Medicare/Health Impersonation Scam

A caller pretends to be Medicare, a health plan, or a medical-supply provider and uses a new-card or "free supplies" story to collect your parent's personal and payment information.

What the scam is

The caller says your parent's Medicare card is expired, damaged, or being replaced. They claim they need to verify a new Medicare card before it can be mailed, then ask for the Medicare number, Social Security number, date of birth, or payment details.

Another version starts with an offer of "free supplies" — often a back brace, diabetic supplies, or another medical device. The supplies are not really free: the caller uses a shipping fee, card charge, or verification request to harvest financial information.

A government-looking caller ID, a plan name, or a case number can make the call sound official. The script is designed to make your parent afraid of losing benefits or supplies before they pause, call the number on their card, or ask a trusted family member for help.

Annotated example Medicare impersonation call

This is a typical exchange built from the scripts scammers use. Each caller line is followed by the red flag that CallShield is looking for.

Caller: "Hello, this is Denise from Medicare card services. We're replacing older cards, and your new Medicare card is ready. I need to verify your Medicare number and date of birth before we can mail it."

The caller impersonates Medicare and uses a new-card replacement story to request sensitive information. An unexpected caller does not become legitimate by knowing that your parent has Medicare.

Parent: "I have my card here. Can I call the number printed on it to check this?"

Caller: "No, please don't call that number — this is a secure enrollment line. Your caller ID should show Medicare's 1-800 office, so you know this is official. We have to finish the verification on this call."

A caller ID that appears to belong to Medicare can be spoofed. Telling your parent not to use the trusted number on their card is a caller-ID mismatch and verification red flag.

Parent: "Why did you call me? I didn't request a replacement card."

Caller: "Because your plan qualifies you for free supplies, too — a back brace and diabetic supplies. We only need your Social Security number and the three-digit code on your debit card for the $9.95 shipping fee. A prepaid gift card works if your bank card is not nearby."

The "free supplies" offer is bait for sensitive-information harvesting. The shipping fee, debit-card request, and prepaid gift card are payment demands, not a Medicare benefit.

Parent: "I should talk to my daughter before I give you any information."

Caller: "Your old card expires Friday. If you wait, your benefits and supplies may be delayed. Do not tell your daughter — she may cancel the order. Stay on the phone while you get the payment ready so we can protect your coverage."

A short deadline creates urgency, while the instruction to keep the call secret isolates your parent from someone who could recognize the scam.

Parent: "What information do you still need from me?"

Caller: "Read me your full Medicare number, Social Security number, date of birth, and the gift-card numbers. Keep the line open until I confirm the new card and supplies are approved."

The caller repeats the sensitive-information request and asks for an irreversible payment while keeping your parent on the phone.

Once a parent hangs up and calls a trusted family member or the plan through a known official number, the fake replacement-card deadline and free-supplies offer lose their power.

How CallShield catches this

For an unknown caller, CallShield analyzes the live transcript for combinations of impersonation, pressure, isolation, and information requests while the call is happening. A Medicare script like the one above can produce these labeled signals:

impersonation_medicare — the caller claims to represent Medicare, a health plan, or a medical-supply program.
sensitive_info_request — the caller asks for a Medicare number, SSN, date of birth, card number, or security code.
caller_id_mismatch — the displayed caller ID is used as proof of an identity the caller cannot independently verify.
urgency_pressure — the caller says the old card expires Friday or benefits will be delayed unless the parent acts now.
isolation_tactic — the caller says not to tell a daughter or use another number to verify the story.
gift_card_payment — the caller asks for prepaid gift-card numbers to cover the supposed shipping fee.

When the AI score crosses the scam threshold, the live call path records the event as flagged. The Call Log distinguishes flagged calls that passed through for monitoring from blocked calls that were auto-rejected by CallShield, so a caregiver can see the action taken instead of relying on the caller's story.

If high-risk email alerts are enabled and the score meets the configured HIGH_RISK_SCORE_THRESHOLD (0.8 by default), CallShield sends the caregiver an alert with the caller, score, labeled patterns, summary, and a link to the call.

From the caregiver dashboard, the per-call detail view shows the scam-pattern score, labeled patterns, AI summary, and full transcript. That lets you review exactly what triggered the alert and help your parent recognize the same script next time.

See the full detection flow on How it works, or review related questions in the FAQ.

Red flags to listen for

Any one of these is a reason to hang up and verify independently.

The caller says a Medicare card is expired or a new Medicare card must be verified over the phone.
They offer "free supplies" but ask for a shipping fee, debit-card number, gift card, or verification code.
They request the Medicare number, Social Security number, date of birth, or other personal information.
They point to a government-looking caller ID or refuse to let your parent call the number printed on the card.
They set a deadline, threaten delayed benefits, or insist your parent stay on the phone.
They tell your parent not to talk to a daughter, caregiver, or anyone else who might verify the story.

What to do if your parent receives this call

1. Hang up. Do not argue, press a number, stay on the line, or give the caller a Medicare number just to prove the call is real.

2. Verify independently. Call the plan or Medicare using the number printed on an existing card, statement, or other trusted document. Never use a callback number the caller provides.

3. Tell someone you trust. Call a family member or caregiver before responding to a new-card or free-supplies offer, even if the caller says the deadline is today.

4. If information or payment was already shared, contact the plan, bank, or card issuer immediately, keep receipts and messages, and report the fraud to the FTC at reportfraud.ftc.gov.

CallShield watches for the same Medicare impersonation patterns above, flags a risky call while it is happening, and gives you the transcript and explanation you need to step in.

Read more in the FAQ, see how it works, or return to all scam patterns.

See pricing and start protecting →