Social Security and Medicare Scams: The Red Flags That Actually Matter in 2026

The stories scammers use keep changing. The four-part pattern underneath, and the handful of things these agencies will genuinely never do, don't.

SSA itself describes the common shape of nearly every Social Security scam with four words: Pretend, Prize or Problem, Pressure, Payment. Whatever the specific story, SSA will never threaten arrest, suspend your Social Security number, demand secrecy, or request payment by gift card, wire transfer, cryptocurrency, or mailed cash — and Medicare will never call to sell you something or ask for your Medicare number unprompted. In 2026, watch specifically for two current trends: fake emails offering access to your Social Security Statement, and "free" genetic testing or DME offers at health fairs that get billed to Medicare without your doctor's involvement.

This site's guide to what to do if you suspect elder abuse covers how to report financial exploitation and where to turn once something has already gone wrong. This is the piece that comes before that: what the two most impersonated government programs in the country — Social Security and Medicare — actually say about how to recognize the scams built around their own name before any money changes hands.

The "4 P's" SSA itself uses to describe the pattern

SSA's own public guidance boils nearly every version of this scam down to four common signs: the contact pretends to be from a known agency or organization; it claims there's a prize or a problem, usually something wrong with your benefits or Social Security number; it pressures you to act immediately, before you have time to think it through or check with someone else; and it demands payment in a specific, unusual way. This pattern holds regardless of the specific channel — phone call, text, email, a fake website, or even a physical letter on official-looking letterhead — and regardless of the specific cover story, which changes constantly as scammers adapt. Scammers have spoofed caller ID to show a real government number, invented fake "badge numbers," and mailed convincing-looking documents, so appearance alone, even an accurate-looking phone number, isn't a reliable way to verify legitimacy.

What SSA and Medicare will genuinely never do

This is the more reliable test, because it doesn't depend on spotting a suspicious tone or an unfamiliar phrase — it's a short, fixed list. SSA will never threaten arrest or legal action, never say it will suspend or cancel your Social Security number, never demand secrecy about the contact, and never request payment by gift card, prepaid debit card, wire transfer, cryptocurrency, or cash sent through the mail. Medicare's own guidance is similarly direct: Medicare won't call to sell you anything, and won't ask for your Medicare number or payment information over a call you didn't initiate. Give your Medicare number only to a participating Medicare provider, pharmacist, or someone you've specifically authorized to handle it on your behalf. Any contact that crosses one of these lines is a scam, independent of how official everything else about it looks.

The 4 P's

Pretend, Prize or Problem, Pressure, Payment — SSA's own framework for the pattern behind nearly every version of the scam.

2025 Complaint Volume

330,000+ FTC complaints involving government impersonation in 2025 — up 25% from the year before.

Never Requested

Gift cards, wire transfers, crypto, mailed cash, or your Medicare number over an unsolicited call. Ever.

Genetic Testing Fraud

$3.6 billion in Medicare lab billing from genetic tests in a recent year; $1.17B+ charged in a 2026 national fraud takedown.

The 2026 twist: fake Social Security Statement emails

SSA is specifically warning of a sharp 2026 uptick in a newer variation: emails that claim to offer access to your Social Security Statement, the official record of your earnings history and estimated future benefits. Clicking the link in one of these emails can expose personal information, leading to identity theft, financial loss, or compromised data, according to SSA's own warning. The safest way to check your actual Social Security Statement is to go directly to ssa.gov and log in through your own my Social Security account, never through a link in an unsolicited email, text, or message, no matter how official the sender name looks.

SSA and its Office of the Inspector General run an annual public awareness campaign called "Slam the Scam Day," held each March as part of the FTC's National Consumer Protection Week, specifically to keep pace with how these scams keep evolving. The scale of the underlying problem is real: the FTC received more than 330,000 complaints involving government impersonation in 2025 alone, a 25% increase over the prior year.

