How the scam works
The official look
A physical plastic card or a convincing email — one documented case used a "New 2026 Dental Benefit" phishing email — arrives looking like real Medicare correspondence.
The activation request
You're told to call a number or visit a link to "activate" your card, which requires confirming your Social Security number.
The AI voice variant
Some versions now use a cloned voice — built from just seconds of audio — to sound like a real Medicare representative on the phone.
The identity theft
Your Social Security number, once handed over, enables full identity theft — not just Medicare fraud.
How to spot it
- Any request to "activate" a new Medicare card — your current one never needs this.
- A request for your Social Security number by phone, mail, or email.
- Timing during open enrollment, when scam volume spikes deliberately.
What to do
- Don't call the number on the card or click any link.
- Verify directly: call 1-800-MEDICARE using the number from your official documentation, not the suspicious mailer.
- Never give your SSN to confirm or "activate" anything Medicare-related unsolicited.
- If you've shared your SSN, visit IdentityTheft.gov and consider a credit bureau fraud alert.
Egidio: your automatic phishing detector
This scam often arrives with a follow-up phishing link or text to "confirm" details. Egidio catches that link before it can do anything.
Egidio screens incoming calls and scans links arriving through your messaging apps in real time and blocks known fake-government pages the moment they're recognised.
Install Egidio