June 20, 2024

Medical Records Request Scam: Watch out for Phishing

CMS identified phishing scams for medical records. This may include scammers faxing you fraudulent medical records requests to get you to send patient records in response.

When you review any requests, look for signs of a scam, including:

  • Directing you to send records to an unfamiliar fax number or address
  • Referencing Medicare.gov or @Medicare (.gov)
  • Indicating they need records to “update insurance accordingly”

A scam request may include:

  • Poor grammar, misspellings, or strange wording
  • Incorrect phone numbers
  • Skewed or outdated logos
  • Graphics that are cut and pasted

If you think you got a fraudulent or questionable request, work with your Medical Review Contractorto confirm if it’s real. Submit medical documentation through the Electronic Submission of Medical Documentation (esMD) system or CMS medical review contractor secure internet portals, when available.