Medicare Scams and Family Helpers: What to Watch For

Confusion, urgency, and official-sounding language are the three pressure points scammers use. Helpers are often the last line of defense — and sometimes the target.

Medicare scams cost beneficiaries billions a year and are designed to work even on careful people. The most common are: unsolicited calls offering a “new Medicare card” or “additional benefits,” door-to-door visits, phishing emails or texts, fake notices in the mail, and high-pressure “free reviews” that turn into identity-collection sessions. The strongest defense is a simple rule the whole family agrees to: Medicare numbers are not shared with anyone who calls or shows up uninvited, and any decision involving a Medicare number happens with at least one other family member present.

Reading about scams is uncomfortable. That is reasonable. You are not being paranoid by learning the patterns. You are being careful.

The short answer

Medicare-related scams share three features: confusion (the script is designed to be confusing), urgency (the deadline is fake), and official-sounding language (the caller claims to be from Medicare, SSA, or a “Medicare benefits department”). Medicare itself almost never calls without prior contact. Real Medicare communications are by mail. The single most protective rule for families: the Medicare Beneficiary Identifier (MBI) is shared only with providers and trusted plan staff that the beneficiary initiated contact with. Everything else — every unsolicited offer, every “you qualify for additional benefits” pitch, every “we need to verify your card” call — is either a scam or a sales call dressed as one.

How this applies to you

If you have been receiving calls and mail you are not sure about. Read the four common patterns below first. Most of what you are seeing is in one of them.

If your parent has already given out their Medicare number to a caller. Stop and read the “What to do if information has already been shared” section. There is a process. It is not a crisis if handled within days.

If your parent has agreed to or paid for something that does not feel right. Report it. SMP, FTC, and Medicare can all help, and recovery is sometimes possible.

If you suspect ongoing exploitation. Adult Protective Services (in every state) handles financial exploitation of older adults. The state attorney general’s office is another channel. Do not let embarrassment delay reporting.

The four most common Medicare-related scams

1. The “new Medicare card” call.

The caller claims to be from Medicare or a related agency, says a new Medicare card is being issued, and asks the beneficiary to “verify” their Medicare number (MBI), Social Security number, bank account, or other personal information.

Reality: Medicare does not call to verify cards. New cards are issued automatically. The MBI on the card has been used since 2018-2019, replacing Social Security numbers specifically to reduce this fraud. There is no “new card program” that requires verifying anything by phone.

2. The “additional benefits” or “free benefit” pitch.

A caller, mailer, or TV ad promises additional Medicare benefits — money back on the Part B premium, grocery cards, gym memberships, dental coverage, hearing aids — and asks the beneficiary to call a number, share Medicare information, or schedule a meeting.

Reality: Some Medicare Advantage plans offer supplemental benefits, and Medicare Savings Programs help low-income beneficiaries with premiums. But these are not advertised by unsolicited callers, and signing up is not done by phone with strangers. The pitch is the front end of either a plan-switch sale or, in some cases, outright fraud (using the MBI to bill Medicare for services never rendered).

3. The fake notice in the mail.

A piece of mail that appears to be from Medicare, SSA, or a government agency, warning of a problem with the account, an unpaid bill, or a benefit that requires immediate response. Includes a phone number to call or a website to visit. The response then collects personal information or pressures a plan change.

Reality: Real Medicare and SSA mail does not threaten loss of benefits to create urgency. Real mail does not require calling an unfamiliar number to “verify” anything. If the mail looks alarming and threatens consequences for non-response, that itself is a sign it is not real. Verify by calling Medicare or SSA directly using the number from the back of the Medicare card or Medicare.gov.

4. The high-pressure “free review” turned data collection.

In person at a senior center, library, or restaurant; or online via webinar; or by appointment at the beneficiary’s home. The “free review” promises plan-neutral education or a personalized recommendation. In practice, it collects: full name, date of birth, MBI, current plan, doctors, prescriptions, sometimes Social Security number and bank account.

Reality: Sometimes the host is a legitimate agent (which is a sales conversation, not a scam — but still not a neutral review). Sometimes the host or follow-up contact is fraudulent and the collected data is used to enroll the person in a plan they did not authorize, bill Medicare for services not rendered, or sold to other parties.

