Mid-January has a way of putting everyone into “paperwork mode.” You’re sorting mail, checking benefit deposits, getting ready for tax forms, and—if you’re like many women 35+—helping a parent or older relative do the same.
Unfortunately, that busy, practical season can also attract impersonation scams that use Social Security or Medicare as a hook. The good news: you don’t have to become a fraud expert. You just need a calm, repeatable way to verify any contact—without relying on the phone number, link, or “case ID” a stranger gives you.
The key rule: verify without using the number they gave you
If someone contacts you claiming to be from Social Security or Medicare, the safest default is to pause and verify using information you look up yourself. That means no calling back the number on your caller ID, no clicking a link from a text, and no using a website address the caller provides.
A simple verification routine:
- Stop and breathe. Say you’ll call back after you verify the agency’s main contact information.
- Find official contact info on your own. Type the agency’s web address directly (for example, ssa.gov or medicare.gov) or use USA.gov to navigate to official pages.
- Call back using a known number. Use the number listed on the official site or on a trusted letter you already have (not the one that just came through a call/text).
- Use online accounts when possible. If you have an online Social Security account or Medicare-related portal access, check there for messages or notices instead of responding in the moment.
Real agencies may contact people, but scammers rely on urgency. Verification slows the situation down and puts you back in control.
Common red flags: threats, unusual payments, and “urgent” account problems
Impersonation scams tend to sound official while pushing you to act fast. While exact wording can vary, these patterns should immediately raise your guard.
- Threats or pressure: claims you’ll be arrested, deported, sued, or lose benefits unless you act right now.
- Odd payment requests: demands for gift cards, wire transfers, cryptocurrency, or “payment apps.” (Government agencies typically have established, documented payment processes.)
- Requests for sensitive info: passwords, PINs, one-time passcodes, full Social Security numbers, or your Medicare number “to confirm identity.”
- “Fix your account” panic: warnings about suspended benefits, compromised Medicare coverage, or a problem that can only be resolved on the spot.
- Communication that doesn’t match the moment: a surprise text about Medicare, an email asking you to “re-activate” Social Security, or a robocall that demands personal details.
One more reality check: scammers sometimes know basic details (like an address, birthday month, or last four digits from past data leaks). Familiar information doesn’t make the call legitimate.
What legitimate Social Security and Medicare communications generally look like (and a quick FAQ)
Legitimate communication can happen by mail and, in some circumstances, by phone—but it typically doesn’t require instant action or secrecy. When in doubt, treat any unexpected outreach as unverified until you confirm through official channels.
Keep these high-level guidelines in mind (and verify current wording on official sites):
- Social Security: often uses mailed notices for benefit changes and important updates; may call in some situations, but you can always hang up and call back using an official number.
- Medicare: official information is commonly provided through mailed documents and your chosen plan communications; unexpected calls asking for your Medicare number should be treated with caution.
FAQ:
- “Will Social Security threaten arrest?” Generally, no. Threats and intimidation are a classic impersonation sign. Verify through SSA/OIG resources.
- “Can Medicare cancel my coverage over the phone?” Be skeptical of sudden cancellation claims. Verify coverage changes through official Medicare resources or your plan’s known contact channels.
- “What if the caller knows my last four digits?” Don’t assume it’s real. Use the verify-and-call-back routine using numbers you find yourself.
If you already responded: steady next steps (and a caregiver script)
If you shared information or sent money, don’t beat yourself up. These scams are designed to catch people when they’re multitasking or worried about a loved one. Focus on practical next steps.
- Stop contact. Hang up, don’t reply to texts, and block the number if helpful.
- Document what happened. Save screenshots, phone numbers, dates/times, and what was requested. This helps when you report.
- Report through official channels. Use SSA’s Office of the Inspector General for Social Security-related fraud, Medicare’s reporting resources for Medicare-related concerns, and the FTC for scams broadly.
- If money or account access is involved: consider contacting your bank/credit card company promptly to ask about options. (This is general information, not financial advice.)
If you’re supporting an older relative, a short script can help:
“We don’t handle benefits on surprise calls. We’ll hang up and call Social Security/Medicare back using the official number from their website. If it’s real, it will still be there.”
Consider a simple family plan: agree on one “trusted contact” person, a call-back routine, and a rule that no one shares codes or numbers during unexpected calls.
Sources
Recommended sources to consult for current reporting links, official phone numbers, and up-to-date guidance on what agencies will and will not request. Verification note: confirm the exact reporting portals and any hotline numbers directly on these sites, since contact details and wording can change.
- Social Security Administration – Office of the Inspector General (oig.ssa.gov)
- Social Security Administration (ssa.gov)
- Medicare (medicare.gov)
- Federal Trade Commission (ftc.gov)
- USA.gov (usa.gov)
