Medicare Scam Alert: How to Tell Your Real New Card From the Chip-Card Con

Medicare Scam Alert: How to Tell Your Real New Card From the Chip-Card Con

Say it's March 2026 and an envelope from Medicare lands in your mailbox — a new card, red-white-and-blue, same as always, except the number's different. Nothing to sign, nothing to call about. Then a few weeks later the phone rings, and this time someone tells you Medicare is upgrading everyone to a "secure chip card," and they just need to verify your Social Security number first.

One of those is real. One of them wants your identity. And this year, telling the two apart is genuinely harder than usual — because for once, the real one showed up first.

How this scam actually works

The real part starts with a data breach that's now three years old. Between May 27 and 31, 2023, a vulnerability in a file-transfer tool called MOVEit exposed Medicare claims data handled by Wisconsin Physicians Service Insurance Corporation, a contractor that processes Part A and B claims. CMS eventually confirmed more than 940,000 Medicare beneficiaries had personal information exposed, including Medicare Beneficiary Identifiers, names, and dates of service.

The fix took a while to land. In early 2026, CMS processed roughly 1.3 million Medicare Beneficiary Identifier reassignments, with the new numbers taking effect April 14, 2026, and the reissued cards arriving in mailboxes throughout March. If you were affected, you got a card and a letter explaining why — no action required, no phone call, no fee.

That's where scammers stepped in. Riding on the fact that real new Medicare cards were genuinely showing up in real mailboxes, callers, texters, and door-knockers started pushing a second, entirely made-up story: that Medicare is switching everyone to a "secure chip-enabled" or "plastic" card to match a credit card, and you need to confirm your Social Security number, Medicare number, or banking information to receive or activate it. Sometimes there's a "processing fee." There's no chip card. There's never been a chip card. Medicare's card format hasn't changed since 2018, when the agency removed Social Security numbers from it entirely — the current card is still plain paper.

Why this one's harder to spot than the average Medicare call

Most impersonation scams fall apart the moment you ask "wait, does that even happen?" A Social Security "your number is suspended" call collapses because SSNs can't be suspended — nothing like that ever happens, so the whole premise is fake. The chip-card scam doesn't have that easy tell this year, because something genuinely did happen: real cards, with real new numbers, really did go out to real people. The scam isn't inventing an event — it's grafting a fake follow-up onto a true one. That's a smarter setup than usual, and it's exactly why this is worth fifteen minutes of your attention even if you think you'd never fall for a Medicare scam.

The red flags hiding in plain sight

• Anyone describing a "chip," "metal," or "plastic" Medicare card. It doesn't exist. Medicare's card is, and has only ever been, paper.
• A request to "verify" your Medicare number, Social Security number, or bank account to receive or activate a new card. Medicare already has your number. It never asks you to confirm it, and it never needs your bank information for anything.
• Any mention of a fee. Your Medicare card, new or reissued, is always free. A dollar amount attached to "processing" or "shipping" it is the scam revealing itself.
• Pressure to act today or lose coverage. Real reissuance letters give you information, not a deadline. Urgency is a manufactured emotion, not a Medicare policy.
• A "free" back brace, knee sleeve, or other durable medical equipment offered in exchange for your Medicare number. This is one of the oldest Medicare scams still running — the equipment either never arrives or arrives as a pretext to bill Medicare fraudulently using your number.
• A genetic testing kit or cheek swab offered at a health fair, senior center, or over the phone "covered by Medicare." Same mechanism as the back-brace scam: your number gets billed for a test you didn't need and may never see results from.
• A call pushing you to switch Medicare Advantage plans right now, ahead of open enrollment, using a countdown-style pitch. Legitimate plan comparisons don't require you to decide on the spot.
• A mailed "prescription discount card" that asks you to go online and activate it with your Medicare number. Real discount programs don't need your Medicare number to work.

The open enrollment overlap makes this worse

Medicare's annual Open Enrollment window runs mid-October through early December, and the chip-card scam has started showing up alongside it — the same callers who ask you to "verify" your number for a new card often pivot straight into "and while I have you, let's review your plan options for this year." That second half is its own pitch, sometimes for a real Medicare Advantage plan and sometimes for nothing at all, and it works precisely because a stranger just spent five minutes sounding like they already had your Medicare account open in front of them. They didn't. They were reading from a script, and by the time enrollment season arrives every fall this exact combination gets more common, not less.

If this already happened to you

Don't spend energy on embarrassment — this is a genuinely well-timed scam, and a real reissuance happening the same year is bad luck, not a lapse in judgment on your part. Call 1-800-MEDICARE and ask them to check your account for anything unusual. If you gave out your Social Security number, place a free credit freeze with all three bureaus — Equifax, Experian, and TransUnion — the same day if you can. Because a stolen Medicare number gets used to bill the program for equipment or services you never received, start reading your Medicare Summary Notices closely; an unfamiliar provider, device, or test on there is often the first visible sign something's wrong. Report what happened to the Senior Medicare Patrol, which specifically tracks and investigates Medicare billing fraud, and to the FTC at ReportFraud.ftc.gov. You don't need to have lost money for either of those reports to matter.

How to not become the next victim

Treat every unsolicited call, text, or email about your Medicare card as fake by default, including this year's version — Medicare communicates through the mail and through your account at Medicare.gov, not by phone. If you want to check whether your number actually changed, set up (or log into) your secure Medicare.gov account and look it up yourself, or call 1-800-MEDICARE directly rather than any number given to you by a caller. Never read your Medicare number to someone who called you, no matter how official they sound or how much of your other information they already seem to have — a caller reciting your address or date of birth back to you isn't proof they're legitimate, it's proof your data has been floating around for a while. If a parent or older relative mentions a call about "the new Medicare card," that's worth a direct conversation this week, not a maybe-later.

This one sits right next to the broader wave of government impersonation scams and the fake Social Security and Medicare calls that target older adults specifically — same emotional lever, same identifying numbers at stake. If a text version of this shows up instead of a call, Cautellus's scam text checker can tell you in seconds whether the message matches known scam patterns before you tap anything. And if you're the adult child trying to keep a parent's whole financial picture safe, not just this one scam, the elder scams guide and our broader piece on protecting older adults from fraud cover the rest of the playbook scammers run on this exact demographic. For the specific brand impersonation pattern, Cautellus's Medicare scam directory tracks the scripts currently in circulation.

Medicare didn't get hacked twice this year. It got hacked once, years ago, and is still cleaning it up — and scammers are charging admission to watch.