The specific signals to watch for

A few specific phrases and behaviors that should immediately raise the helper’s alertness:

• “We just need to verify your Medicare number.” Medicare does not verify by phone.
• “You may be eligible for additional benefits.” Always sales or fraud; never an unsolicited legitimate offer.
• “This is your final notice.” Real Medicare notices do not threaten “final” anything.
• “I’m calling from Medicare.” Medicare does not cold-call.
• “Don’t tell anyone we offered you this.” Anything described as confidential or exclusive to one person is not legitimate.
• “We can fix this if you act today.” Urgency is a sales tactic, not a property of real Medicare situations.
• “Press 1 to speak with a Medicare benefits specialist.” Real Medicare does not robo-call.
• “You qualify for grocery / utility / rent assistance through Medicare.” Medicare does not pay for groceries, utilities, or rent. (Some MA plans have limited supplemental benefits — those are accessed through the plan, not through unsolicited callers.)
• A request for bank account, Social Security number, or credit card information “to process the benefit.”
• A request to keep the call secret from family. This is one of the strongest signals of financial exploitation.

What Medicare will never do

A short list that the whole family should know. Medicare will not:

• Call without prior contact (with rare exceptions for return calls to the beneficiary’s request).
• Ask for the Medicare number to “verify” anything by phone, email, or text.
• Threaten loss of benefits if the person does not respond immediately.
• Show up at the door.
• Ask for payment in gift cards, wire transfers, or cryptocurrency.
• Pressure a plan change.
• Send a “Medicare representative” to the home unsolicited.

If any of these things happen, it is not Medicare.

The single most protective family rule

The strongest defense is one rule, simple enough for the whole family to remember:

The Medicare Beneficiary Identifier (MBI) is shared only with providers and trusted plan staff that the beneficiary or family initiated contact with. Never with anyone who calls, emails, texts, or shows up uninvited.

If the family agrees to this rule and practices it, most Medicare-related scams stop working. The MBI is the key to billing Medicare. Without it, fraudsters cannot bill for services not rendered. Without it, identity theft becomes much harder. Protecting the MBI is the single most important practical step.

A second rule that helps:

Any decision involving the MBI, an enrollment change, or a payment happens with at least one other family member or trusted helper present.

This is not condescending. Most adults benefit from a second pair of eyes on important decisions, especially when sales pressure or confusion is in the conversation.

What to do if information has already been shared

If the MBI, Social Security number, or financial information has been given out, the response depends on what was shared.

If the MBI was shared: - Call 1-800-MEDICARE immediately and report. Medicare can flag the account and watch for suspicious billing. - Watch the next several MSNs or EOBs carefully for services not received. - Contact the SMP for your state — smpresource.org — for help monitoring.

If a Social Security number was shared: - Call the SSA fraud hotline: 1-800-269-0271. - Place a fraud alert with the three credit bureaus (Equifax, Experian, TransUnion) — one alert with one bureau triggers alerts at all three. - Consider a credit freeze, which prevents new accounts from being opened. Free under federal law. - File an identity theft report at identitytheft.gov.

If financial information was shared and money was sent: - Contact the bank immediately. Some transactions can be reversed if reported quickly. - File a report with the FTC at reportfraud.ftc.gov. - File a report with the local police, especially for larger amounts. - Report to the state attorney general’s consumer protection division.

If a plan change was made without authorization: - Call Medicare immediately. There are specific processes for reversing unauthorized enrollments. - SHIP can help navigate the reversal. State-level enforcement (state insurance commissioner) is also available.

Speed matters in all of these. The first 24-48 hours after discovery are the most actionable window.

Reporting channels — when, where, why

Senior Medicare Patrol (SMP) — smpresource.org — federally funded volunteer program specifically for Medicare fraud, errors, and abuse. The right first call for suspected Medicare scams. Free.

Medicare Fraud Hotline — 1-800-MEDICARE — for reporting suspected fraud directly to CMS.

Federal Trade Commission (FTC) — reportfraud.ftc.gov — for any consumer fraud, including Medicare-adjacent scams. Builds the federal database that supports enforcement.

State Attorney General — most states have a consumer protection division that takes consumer fraud reports.

Adult Protective Services (APS) — for suspected financial exploitation of an older adult, especially by a family member or caregiver. Available in every state.

Local police — for crimes in progress or where money has been lost.

Reporting is not optional, even if the loss seems small. The reports build the patterns that eventually lead to enforcement. Many of the biggest Medicare fraud cases were built on hundreds of small reports.

A short note on shame

People who get scammed sometimes do not tell their families because they are embarrassed. The shame is misplaced — modern scams are designed by professionals to defeat ordinary defenses. Falling for one is not a failure of intelligence.

The most useful thing a helper can do is name this openly. “If something does not feel right, or if you ever wonder whether something was a scam, just tell me. I will not judge. I will just help.” That sentence, said once a year, prevents more harm than any specific warning about a specific scam pattern.

You are not being paranoid by being careful. You are being a good helper.