Medicare Open Enrollment: How the Call-and-Harvest Scam Works

According to ESET, the Medicare Open Enrollment period, which runs from October 15 to December 7, gives scammers a ready-made excuse to call, text, email or message beneficiaries about their health coverage. Genuine insurers are doing the same thing at the same time, which is exactly what makes the fake calls work.

During this window, real ads, emails and calls do ask people to review plans, update details and sometimes hand over personal or health information. A scam call asking the same thing does not stand out. It blends into expected noise, and that is the first step the scam depends on: borrowing the legitimacy of a season everyone already knows is happening.

The pretext

Scammers reach people by phone, text, email, social media message, or a fake ad on Google built to look like it comes from a real insurer, a specialist agency, or Medicare itself. The message takes one of several forms. It might say a plan needs comparing or changing before the December 7 deadline. It might claim a Medicare card needs updating or replacing. It might offer extra benefits or lower premiums, warn that existing coverage is changing, or say an account has been linked to fraudulent activity and needs verifying.

Why urgency works

Every one of those pretexts leans on a real deadline. December 7 is an actual cutoff, and that fact is what makes the lie convincing. An official-sounding caller saying benefits could be lost, or that a lower premium offer expires in days, is designed to stop a person thinking clearly rather than start them thinking at all. That is the mechanism: a true date attached to a false threat.

What gets taken

Once someone is pulled in, the scammer moves to collecting information. That can include the Medicare number, Social Security number, date of birth, phone number, email and home address, account passwords, health information such as doctors, prescriptions and medical records, insurance details including provider, plan and policy numbers, and bank or credit card information.

After that handover, the scammer typically disappears. The victim does not hear from them again. The work that follows happens out of sight, as the stolen details get used for identity fraud, unauthorized account access or new credit taken out in someone else's name.

The tell

The deadline is real. The caller is not. Genuine Medicare does not need a beneficiary to confirm a Social Security number or bank details over an unexpected call, text or ad, no matter how official the logo looks. Anyone contacted this way can hang up or close the message and call Medicare back using a number they already have, rather than one given by the caller.