Medicare-related messages may be genuine during Open Enrollment, but scammers can copy their look and wording. Verify unexpected contact through Medicare.gov or 800-633-4227 before sharing information.
In 60 seconds
- People with Medicare may receive coverage messages from October 15 through December 7, but similar-looking outreach may be fraudulent.
- Check unexpected contact through Medicare.gov or 800-633-4227, using details found separately from the message.
- Do not share Medicare, Social Security, password, medical, bank or card details under pressure.
- If you shared information, contact Medicare, your bank if needed, the Federal Trade Commission and your insurer or provider.
Who should care and what to do today
This warning concerns people who use Medicare and anyone helping them review Medicare-related messages or enrollment decisions. ESET says Open Enrollment runs from October 15 through December 7. A real deadline can make a false message about changing coverage sound believable.
Ask whether you requested the call, text, email or online contact. General safety guidance: if you did not request it, do not reply, follow its links or use its phone number. Type Medicare.gov into your browser yourself, or call Medicare at 800-633-4227 to check the request.
ESET also advises caution with online searches. It identifies Medicare.gov as the official Medicare site and says HealthCare.gov is used to check whether someone qualifies for savings.
How the scam may look
ESET says scammers may call, text, email, send social media messages or place online ads. Some ads imitate Medicare, an insurer or a specialist agency with official-looking logos and wording.
The message may say that a Medicare card needs replacing, coverage is changing, an account has suspicious activity, or a person can get a lower premium or extra benefits. It may also claim that a plan must be changed by December 7.
Pressure is a warning sign, especially when an unexpected contact asks for personal, financial or health information or promises benefits that seem unusually good. ESET says people should be able to question the contact and verify it separately. If a call pressures you or does not give you a clear way to verify the caller, hang up and check through Medicare.gov or 800-633-4227.
What information may be requested
ESET lists Medicare numbers, Social Security numbers, dates of birth, phone numbers, email and home addresses, passwords, health information and insurance details among the information scammers may seek. They may also ask for bank account or card information.
According to ESET, the information could support identity fraud, access to bank or other accounts, fraudulent Medicare claims, or attempts to change enrollment. ESET also says misuse could affect coverage, medical records, prescriptions and access to care.
ESET says a genuine representative may call during Open Enrollment. The caller should identify the organization, explain why they are calling, avoid pressure and allow you to hang up and verify the contact. These points help with checking a call; they do not prove that every caller who follows them is genuine.
If information was already shared
Contact Medicare through Medicare.gov or 800-633-4227, and report the incident to the Federal Trade Commission at ReportFraud.ftc.gov and to your state attorney general. Check Medicare claims and records for charges or services you do not recognize.
If bank or card details were shared, contact the bank and ask about freezing the card. If identity information was shared, ESET recommends considering a report through IdentityTheft.gov. Contact a health care provider or insurer if you find fraudulent activity.
Change any password given to the scammer, including on other sites where the same password was reused. ESET warns against paying anyone who later promises to recover money or repair the account for a fee. That follow-up may be another scam.
Does this affect me?
- Who may be affected
- People who use Medicare and anyone helping them review Medicare-related messages or enrollment decisions should care about this alert.
- How to check
- Ask whether the contact was requested, then verify it through Medicare.gov or 800-633-4227 using details found separately.
- What to do
- Stop replying or end the call, and verify or report the contact before sharing personal, health or payment information.
- What to avoid
- Do not use links, phone numbers or search ads from an unexpected contact as proof that it is genuine, and do not pay for promised recovery help.
Common questions
When is Medicare Open Enrollment?
According to ESET, it runs from October 15 through December 7 each year. The real deadline can make a scammer’s urgent story sound more believable.
Can Medicare or an insurer call during Open Enrollment?
Yes. ESET says Medicare, an insurer or another organization may call. A caller should identify the organization, explain the reason for the call, avoid pressure and let you verify the contact. If you are unsure, hang up and use Medicare.gov or 800-633-4227 to check.
What information should I avoid giving to an unexpected caller?
Do not provide your Medicare number, Social Security number, password, medical details, insurance information, bank details or card number until you have independently verified the contact.
What should I do if I already gave a scammer my details?
Contact Medicare, report the incident to the Federal Trade Commission and your state attorney general, and contact your bank if payment details were shared. Check Medicare records, notify your provider or insurer about suspicious activity, and change exposed passwords. Do not pay someone who promises recovery for a fee.
Primary source
Based on ESET, “Medicare scam calls, texts and ads: What to watch for this Open Enrollment,” published October 14, 2026: https://www.welivesecurity.com/en/scams/medicare-open-enrollment-season-scams/. General safety guidance is labeled where used. Read the complete original source.
Get the important updates without the noise
Choose the devices and topics you care about in Cyber Alerts.
Article history: Published Oct 15, 2026 at 8:03 am EDT. Updates and corrections are noted here when material facts change.
