has issued repeated public alerts through 2024 and into 2025 warning beneficiaries about open enrollment season fraud surges, naming the card reissue scam, the free genetic testing kit scam, and the unsolicited back brace mailing scam as the three highest-volume categories.

The Senate Special Committee on Aging, in its 2024 Fraud Book and at hearings held throughout the year, emphasized that Medicare fraud is now one of the most lucrative organized crime categories in the United States, costing the program an estimated $60 billion or more per year across all fraud, waste, and abuse categories. The committee also noted that the 1-800-MEDICARE hotline call volume spikes by hundreds of percent during the October to December window, with a significant share of those calls coming from beneficiaries reporting suspicious contact attempts.

One number to hold in your head: your Medicare number, once stolen, can be billed against at thousands of dollars per month for as long as it takes you to read your Summary Notice carefully. That is not a credit card. That is a faucet.

Why October 15 through December 7 is peak scam season

Medicare Open Enrollment runs every year from October 15 through December 7. This is the window during which beneficiaries can switch between Original Medicare and Medicare Advantage, change Part D prescription drug plans, or switch among Medicare Advantage plans. Real plan changes, real letters, real legitimate marketing calls from licensed agents (when the beneficiary has consented in writing) all happen in this window.

Scammers know this. They use the legitimate confusion of the season as cover.

The 2024 AARP Fraud Watch Network reporting, alongside data tracked by state Senior Medicare Patrol programs throughout the year, consistently shows the October to December period producing the highest volume of Medicare-related fraud complaints of any quarter. The FTC Consumer Sentinel Network 2024 data shows government imposter scams (which include Medicare imposter calls) as one of the top reported categories for older adults, with phone calls remaining the dominant contact method.

The FBI Internet Crime Complaint Center (IC3) 2024 Internet Crime Report, released April 2025, documented elder fraud losses exceeding $4.8 billion across all categories for victims aged 60 and over, a sharp increase over 2023. Medicare and health insurance fraud sat among the leading subcategories. The same report flagged "government and business imposter" calls as one of the fastest growing initial-contact methods.

Scammers also know one piece of human psychology that no amount of warning seems to overcome. When someone calls and says "I am from Medicare," many people, especially those who have just received their genuine open enrollment mailing from CMS, assume the call is the next logical step. The caller and the envelope feel like they go together. They do not.

The five active Medicare scam variants right now

These are the variants AARP, CMS, HHS-OIG, and state SMP programs have flagged most aggressively for the 2025 and 2026 open enrollment windows. Recognize the shape of each one. The names of the products and the cover stories shift, but the underlying playbook is identical.

The card reissue scam (what happened to Linda)

The caller claims a new Medicare card is being issued because of a system upgrade, a new program enrollment, fraud activity on your existing number, or a federal rule change. They already have your name, DOB, address, and the last four of your old number from data harvested in prior breaches. They ask you to read the full new Medicare number to "verify" or "update" your record. With the full number in hand, they sell it on a darknet marketplace bundled with thousands of other Medicare numbers, where it ends up being used by fake durable medical equipment suppliers to bill Medicare directly for products you never ordered.

Reality: Medicare never asks you to confirm or read your number over an unsolicited call. New Medicare cards (such as the 2018 to 2019 nationwide reissue that replaced Social Security numbers with the current Medicare Beneficiary Identifier format) are mailed automatically. There is no "new program" you must opt in to over the phone.

The genetic testing kit scam

The caller offers a free cancer or DNA screening kit, often described as "covered 100 percent by Medicare for seniors over 65." A kit gets mailed to you (a real cheek swab kit with branded packaging). You return it. You hear nothing useful back. Months later, Medicare has been billed thousands of dollars for "cancer genetic testing" by a lab that has no real clinical relationship with you and no doctor's order behind the test.

Reality: Medicare covers genetic testing only when ordered by your treating physician for a specific medical reason. Free cheek swab kits offered at health fairs, by phone, or by mailer are almost always a billing fraud setup. CMS has repeatedly warned beneficiaries to refuse any test that arrives unsolicited or that requires you to give your Medicare number to a non-physician.

