Medical Records Request Scam: Providers, Watch out for Phishing

phishing, medical records request scam, graphic of woman doctor looking at patient's file on computer

The Centers for Medicare and Medicaid Services (CMS) identified phishing scams for medical records. This may include scammers faxing you fraudulent medical records requests to get you to send patient records in response; see example (PDF).

When you review any requests, look for signs of a scam, including:

  • Directing you to send records to an unfamiliar fax number or address
  • Referencing Medicare.gov or @Medicare (.gov)
  • Indicating they need records to “update insurance accordingly” 

A scam request may include:

  • Poor grammar, misspellings, or strange wording
  • Incorrect phone numbers
  • Skewed or outdated logos
  • Graphics that are cut and pasted

If you think you may have received a fraudulent or questionable request, work with your Medical Review Contractor to confirm if it’s real. Submit medical documentation through the Electronic Submission of Medical Documentation (esMD) system or CMS medical review contractor secure internet portals, when available. You can also contact our California Senior Medicare Patrol at 1-855-613-7080.

Karen Joy Fletcher

Karen Joy Fletcher

Our blogger Karen Joy Fletcher is CHA’s Communications Director. With a Masters in Public Health from UC Berkeley, she is the online “public face” of the organization, provides technical expertise, writing and research on Medicare and other health care issues. She is responsible for digital content creation, management of CHA’s editorial calendar, and managing all aspects of CHA’s social media presence. She loves being a “communicator” and enjoys networking and collaborating with the passionate people and agencies in the health advocacy field. See her current articles.

News & Blog Categories

Archives