I Gave My Medicare Number to a Scammer — What Happens Next

Your mother just told you, almost casually, that she gave her Medicare number to a nice woman on the phone who was "updating her file." Or maybe your father mentioned he confirmed his information for a "free genetic testing kit" someone called about.

Either way, the damage is done. A scammer now has your parent's Medicare Beneficiary Identifier — and if they also got a date of birth or Social Security number, the situation is significantly worse.

The good news is that Medicare fraud is recoverable if you act quickly. The bad news is that most families don't realize anything happened until fraudulent charges appear weeks later. Here's what you need to do right now, and what to watch for in the weeks ahead.

What a scammer can do with a Medicare number

A stolen Medicare number is valuable because it unlocks the ability to bill the federal government. Here's what happens once a scammer has it:

Fraudulent billing. The most common use. The scammer — or the criminal network they sell the number to — submits claims to Medicare for medical equipment, lab tests, or services your parent never received. Durable medical equipment (back braces, knee sleeves, wheelchairs) and genetic testing are the most frequent categories because they're high-dollar items that don't require an in-person visit to bill.

Medical identity theft. Someone uses your parent's Medicare number to receive medical care in their name. This is particularly dangerous because it corrupts your parent's medical record. If a stranger's blood type, allergies, or conditions end up in your parent's file, it could lead to a dangerous misdiagnosis or incorrect treatment down the road.

Sale on the dark web. Stolen Medicare numbers are sold in bulk. A single Medicare number can fetch $1 to $100 depending on the completeness of the identity package (name, DOB, SSN, address). Once sold, the number may be used by multiple actors for different types of fraud.

Identity theft escalation. If the scammer also obtained your parent's Social Security number, the Medicare number is just the beginning. Combined with a name and date of birth, these credentials can be used to open credit accounts, file fraudulent tax returns, or apply for government benefits.

Step 1: Call 1-800-MEDICARE immediately

The number is 1-800-633-4227. TTY users can call 1-877-486-2048. The line is available 24 hours a day, 7 days a week.

When you call, tell them your parent's Medicare number may have been compromised. Ask them to:

• Flag the account for potential fraud
• Issue a new Medicare Beneficiary Identifier (MBI). Medicare can replace the compromised number with a new one. A new card will arrive by mail within 30 days.
• Note the date and details of how the number was compromised

Have your parent's current Medicare card available when you call, along with their full name, date of birth, and the approximate date they shared the information.

Step 2: Review Medicare Summary Notices

Medicare Summary Notices (MSNs) are mailed every three months. They list every service, supply, and piece of equipment billed to your parent's Medicare number. If you don't currently review these with your parent, start now.

Look for:

• Services or procedures your parent doesn't remember receiving
• Medical equipment that was never delivered
• Dates of service when your parent was at home, not at a medical facility
• Provider names or clinic addresses your parent doesn't recognize

You can also check claims online by creating a Medicare.gov account for your parent (or helping them log into their existing one). Online claims are updated more frequently than mailed MSNs.

If you find anything suspicious, report it immediately using the steps in our guide on how to report Medicare fraud.

Step 3: Contact the Senior Medicare Patrol

The Senior Medicare Patrol (SMP) is a national network of volunteers who help Medicare beneficiaries detect and report fraud. Call 1-877-808-2468 to connect with your state's SMP program.

SMP volunteers can:

• Help you review Medicare statements and identify suspicious charges
• Walk you through the fraud reporting process
• Provide ongoing support if the investigation takes time

This service is free and specifically designed for exactly this situation.

Step 4: Place a fraud alert on your parent's credit file

Even if the scammer only got the Medicare number, place a fraud alert as a precaution. If they also obtained a Social Security number or date of birth, a fraud alert is essential.

Contact any one of the three credit bureaus — they're required to notify the other two:

• Equifax: 1-800-525-6285
• Experian: 1-888-397-3742
• TransUnion: 1-800-680-7289

A fraud alert lasts one year and requires creditors to take extra steps to verify identity before opening new accounts. For stronger protection, consider a credit freeze, which blocks new credit applications entirely until you lift it.

Step 5: File official reports

FTC: File at ReportFraud.ftc.gov. This feeds a national database used by law enforcement.

FBI IC3: If the scam involved the internet or phone, file at ic3.gov.

Local police: File a report with your parent's local police department. Ask for a copy of the report number — you may need it for insurance or credit disputes.

State Attorney General: Many state AG offices have elder fraud divisions. Find yours at naag.org.

What to watch for in the coming months

Fraudulent Medicare billing often doesn't appear immediately. Scammers may wait weeks or months before using a stolen number to reduce the chances of the victim connecting the fraud to the original phone call. Stay vigilant for at least six months after the incident.

Mail to watch for:

• Explanation of Benefits (EOB) statements with unfamiliar charges
• Bills from medical providers your parent has never visited
• Medicare Summary Notices listing equipment or services not received
• Letters from Medicare about coverage changes your parent didn't request

If medical equipment arrives unsolicited: Do not use it and do not throw it away. Note the sender's information and report it to 1-800-MEDICARE. Unsolicited equipment is a strong indicator that someone is billing Medicare in your parent's name.

Preventing it from happening again

The core problem is that Medicare scam calls sound legitimate. Scammers use official-sounding language, reference real Medicare programs, and call during Open Enrollment season when seniors are expecting communications about their coverage.

The single most effective defense is a simple rule your parent can memorize:

"Medicare will never call me to ask for my Medicare number. If someone calls from Medicare, I hang up and call 1-800-MEDICARE myself."

This is factually true. Medicare does not make unsolicited calls to beneficiaries asking for personal information. Any call requesting a Medicare number is fraudulent, regardless of how professional it sounds or what caller ID shows.

Write this rule on a card and tape it next to the phone. Practice it. Make sure your parent can recite it from memory.

For a complete set of printable defense tools — including the Refrigerator Defense Sheet with this rule and others, call scripts, and a step-by-step guide to locking down your parent's accounts — the Elder Scam Shield guide has everything in one toolkit for $14.