The durable medical equipment (DME) free back brace scam

A mailer or robocall offers a free Medicare-covered back brace, knee brace, wrist brace, or orthotic shoe insert. "No cost to you. Medicare pays. Just confirm your information." You give your Medicare number to receive the brace. The brace arrives (or sometimes does not). Medicare gets billed at the wholesale-rate-times-eight markup that DME fraud operations specialize in. Sometimes multiple braces get billed under your number even if only one is delivered.

Reality: Medicare covers durable medical equipment when prescribed by your doctor for a documented condition. Unsolicited offers of free braces, scooters, or knee gel injections are the single largest category of Medicare DME fraud per HHS-OIG case data. If you see an unfamiliar DME charge on your Medicare Summary Notice, report it.

The Medicare Advantage high-pressure sales scam

A caller (sometimes an actual licensed insurance agent operating outside CMS marketing rules, sometimes a complete impostor) pressures you to switch your Medicare Advantage plan during open enrollment. They use urgency language. "This plan is only available today." "If you do not switch now you will lose your prescription drug coverage." They may misrepresent benefits, fail to disclose network restrictions, or sign you up for a plan that drops your current doctor.

Reality: CMS rules forbid Medicare Advantage and Part D plan agents from making unsolicited contact, requiring same-day decisions, or misrepresenting benefits. Legitimate plan choices can always be reviewed at medicare.gov/plan-compare or with the help of your state SHIP (State Health Insurance Assistance Program) counselor for free. Never decide on the same call.

The free Covid plus flu test refill scam

A caller offers free at-home Covid and flu combination tests "covered for seniors under Medicare." The premise sounds plausible because Medicare did expand at-home Covid test coverage during the public health emergency. The caller asks for your Medicare number to ship the kits. Sometimes a small box of generic tests arrives. Often nothing arrives. Either way, your number is now in a marketplace bundle and your benefits are being billed against by a fake testing lab.

Reality: Medicare's at-home Covid test coverage rules have shifted multiple times since 2023. The current authoritative source is medicare.gov. Free unsolicited test offers by phone, especially ones that require you to give your Medicare number, are a high-volume fraud category that CMS, AARP, and state SMPs all flagged repeatedly through 2024.

How Medicare actually communicates with you

This is the single most important thing in this entire post. Memorize the real communication pattern and every fake call becomes obvious within ten seconds.

• Medicare uses physical mail as the primary channel. Real open enrollment notices, real Annual Notice of Change documents from your plan, real Medicare Summary Notices, and real card reissues all arrive on paper, in envelopes with the official CMS or Social Security Administration return address.
• Medicare and the Social Security Administration do not make unsolicited phone calls to beneficiaries to confirm or update Medicare numbers. The only time you will speak to a real Medicare representative on the phone is when YOU called 1-800-MEDICARE first.
• Medicare does not text you. Real Medicare communication does not arrive as an SMS message with a link to click.
• Medicare does not email you asking for your Medicare number. Medicare.gov account holders may receive transactional emails about their own logged-in account activity, but those do not request the number itself.
• Medicare does not knock on your door selling Medicare Advantage plans or offering free medical equipment. CMS rules specifically forbid in-person unsolicited Medicare Advantage marketing visits.
• Real Medicare Advantage and Part D plan calls only happen when YOU have given written consent (called a Scope of Appointment form) at least 48 hours in advance, signed and dated. No written consent on file means no legitimate call.

If a caller violates any one of these patterns, the call is fraudulent. Hang up.

Eight red flags during any "Medicare" call

If you find yourself on a call that you did not initiate and the person claims any Medicare or health insurance affiliation, scan for these signals.

• The caller already knows some of your information. Name, DOB, address, last four of your old Medicare number, prior plan name. This is meant to establish trust. In reality it confirms the caller is working from a data-breach leak, not a Medicare system.
• The caller asks you to confirm or read your Medicare number. This is the entire point of the call. Real Medicare never asks.
• Urgency language. "Before the December 7 deadline." "This offer is only available today." "Your benefits will lapse if you do not act now." Real Medicare deadlines exist, but real Medicare communications do not pressure you to give numbers over the phone to meet them.
• Offers of free medical equipment, free tests, or free supplements. Free back brace. Free knee gel. Free DNA cancer screening. Free Covid test refill. Free diabetic supplies. All free. All requiring your Medicare number "just to confirm coverage."
• Caller ID that says "Medicare Help Center", "Medicare Benefits", "CMS Enrollment", "Senior Health Services" or similar official-sounding names. Caller ID is trivially spoofed and means nothing.
• The caller refuses to call you back at the official 1-800-MEDICARE number. Or says you cannot verify them through 1-800-MEDICARE because "this is a special program." Both responses are diagnostic of fraud.
• The caller mentions a "new Medicare card", "new program enrollment", or "system upgrade" requiring your full number to complete. No such program exists.
• Pressure to switch your Medicare Advantage plan on the same call. Legitimate plan changes can wait 24 hours. Anyone who cannot wait 24 hours is not a legitimate licensed agent operating under CMS marketing rules.

