Watch out for these Medicare fraud red flags

It’s important to know who you can trust to help protect your private information. UnitedHealthcare is by your side, taking steps to help protect you from fraud and scams. Learn how to spot red flags and what you can do to protect yourself.

What we’ll never do: UnitedHealthcare will never ask for your Medicare ID number by text, email or social media. Any messages you receive asking to share your Medicare ID number, even if they appear authentic, could be an attempt to steal your personal information. 

What you can do: Keep your Medicare card close and guard your ID number. Don’t share your Medicare ID number with anyone other than your health care provider or an authorized representative. You should treat your Medicare ID like you would your Social Security number or credit cards. 

What we’ll never do: UnitedHealthcare will never ask for your HealthSafe ID® access code. Your HealthSafe ID® helps protect the security of your personal health information when you access your UnitedHealthcare online account.

What you can do: Do not share your login credentials with anyone. Your username and password are like keys to a vault containing your private health data. Letting someone access your member account could lead to medical identity theft or fraudulent claims.

Also beware of anyone asking for your HealthSafe ID® access code, which is typically sent to you via text message, email, or a phone call. This may be an attempt to bypass the two-factor authentication that keeps your account secure. Contact UnitedHealthcare immediately if you receive an access code you did not request.

What we’ll never do: UnitedHealthcare will never offer “free” medical services or products in exchange for your Medicare or member ID number. One strategy that scammers use is to offer something for free in exchange for sensitive information. Do not click on any links in text messages, emails or social media posts with these sorts of offers.

What you can do: Stay vigilant when you receive an offer via email, text message or over the phone. Phishing schemes often promise a reward or put pressure on potential victims to get them to share sensitive information. 

What we’ll never do: UnitedHealthcare will never approach you without an appointment. Our representatives will not surprise you with an unscheduled visit to your home. UnitedHealthcare will always contact you ahead of time before meeting with you.

What you can do: Do not accept anything from anyone claiming to be a Medicare plan agent or representative. UnitedHealthcare insurance agents won’t come to your home unless you ask them to. And Medicare will not send a representative to your home to sell products or services.

5. Something isn’t correct in your Medicare Summary Notice (MSN) or your Explanation of Benefits (EOB)

What we’ll never do: UnitedHealthcare will never stop monitoring claims. Monitoring claims helps us verify that health care transactions are valid. This is an important step for preventing fraud and protecting your privacy. In 2025 alone, our Medicare fraud, waste and abuse initiatives saved an estimated $1.5 billion for Medicare and those it serves, including you.

What you can do: Keep a close eye on your Medicare Summary Notices or Explanation of Benefits. Check to make sure the health services you received are reflected on these notices. Also check to make sure there aren’t any services listed that you didn’t receive. If you spot something that you think is an error, report it.

No matter how legitimate a communication may look, it could be an attempt to get your Medicare ID number or your member site username and password. 

If you suspect an incident is fraud or abuse, you have several ways to report it. Start an online report or call one of the following numbers:

• Call the number on your ID card
• Call 1-844-359-7736 if you’re a UnitedHealthcare member
• Call 1-800-MEDICARE if you’re a Medicare member