Stealing Your Health: How Medical Identity Theft Occurs and How To Avoid Becoming a Victim

Medical identity theft is particularly insidious because it's harder to detect and can often go unnoticed for years. Fraudsters can steal your medical or health insurance information, assume your identity, and attempt to receive care, purchase equipment, get drug prescriptions, or file false medical insurance claims in your name.

Read on to learn how to prevent or, if necessary, recognize and quickly combat medical identity theft before it negatively impacts your life. We also share our top identity theft protection services.

How does medical identification theft happen?

To commit medical identity fraud, criminals need access to your personally identifiable information (PII), including full name, date of birth, Social Security number, health insurance number, and Medicare number.

Medical identity theft happens when this information lands in criminal hands due to negligence or malicious activity. Once the scammers have your personal information, they can assume your medical identity and receive medical procedures, medication, or insurance benefits as if they were you.

Medical identity theft can originate from inside, outside, or friendly sources.

Insider fraud

Insider fraud occurs when someone inside the health care or insurance system violates professional trust and maliciously allows unauthorized parties access to confidential patient information — for a price.

Personally identifiable medical information currently draws a high price on the dark web black market, which can be tempting for unscrupulous health care providers or insurance professionals with access to patient records. 

Outsider attacks

Outsiders employ various methods and techniques to obtain personal medical information. It can be as simple as digging through trash to find carelessly discarded medical files, bills, or insurance cards.

Outside scammers also use phishing emails, calls, and texts to convince individuals to provide their PII. These attempts appear to come from legitimate sources, such as someone from your doctor’s office, and often offer deals or specials to lure unsuspecting customers. If activated, phishing emails can contain malware links providing unrestricted access to patient information.

Hackers also target health care or insurance organizations for large-scale network data breaches, which can allow unauthorized access to the personal records of all patients on file.

Friendly fraud

Despite the less ominous name, medical identity theft resulting from "friendly" fraud can be just as dangerous as threats from inside or outside sources. Friendly fraud occurs when someone the patient knows, either a family member or friend, uses their trusted status with the patient to access their medical identification and benefits.

Medical identity theft resulting from friendly fraud is common. Many patients feel comfortable trusting relatives or friends with their personal medical identification information. A Ponemon survey indicates that half of medical identity theft victims say a family member or someone they knew used their medical identification information.

Why would thieves steal your medical identity?

Stealing your medical identity can open up a significant number of illicit options for enterprising criminals, which include:

• Selling your stolen information on the dark web
• Obtaining medical care, equipment, prescriptions, and other benefits in your name
• Submitting fraudulent medical bills to insurance providers
• Falsifying medical insurance claims
• Fraudulently applying for Medicare or Medicaid benefits
• Stockpiling prescription drugs for resale
• Altering your medical records

Medical identity theft warning signs

Don't be the unfortunate person who gets blindsided by medical identity theft and all the problems that can follow if someone commits fraud using your personal information.

There are some critical warning signs that your medical identity has been stolen and is involved in fraudulent activity. Be sure to keep an eye out for the following red flags indicating you may be a victim of medical identity theft:

• Incorrect information appearing in your medical records
• Unexpected medical bills, equipment, or explanation of benefits (EOB) statements you never incurred or requested
• Your insurance claim is refused due to reaching your benefit limit or experiencing a denial of insurance coverage for an unknown condition
• Damaged credit scores
• Calls from debt collectors on charges you never incurred

What to do if you become a victim of medical identity theft

If you think you may be a victim of medical identity theft, you must act fast to mitigate the potential consequences and damage. It's better to err on the side of caution and quickly take mitigative action, which should include:

• File a police report with local law enforcement and a complaint with the FTC at identitytheft.gov.
• File a notice with the U.S. Department of Health and Human Services Office of Inspector General if your medical identity theft could involve Medicare.
• Check your credit report and notify the credit bureaus to add a fraud alert.
• Set up a credit freeze if necessary.
• Contact your health insurance company to make sure there wasn't an error on their end.
• Request a copy of your medical records from the provider where the fraud may have occurred.

How to stay safe from medical identity theft

Below are some recommended actions to help prevent you from becoming a medical identity theft victim. Remember to:

• Organize and keep all personally identifiable, medical, and insurance information private and secure.
• Be mindful and alert to avoid potential phishing or smishing scam attempts.
• Continuously monitor your credit report by ordering free monthly Equifax credit reports, and be prepared to dispute unknown debts on your credit report.
• Periodically check your medical records and health plan to ensure it correctly reflects your care history.
• Stay current on publicized health care or insurance cyber breaches that may put your PII at risk.
• Avoid offers for free medical services or products that request your PII.
• Properly destroy all old medical bills, health insurance cards, and documents containing your sensitive health care or insurance information.
• Consider purchasing identity theft protection.

Service
Individual monthly price	Starts at $7.50/mo (billed annually) for first year	Starts at $9.00/mo (billed annually)	Starts at $10.00/mo
Family monthly price	Starts at $18.49/mo (billed annually) for first year	Starts at $25.00/mo (billed annually)	-
ID theft insurance	Up to $3 million	Up to $1 million per adult	Up to $2 million
Credit monitoring
3-bureau credit reports
Details	Get LifeLock Read Our LifeLock Review	Get Aura Read Our Aura Review	Get Omniwatch Read Our Omniwatch Review

FAQs

Bottom line

When someone steals your medical identity, you can't expect much help regarding consumer liability debt protection — you could get hit with a massive medical debt, damaged credit, and possible criminal charges.

With such high stakes and medical identity theft on the rise, look for unrecognized debt, incorrect medical records, or notifications of used-up insurance benefits. Consider using a top identity theft protection service for robust coverage.

4.9

AllAboutCookies writers and editors score products based on a number of objective features as well as our expert editorial assessment. Our partners do not influence how we rate products.

Editorial Rating

Learn More

On Aura Identity Theft's website

Identity Protection

Aura Identity Theft

• #1 rated ID theft protection service with a full suite of monitoring tools
• Includes up to $1 million in ID theft insurance for up to five adults
• Protect your children with robust parental controls and gaming alerts

Author Details

Mark Knowles

About the Author

Mark Knowles is a freelance tech content writer specializing in cybersecurity. His expertise includes DevSecOps, cyber risk management, and Zero Trust model security. Mark has completed numerous case studies, blog articles, and e-books for leading technology companies over the last eight years, with a focus on the cybersecurity vertical over the last five years. When not interviewing experts in the field or creating fresh cybersecurity content for organizations, Mark enjoys pushing the limits of fitness and personal growth while planning his next traveling adventure.