The 20-second hang-up rule

The single most effective defense against every variant of this scam is a hard time limit. Decide right now, before any call ever happens, that any unsolicited call mentioning Medicare, health insurance benefits, or a free medical product gets exactly 20 seconds of your time. At 20 seconds you hang up. No matter how polite the caller. No matter how much information they appear to have. No matter what they tell you will happen if you do not continue.

Twenty seconds is enough to confirm the call is not from your doctor, your current Medicare Advantage plan calling about a scheduled appointment you already know about, or a family member. Twenty seconds is not enough to be talked into giving up your Medicare number.

After you hang up, if there is any real possibility the call was legitimate, you call 1-800-MEDICARE (1-800-633-4227) yourself, or your specific plan at the number printed on your insurance card, and verify from your end. Real Medicare always supports being called back. Scammers never do.

What to do if you already gave out your Medicare number

If you are reading this and recognize the call from a week ago or a month ago, do not panic. Do these five things today.

• Call 1-800-MEDICARE (1-800-633-4227) immediately. Report the suspicious call. Request that your Medicare number be flagged for monitoring. In many cases, depending on the timeline and the use of the number, you can request a new Medicare Beneficiary Identifier.
• File a report with your state Senior Medicare Patrol (SMP) at smpresource.org or by calling 1-877-808-2468. SMPs are federally funded volunteer-staffed programs in every state, dedicated to helping older adults identify and report Medicare fraud. Their counselors will walk through your Medicare Summary Notices line by line with you.
• Review your Medicare Summary Notice (MSN) line by line every quarter going forward, and your Medicare Part D Explanation of Benefits monthly. Flag any provider, supplier, or service you do not recognize. Even small unfamiliar charges can be early indicators of test billing before larger fraud.
• File at HHS-OIG at oig.hhs.gov/fraud/report-fraud or call the HHS-OIG hotline at 1-800-HHS-TIPS (1-800-447-8477). This is the federal investigative channel for Medicare and Medicaid fraud.
• Report to FTC at reportfraud.ftc.gov and to your state Attorney General consumer protection division. These reports feed the federal data sets that drive enforcement priorities.

If you also gave out your Social Security number, your bank account, or your full credit card number on the same call, treat those as compromised too. Place a free fraud alert at the three credit bureaus (Equifax, Experian, TransUnion), freeze the affected bank account, and consider opening a recovery plan at IdentityTheft.gov.

How to report the scam call itself

Even if you hung up at 20 seconds and gave nothing, reporting the call helps the next person. Five minutes of your time, real reduction in volume for someone else's grandmother next week.

• 1-800-MEDICARE (1-800-633-4227) takes suspicious-call reports. Have the caller ID display name, the date and time, and any details you remember.
• Senior Medicare Patrol at smpresource.org or 1-877-808-2468. SMPs feed their data into a federal database that CMS uses for fraud pattern analysis.
• FTC at reportfraud.ftc.gov. The Consumer Sentinel database that the FTC maintains is queried by federal, state, and local law enforcement.
• HHS-OIG hotline at 1-800-HHS-TIPS or oig.hhs.gov/fraud/report-fraud. Direct federal investigative channel.
• AARP Fraud Watch Network helpline at 1-877-908-3360. Free to call whether you are an AARP member or not. They will document the call and connect you with state resources.
• FBI Internet Crime Complaint Center at ic3.gov if the call involved any internet component (a link, an email follow-up, a website mentioned).

Last updated 2026-05-30

How SafeBrowz blocks this threat

SafeBrowz runs a 3-layer detection architecture: Local + APIs + AI.

