Healthcare-Related Spoofing & Scams
How to Recognize and Avoid Healthcare Scams
Protecting patient privacy and personal information is one of our highest priorities. At Sarasota Memorial, we have layers of security built into our systems to help prevent unauthorized access to patient information. Unfortunately, hospitals are seeing an increase in cyberattacks and breaches on insurance providers and third-company companies processing medical information on behalf of patients. Spoofers and scammers use stolen data to impersonate physician practices and other medical providers and trick patients into sharing personal information.
Following are some of the more common spoofing and healthcare-related scams:
1. Impersonating a Doctor’s Office or Hospital Caller ID
Scammers can make phone calls appear as if they are coming from a hospital, physician practice or other trusted healthcare provider. Although the number looks familiar, they falsify their caller ID and may use your doctor’s name to confirm your date of birth, Social Security, Medicare or credit cards. Never share sensitive information in unsolicited calls. Just hang up and call your provider back directly. Click here to learn more about Caller ID Spoofing.
2. Name and Logo Misuse
Cyberthieves use familiar hospital and physician names, and their brand logos in fraudulent emails, texts and websites to trick you into clicking on links and providing personal or insurance information. Cloned websites and emails can be tough to spot – look for the slightest change to their web URL or sender address.
3. “Urgent” Requests for Information
Scams often include urgent requests. They may say you need to pay a bill, verify your insurance or confirm personal details “immediately” to avoid fees, penalties or delays in care.
4. Fake Patient Portals or Billing Sites
Scam websites may mimic real healthcare portals to collect login credentials, Social Security numbers, or Medicare/insurance information. If you are a senior on Medicare, you can get reporting assistance from the Senior Medicare Patrol or by calling 1-877-808-2468.
5. Targeting Patients Through Social Media and Public Records
Scammers can access multiple databases to gain information about you. Through public and commercial records, they can gather your name, date of birth, street addresses and other profile information. They can discover health issues and hospital stays through social media posts shared by you, your family or a friend. Scammers use that information, along with stolen data, to make their scams appear legitimate.
6. Medical supplies or RX billing scams
Scammers call or text offering "free" or "low-cost" medical supplies, equipment such as back or knee braces, and prescriptions. They trick you into sharing your insurance or Medicare number, then use your details to bill your insurance for items you do not need and send you fake, expired or questionable items to your door.
Reporting healthcare-related scams can help prevent others from becoming a victim.
For Phone Scams
FCC Complaint Hotline: 1-888-CALL-FCC (1-888-225-5322)
File a Complaint Online: consumercomplaints.fcc.gov
Register for the National Do Not Call Registry, which stops calls from real companies.
For Medicare/Medicaid Related Scams
HHS Office of Inspector General: 1-800-HHS-TIPS
File a Complaint Online: oig.hhs.gov/fraud/report-fraud/#submit-a-hotline-complaint
Financial/Identity Theft
Law Enforcement: Contact the non-emergency line of local law enforcement to document the scam, especially if you accidentally shared financial details or personal information.
What SMH Will—and Will Not—Do
SMH may:
- Call to confirm appointments
- Send billing statements or call about outstanding balances
- Request insurance updates through secure, verified channels
- Verify personal information for new patients registering for the first time
SMH will NEVER:
- Call you unexpectedly to ask you to sign up for Medicare or Medicaid or request your Social Security number or financial information in this way
- Demand immediate payment via gift cards, wire transfers, or prepaid cards
- Threaten loss of care if you do not provide personal information immediately
If you receive a suspicious call or text, just hang up. Do not click any links or open any attached files. Find the real number for the hospital or your doctor's office on an old billing statement, the official website, or by searching a trusted directory.
You can also send a report to SMH at: SMHFraudReporting@smh.com
Do not include Social Security numbers, financial information, medical information or other sensitive personal data in your email. SMH collects this information for tracking and reporting purposes only and cannot guarantee scam attempts will not happen again. Thank you for helping us stay informed.