FBI Warns of Health Insurance Scams Targeting Your Personal Data

• Health Insurance
• Phishing Scams
• Identity Protection

Cybercriminals are impersonating health insurance providers to steal sensitive information. Learn how the scam works and how to protect yourself.

New Warning from the FBI: Health Insurance Scam on the Rise

If you've received a suspicious text or email claiming to be from your health insurer, be cautious. The FBI has issued a warning about scammers impersonating legitimate health insurance agents and investigators to steal personal and medical information.

How the Health Insurance Scam Works

Cybercriminals are sending deceptive messages to individuals and health care providers, designed to appear as legitimate communications from trusted health authorities. Their aim is to trick recipients into handing over personal data, such as:

• Health insurance policy details
• Medical record information
• Social security numbers (SSNs)
• Banking or contact information

In some cases, scammers claim you are eligible for a reimbursement due to an overpayment, pressuring you into revealing sensitive details to "process" the refund.

The Risks of Falling for the Scam

Disclosing this information can lead to serious consequences, including:

• Identity theft: Criminals may open credit accounts or loans in your name.
• SIM-swap attacks: Scammers hijack your mobile number to access email, bank, or social media accounts.
• Medical identity theft: Fraudsters may use your data to receive medical services, leaving you with the bills.

Why the Scam Is Effective

According to cybersecurity experts, scammers often use partial or stolen information—like a partial SSN or recent transaction—to build trust. This classic confidence trick gives the impression of legitimacy and increases the likelihood of success.

How to Protect Yourself

• Verify the source: If you're unsure about an email or message, contact your health insurer using official contact details found on their website or policy documents.
• Do not click suspicious links: Avoid clicking on links or downloading attachments from unsolicited messages.
• Do not share personal information: Never give out medical, financial, or identity details unless you’ve confirmed the legitimacy of the request.
• Enable two-factor authentication: Use 2FA on your accounts to add an extra layer of protection against unauthorised access.
• Monitor your accounts: Regularly check health insurance, banking, and credit accounts for suspicious activity.

When in Doubt, Check it Out

It’s common for legitimate health insurers to contact customers via email or text, but if something feels off—trust your instincts. Contact your provider directly before taking any action. Staying informed is your best defence against these evolving threats.