• Layer 1, Local detection: 60+ URL patterns and 550+ brand-specific signatures run directly in your browser. The Medicare, Social Security Administration, AARP, and major Medicare Advantage carrier brands (UnitedHealthcare, Humana, Aetna, Anthem, Cigna, Kaiser Permanente) are all in the database. Lookalike sites like medicare-enrollment-help.com, medicare-card-reissue.us, or medicare-benefits-portal.org get caught at click time, before any form loads, before any data is entered.
• Layer 2, API checks: Google Safe Browsing, PhishTank, and URLhaus cross-references run server-side. Catches known malicious health-imposter domains the moment they are reported anywhere in the world, including the throwaway lookalike sites that fraud crews spin up for each open enrollment season.
• Layer 3, AI deep scan (Premium): Content analysis flags brand-new Medicare and Social Security imposter pages that no blocklist has seen yet. Works in over 100 languages, which matters for the multilingual variants of this scam aimed at Spanish-speaking, Chinese-speaking, and Vietnamese-speaking US senior communities.

Detection signatures are derived from threat-intelligence research and our internal brand database, not from user browsing data. SafeBrowz does not store per-user browsing history.

FAQ

Does Medicare ever call beneficiaries directly?

No. Medicare and the Social Security Administration do not make unsolicited phone calls asking you to confirm, verify, or read your Medicare number. The only time you will speak to a real Medicare representative on the phone is when you called 1-800-MEDICARE (1-800-633-4227) first. Anyone who phones you and claims to be Medicare is either a fraudster or, in rare cases, a licensed Medicare Advantage or Part D plan agent acting against CMS marketing rules. Either way, hang up and call 1-800-MEDICARE yourself to verify if you have any doubt.

Why do scammers always know my name and last four digits?

Because that information has been leaked in past data breaches and bought from underground forums. Name, date of birth, mailing address, and partial Medicare or SSN digits have been exposed in healthcare provider breaches, insurer breaches, retailer breaches, and clearinghouse breaches over many years. Scammers use those partial details to sound legitimate. The fact that a caller already knows three or four pieces of your information is not evidence the call is real. It is the actual technique. Real Medicare does not need to verify your number by reading it back to you over the phone.

I gave out my Medicare number. Am I going to lose my benefits?

Almost certainly not, if you report quickly. Medicare absorbs the fraudulent claims after investigation and your benefits continue. You will not be billed personally for the fraudulent equipment or tests. The main impact is the time it takes you to work with 1-800-MEDICARE, your Senior Medicare Patrol counselor, and possibly HHS-OIG to document and resolve the case. You will likely be issued a new Medicare Beneficiary Identifier (a new number) within a few weeks. Continue using your existing card until the new one arrives.

What is the Senior Medicare Patrol (SMP) and what do they do?

The Senior Medicare Patrol is a federally funded volunteer program with offices in every US state, the District of Columbia, and US territories. Funded by the Administration for Community Living (ACL), SMPs help Medicare beneficiaries recognize, prevent, and report Medicare fraud, errors, and abuse. They will sit with you, free of charge, and walk through every line of your Medicare Summary Notice. They will file fraud reports on your behalf with CMS and HHS-OIG. You can find your state SMP at smpresource.org or by calling 1-877-808-2468.

I got a "free back brace" mailer. Is the company real?

Almost always no. Unsolicited mailers and robocalls offering free Medicare-covered back braces, knee braces, wrist braces, orthotic inserts, knee gel injections, or scooters are the single largest category of Medicare durable medical equipment fraud per HHS-OIG case data. Real durable medical equipment is prescribed by your treating doctor for a documented medical condition, supplied by a Medicare-enrolled supplier you and your doctor chose together. If you received a brace mailer or call, do not respond. If you already gave them your Medicare number, call 1-800-MEDICARE and your SMP today.

How do I find a real Medicare Advantage plan during open enrollment without getting scammed?

Three legitimate channels. First, visit medicare.gov/plan-compare directly (type the URL yourself, do not click ads). Second, call 1-800-MEDICARE (1-800-633-4227) for the official help line. Third, contact your state SHIP (State Health Insurance Assistance Program) at shiphelp.org for free unbiased one-on-one counseling. SHIP counselors are not paid by insurance companies and will help you compare plans without sales pressure. Never make a same-day decision on an unsolicited call. Real plan choices can always wait 24 hours.