If you think you are a victim of medical identity theft, we recommend that you act immediately by following our guidelines below, and then proceed to our ReportRecover and Reinforce sections for further assistance. Remember, stolen health insurance information can affect your finances and privacy.

Some Immediate Action Steps to Take

  • Visit IdentityTheft.gov from the Federal Trade Commission to file a report and create a personalized plan for recovery.
  • For private insurance – call your insurance company and ask for their fraud department.
  • For Medicare, Medicaid, and other HHS programs – visit Department of Health and Human Services’ (HHS) Inspector General website to submit a complaint or call 800-447-8477.
  • Contact your doctor’s offices and alert them about potential fraud.
  • Obtain copies of your medical records and review them in detail. Report any mistakes or unfamiliar charges to your insurer.


Reporting identity theft incidents to IdentityTheft.gov is very important! The more national reporting data that is collected, the better the chance law enforcement has to catch the criminals and decrease online crime. Although IdentityTheft.gov does not resolve individual complaints directly, they will make your report available to local, state and other law enforcement partners. Please read the IdentityTheft.gov privacy policy here. (If you believe that you’ve received a phishing email, please forward the email directly to reportphishing@apwg.org.)


These resources have been gathered, selected and vetted to help simplify the process of recovering after a cybercrime incident has taken place. You may need to contact organizations outside Fraudsupport.org. Results will vary depending on your circumstances.


Once you have notified the appropriate organizations and you are on the road to recovery, it is time to reinforce your cybersecurity using these resources and tools.

Implement Preventive Measures

  • Carefully store and guard your health insurance ID cards, numbers, and records.
  • Review your explanation of benefits or Medicare/Medicaid summary notices.
  • Make sure any insurance claims match the services you received.
  • Immediately report any mistakes or unfamiliar charges to your insurance company or Medicare/Medicaid.
  • Don’t share your insurance information with anyone unless you initiated the contact or have already established trust.
  • Ask questions about how your healthcare information is treated, protected, and shared by your healthcare provider or insurance company.
  • Create strong passwords. Learn how from ConnectSafely.org.
  • Always enable a two-step/factor verification – which requires an additional code to log in.
  • Download our Six Steps to Better Security PDF.

Helpful Videos

U.S. Department of Health & Human Services: Eye on Oversight: Medical Identity Theft