Why this is worse than ordinary identity theft
A stolen credit card creates a wrong number on a statement. Stolen medical identity creates wrong information inside a clinical record — someone else's blood type, allergies, medications, diagnoses or procedures filed under your name.
That record follows you into an emergency room where nobody has time to question it. The financial harm is recoverable; a contaminated chart is a safety problem, and it is the reason to treat any suspicious claim as urgent rather than administrative.
The warning signs
Most victims find out through paperwork, not a phone call. These are the signals worth acting on immediately:
- An Explanation of Benefits listing a visit, test, procedure or piece of equipment you never received.
- A bill or collections notice from a provider you have never seen.
- A denial that says you have already reached a benefit limit you have not used.
- A call about medical equipment, genetic testing or braces you never ordered — a common Medicare fraud pattern.
- Your health plan says you are already enrolled elsewhere, or a prescription is refused as a duplicate.
- A medical record or portal entry showing a condition, medication or allergy that is not yours.
What to do, in order
Speed matters, and the order matters — the affidavit you generate in step two is what unlocks cooperation from providers in step four.
| Step | Action | Why it matters |
|---|---|---|
| 1 | Call your insurer's fraud line and Medicare if applicable | Freezes further claims and starts an internal investigation. |
| 2 | Report at IdentityTheft.gov | Generates a personal recovery plan and an FTC Identity Theft Report you can send to providers. |
| 3 | File a police report if a provider or debt collector requires one | Some organisations will not act without it. |
| 4 | Request copies of the medical records at every provider involved | You cannot correct what you have not seen. Federal privacy rules give you a right of access. |
| 5 | Send a written amendment request to each provider | Ask them to flag or remove the entries that are not yours, and to notify anyone they shared them with. |
| 6 | Check your credit reports and dispute medical collections | Fraudulent medical debt often surfaces there months later. |
How to reduce your exposure
Nothing prevents a data breach at a provider or insurer, and most medical identity theft starts there rather than with anything you did. What you can control is how easy the follow-up is.
- Treat your insurance ID and Medicare number like a credit card number — never give either to an unsolicited caller, texter or door-knocker.
- Nobody legitimate offers free braces, test kits or equipment in exchange for your Medicare number.
- Read every Explanation of Benefits, including the ones that say you owe nothing. That is where fraud shows first.
- Keep your own list of visits and prescriptions so you can prove what you did receive.
- Ask providers how they dispose of records, and shred anything with a member ID on it.
- Be cautious about health forms on sites that do not explain who receives your information.
Where to report
Use the official routes below. All are free, and none of them will ask you to pay for a recovery service.
- IdentityTheft.gov — the Federal Trade Commission's reporting and recovery-plan service.
- Your insurer's fraud hotline — printed on the back of your member card.
- 1-800-MEDICARE — for anything involving a Medicare number.
- The HHS Office of Inspector General hotline — for suspected provider or billing fraud.
- Your state insurance department — for a carrier that will not investigate.