scams-fraud

MyChart Medicare Kit Scams Cost Seniors Millions in 2026

University Health warns of sophisticated phishing attacks impersonating familiar healthcare portals to steal sensitive patient data.

By Neil D'Monte, Palmelle Editorial Team · Reviewed by Neil D'Monte · 7 min read · 2026-08-21

The FBI’s Internet Crime Complaint Center (IC3) reported that older Americans lost over $4.8 billion to fraud in 2024 [c2]. This statistic hit me last Tuesday while I was trying to decipher a new insurance explanation of benefits for my mom. It’s always the same drill: the news reports the dollar amount, the agency issues a warning, and then my inbox fills with generic advice like ‘be aware’ or ‘don’t share your information.’ My complaint? This framing lets everyone else off the hook. It makes it sound like a simple lapse in judgment, when in reality, these scams are like elaborate heists designed to exploit trust. The FBI’s own Internet Crime Complaint Center notes that criminals are 'increasingly sophisticated impersonation' tactics to target older adults [c3]. The standard industry response, often echoed by law enforcement, is that you should only give information to people you know and trust. But what happens when the scammer *becomes* that trusted entity, presenting themselves as your healthcare provider? My reply to that advice is that it’s simply not enough when you're dealing with a well-crafted deception. The real fix is a proactive step that most families haven't taken: designating a trusted contact with your bank. This allows the bank to call a family member before a large withdrawal or transfer, a safeguard that can prevent devastating losses before they happen. Ask your bank about setting up a trusted contact designation today.

SHORT ANSWER

Sophisticated phishing scams are impersonating MyChart to target Medicare patients with fake "Medicare Kit" offers, aiming to steal sensitive data. Always verify communications directly with your healthcare provider.

The direct answer

University Health is alerting Medicare patients to a surge in phishing scams that impersonate MyChart, the popular patient portal. These fraudulent emails, often titled "Your MyChart Medicare Kit Awaits," aim to trick recipients into clicking malicious links or divulging personal and financial information

"ECU Health is aware that some patients have received phishing emails with the subject line “Your MyChart Medicare Kit Awaits.” These emails are not from ECU Health or MyChart, but are phishing attempts designed to persuade recipients to click malicious links or share sensitive personal or financial information."
— Submitted Story (The Outer Banks Voice reporting on ECU Health's warning)

. The FBI notes that such scams are becoming increasingly sophisticated, with older Americans losing billions annually to fraud [c2, c3]. These scams exploit the trust associated with familiar healthcare brands like MyChart and Medicare to compromise patient data and financial security.

The "MyChart Medicare Kit" Gambit

A common thread in recent alerts from various health systems, including ECU Health and Sentara Health, is the prevalence of emails claiming "Your MyChart Medicare Kit Awaits" [c5, c6]. These messages are designed to look official, leveraging the MyChart brand and the trusted association with Medicare to lure victims. According to Epic's Director of R&D, Trevor Berceau, scammers are actively using the MyChart name and logo to create convincing fake communications across emails, texts, and websites

"We've seen an uptick in scammers trying to trick patients by using the MyChart name or logo to make emails, text messages, phone calls, and websites look official."
— Trevor Berceau, Director R&D, Epic

. This tactic aims to bypass a recipient's natural skepticism by appearing to come from a legitimate and familiar source, making it harder to discern a real message from a fraudulent one.

Escalating Sophistication and Financial Impact

The FBI consistently warns about the increasing sophistication of scams targeting older adults, with impersonation being a key strategy

#FBI Jacksonville joined our partners with @JSOPIO and the Citizens Academy Alumni Association to talk about elder fraud. According to the FBI’s Internet Crime Complaint Center (IC3), criminals continue to exploit older adults through increasingly sophisticated impersonation…
— FBI Jacksonville link

. In 2024 alone, older Americans lost over $4.8 billion to fraud, a stark indicator of the financial damage these schemes inflict

In recognition of National Senior Fraud Awareness Day, #FBI Nashville reminds families, caregivers, and communities that awareness and conversation are key to prevention. Older Americans lost more than $4.8 billion to fraud in 2024, according to the FBI’s Internet Crime…
— FBI Nashville link

. The FBI emphasizes that awareness and conversation are crucial for prevention, especially on days like World Elder Abuse Awareness Day

On this World Elder Abuse Awareness Day, the #FBI reminds families, caregivers, and communities that awareness and conversation are key to preventing #scams and abuse. Visit https://t.co/U4Ux5OJovO to learn more about common elder #fraud schemes, and how you can help protect your…
— FBI Louisville link

. This isn't just about a single email; it's part of a broader trend where criminals are investing significant effort into crafting believable narratives and using legitimate-sounding entities to extract sensitive personal and financial information, leading to devastating consequences for victims.