Medicare's other big scam category: it's not always a phone call

Alongside phone-based impersonation, Medicare fraud increasingly shows up through a different channel entirely: in-person offers at community events and health fairs. A common version involves a "free" genetic test, cheek swab, or health screening, offered with pressure language like "your doctor has already approved it" or "Medicare will cover everything." The test then gets billed to Medicare, even though it wasn't ordered by the person's own physician and often isn't medically necessary. This isn't a fringe issue: genetic testing accounted for $3.6 billion of Medicare's laboratory billing in a recent year, and a 2026 national health care fraud takedown announced charges connected to more than $1.17 billion in fraudulent telemedicine and genetic testing claims. The same basic caution applies to unsolicited offers of "free" durable medical equipment like wheelchairs, walkers, or diabetic supplies — this site's own DME coverage explainer covers what a legitimate DME order and Medicare-enrolled supplier actually look like, which is the clearest way to tell a real offer from a fraudulent one.

What to do if you're targeted

Don't provide any personal information, Medicare or Social Security numbers, or payment details, and don't let the pressure to act immediately override the instinct to hang up or close the message and verify separately. A suspected Social Security scam can be reported to the SSA Office of the Inspector General; suspected Medicare fraud can be reported to 1-800-MEDICARE or the HHS OIG Hotline at 1-800-HHS-TIPS (1-800-447-8477). If money or personal information has already been given up, the National Elder Fraud Hotline at 1-833-372-8311 is staffed specifically to help adults 60 and older navigate reporting and next steps — the same resource covered in more depth in this site's guide to responding to suspected elder abuse or exploitation.

The "4 P's" framework, the list of things SSA will never do, the 2026 fake-Statement-email warning, and the "Slam the Scam Day" campaign details were verified directly against SSA and SSA OIG's own official press releases and guidance (ssa.gov, oig.ssa.gov), not secondary summaries. The 330,000+ 2025 FTC complaint figure and 25% year-over-year increase are also drawn directly from SSA's own press release citing FTC data. The genetic testing and DME fraud figures ($3.6 billion in lab billing, $1.17 billion+ in the 2026 fraud takedown) were verified against HHS-OIG and CMS reporting. See our Editorial & Methodology page for how we verify figures.

Frequently Asked Questions

What are SSA's "4 P's" of a Social Security scam?

Pretend, Prize or Problem, Pressure, and Payment. Scammers pretend to be from a known agency, claim there's a prize or a problem with your benefits or Social Security number, pressure you to act immediately, and demand payment in a specific, unusual way. SSA itself uses this framework to describe the common shape of nearly every version of the scam, regardless of the specific story used.

Will Social Security or Medicare ever call and ask for payment?

No. SSA will never threaten arrest or legal action, suspend your Social Security number, demand secrecy, or request payment by gift card, prepaid debit card, wire transfer, cryptocurrency, or mailed cash. Medicare will never call to sell you something or ask for your Medicare number or payment over an unsolicited call. Any contact demanding immediate payment this way is a scam, regardless of how official it sounds or what caller ID shows.

What is the "Slam the Scam" campaign?

An annual public awareness campaign run by SSA and its Office of the Inspector General, held each March as part of the FTC's National Consumer Protection Week, aimed at helping the public recognize, avoid, and report government imposter scams. In 2025, the FTC received more than 330,000 complaints involving government impersonation, a 25% increase over the prior year, which is part of why the campaign exists.

How does the Medicare genetic testing scam work?

Scammers offer a free cheek swab or screening at a community event, health fair, or by phone, often with pressure phrases like "your doctor has already approved it" or "Medicare will cover everything." The test is billed to Medicare even though it wasn't ordered by the person's own doctor and often isn't medically necessary. It's a genuinely large fraud category — genetic testing represented $3.6 billion of Medicare lab billing in a single recent year, and a 2026 national fraud takedown charged defendants connected to over $1.17 billion in fraudulent telemedicine and genetic testing claims.

What should I do if I think I've been targeted by a scam?

Don't provide any personal or payment information, and don't feel obligated to respond immediately. Report a suspected Social Security scam to the SSA Office of the Inspector General. Report suspected Medicare fraud to 1-800-MEDICARE or the HHS OIG Hotline at 1-800-HHS-TIPS. If financial exploitation has already occurred, the National Elder Fraud Hotline at 1-833-372-8311 offers dedicated support for adults 60 and older.

This article explains general federal guidance on recognizing Social Security and Medicare scams as of August 2026 and is not legal advice. Scam tactics evolve continuously; when in doubt, verify directly with SSA (ssa.gov) or Medicare (medicare.gov or 1-800-MEDICARE) rather than through any contact information provided by the suspicious message itself.