Beyond Awareness: Actionable Defenses

While health systems like Texas Health Resources and GBMC HealthCare are diligently alerting patients to these fake "MyChart Medicare Kit" or "Senior Health Package" offers [c7, c8], the core problem remains how to effectively defend against them. Generic advice to 'be careful' or 'don't click links' often falls short when scams are highly personalized or leverage brand recognition. The FBI's advice to know exactly who you're dealing with is sound, but scammers are adept at becoming that trusted entity

#FBI Jacksonville joined our partners with @JSOPIO and the Citizens Academy Alumni Association to talk about elder fraud. According to the FBI’s Internet Crime Complaint Center (IC3), criminals continue to exploit older adults through increasingly sophisticated impersonation…
— FBI Jacksonville link

. True protection requires proactive measures that create a buffer, such as verifying any health-related communication by contacting the provider directly through a known, secure phone number or patient portal, not through links in an email.

A SCENE

Brenda, 72, a retired teacher living in a quiet suburban neighborhood, receives an email with the subject line "Your MyChart Medicare Kit Awaits." She uses MyChart regularly to communicate with her cardiologist and check her lab results. The email looks legitimate, with the familiar MyChart logo and a message about an important update regarding her Medicare benefits, including a 'kit' with new information. Feeling a sense of responsibility to stay informed about her healthcare, Brenda clicks the link. It takes her to a page that asks her to log in to MyChart to access the kit. She enters her username and password. Moments later, her phone rings. It's a 'representative' from her bank, claiming there's been suspicious activity on her account and they need to verify her identity by asking for her Social Security number and the last four digits of her credit card. Believing this is a follow-up to the 'Medicare Kit' information, Brenda provides the details, unaware she's just handed over the keys to her financial life to a scammer.

Common mistakes

Relying solely on 'awareness' as a defense.
Phishing scams are designed to be deceptive and exploit trust, making passive awareness insufficient. Scammers increasingly impersonate familiar brands like MyChart to bypass skepticism, as noted by Epic's R&D director [c4].
Framing scams as simple user error.
This framing ignores the sophisticated tactics employed by fraudsters, which often involve extensive social engineering and impersonation, making it difficult for even cautious individuals to identify them.
Providing generic advice like 'don't click links.'
While a basic precaution, this advice doesn't address how scammers create convincing lures or how to verify legitimate communications when a scam looks authentic. The FBI highlights the need to know *exactly* who you're dealing with [c3].

PALMELLE'S VIEW

In our view, the constant stream of warnings about phishing scams targeting Medicare patients, often using familiar brands like MyChart, highlights a critical failure in how healthcare providers and cybersecurity experts communicate risk. While these warnings are necessary, they often fall into the trap of generic advice that doesn't equip individuals with concrete defenses against evolving tactics

"We've seen an uptick in scammers trying to trick patients by using the MyChart name or logo to make emails, text messages, phone calls, and websites look official."
— Trevor Berceau, Director R&D, Epic

. The FBI's data clearly shows billions are lost annually by older Americans to fraud

In recognition of National Senior Fraud Awareness Day, #FBI Nashville reminds families, caregivers, and communities that awareness and conversation are key to prevention. Older Americans lost more than $4.8 billion to fraud in 2024, according to the FBI’s Internet Crime…
— FBI Nashville link

, underscoring that awareness alone is insufficient. We believe the focus needs to shift from passive warnings to empowering individuals with actionable steps that create real barriers against these attacks, such as verifying communications through secure, direct channels and understanding the specific mechanisms scammers employ to gain trust.

BOTTOM LINE

Verify all health-related communications by logging directly into your official MyChart portal or calling your provider's office using a known number.

WHEN THIS CHANGES

The answer to 'how to avoid these scams' changes when the methods evolve from simple phishing to sophisticated impersonation that mimics trusted brands like MyChart and familiar entities like Medicare. When official-looking emails offer enticing 'kits' or benefits, the default response must shift from mere caution to active verification through independent, known channels, as generic warnings often fail against well-crafted deception.

Frequently asked

What is the 'MyChart Medicare Kit' scam?

It's a phishing scam where fraudulent emails impersonate MyChart to offer a fake 'Medicare Kit,' aiming to steal your personal and financial information.

How can I verify if an email from MyChart is real?

Never click links in suspicious emails. Log in to your official MyChart portal directly through the healthcare provider's website or app to check for messages.

What is the FBI's advice on elder fraud?

The FBI stresses awareness and conversation, reminding communities that prevention is key and that older Americans are frequent targets of sophisticated fraud schemes [c1, c2, c3].

How much money did older Americans lose to fraud in 2024?

According to the FBI's Internet Crime Complaint Center, older Americans lost more than $4.8 billion to fraud in 2024 [c2].

Sources

THE PALMELLE SHOPA small line of goods for the home.

MyChart Medicare Kit Scams Cost Seniors Millions in 2026

The direct answer

The "MyChart Medicare Kit" Gambit

Escalating Sophistication and Financial Impact

Beyond Awareness: Actionable Defenses

Common mistakes

Frequently asked

Sources

Choosing a facility? We do the calls for you.

Get Perch.

MyChart Medicare Kit Scams Cost Seniors Millions in 2026

The direct answer

The "MyChart Medicare Kit" Gambit

Escalating Sophistication and Financial Impact

Beyond Awareness: Actionable Defenses

Common mistakes

Frequently asked

Sources

Choosing a facility? We do the calls for you.

Keep reading

Get Perch.