Medicare Open Enrollment Scams: Check Before You Share

Hypothetical Albany example: A Medicare beneficiary follows an enrollment advertisement that looks helpful and familiar. The next page asks for a Medicare number before explaining who operates the site. The beneficiary pauses: is this the government, a private insurance business or someone collecting information?

That pause is useful. I would not start by guessing whether the advertisement is a scam. I would start by identifying who is asking and whether you intended to share information with that organization. You can leave the page without completing the form.

As of October 26, 2026, Medicare’s annual open enrollment period is underway. It runs October 15 through December 7. Changes made during this period generally take effect January 1, 2027, provided the plan receives the enrollment request by December 7. Your available changes depend on your current coverage. Medicare explains the annual window here.

This guide to Medicare open enrollment scams is about verifying a contact before disclosing an identifier. It is not a recommendation to buy or change a plan.

Entry point one: an official site you open yourself

The strongest starting point is one you choose independently. Open a new browser tab and type Medicare.gov into the address bar. That is the field where website addresses go, not a search box inside an advertisement. Check the address before entering information.

A page that includes the word “Medicare” is not necessarily Medicare.gov. A government-like design or familiar organization name does not establish who owns the page. The FTC’s September 2026 insurance-search guidance warns that bad actors can buy prominent ads and use web addresses resembling government addresses.

If you use search instead, notice “Ad” or “Sponsored” labels rather than treating the first result as an official answer. My preference is simpler: bypass that uncertainty by typing the official address yourself.

Keep the original advertisement separate from your verification. You can write down the business name and the question you want answered without copying your Medicare number into a note. When you call independently, say that you are checking a contact, not requesting enrollment. If identifying information is needed during that verified conversation, ask why before deciding to provide it.

Not comfortable checking an address? Call the independently published Medicare number: 1-800-MEDICARE (1-800-633-4227). Use that number rather than one supplied by an uncertain ad or message. Explain what prompted your concern without first sending anyone a picture of your Medicare card.

Entry point two: a private insurance advertisement

Private Medicare Advantage and Part D advertising is not automatically fraudulent. Private insurance businesses can market these plans. But a private advertisement is not a government message, even when it uses familiar Medicare language.

Medicare’s plan marketing rules prohibit confusing advertisements and misleading Medicare logos. They also say plans do not need your personal information to give a quote. Information can be needed to process an enrollment request, which is a different step from browsing an offer.

Before proceeding, look for the business’s full name and the specific plan being advertised. Ask whether you are talking to the insurer, an agent or a business that passes inquiries to other sellers. Read any explanation of permission to contact you before submitting. A form requesting a call is not the same thing as choosing coverage.

If the operator remains unclear, close the form. Do not enter a Medicare number merely to discover who will receive it. Independently open Medicare.gov or use its published number to discuss a safer next step. If you still want to speak with that insurer, find its contact information independently rather than relying only on the advertisement.

Closing a form is not a promise that information already entered was never collected. If you entered identifying information and now doubt the recipient, use the reporting route below. You do not need to finish the form to justify stopping.

Entry point three: an unexpected caller or message

Here is the precise distinction: Medicare does not unexpectedly contact people to sell products or request their Medicare number. The FTC’s May 2026 Medicare fraud guidance says Medicare representatives ask for information when you contact them first. A legitimate request during a conversation you initiated is not the same as an unsolicited demand.

For an unexpected call asking for your number, end the call and independently dial Medicare. For an unexpected text or email, do not use its link or callback number to verify the sender. A name you recognize does not turn the contact into proof of identity.

Private-plan calls have their own rules. Medicare says representatives may call existing members or people who gave permission to be contacted. If you recently submitted an inquiry, a follow-up may be legitimate. Still, ask who is calling and what inquiry they are responding to. Permission to call does not require you to disclose an identifier or enroll.

I would not debate with a caller who says there is no time to check. Medicare’s rules prohibit pressuring you to sign before you are ready. You can end the conversation and use a verified channel.

Get objective New York help while keeping control

New York’s Health Insurance Information, Counseling and Assistance Program (HIICAP), provides free objective Medicare counseling. Call 1-800-701-0501 to be routed to your county’s program. The state describes its appointments as free and confidential.

This works for residents across Long Island and the Capital Region. An Albany beneficiary does not need to rely on a national advertising callback to find local help. HIICAP assists beneficiaries and their representatives, so a family helper can participate with the beneficiary’s agreement.

I suggest agreeing on the helper’s job first: locating the official page, enlarging text or writing down questions. Let the beneficiary decide when to sign in and when to share information. Do not make a shared password or a photograph of the Medicare card the default way to help.

For practical support with that approach, see our senior tech support guide. For broader browser-safety habits, our computer protection guide covers the separate technology side.

Medigap follows separate rules

Do not read “open enrollment” as permission to change every kind of Medicare-related insurance without conditions. Medigap, also called Medicare Supplement Insurance, has separate rules.

For New York residents, the Department of Financial Services explains that Medigap insurers must accept applications throughout the year without health-based denial or premium distinctions. That protection does not remove every limitation. Eligibility conditions still apply and pre-existing-condition waiting periods may apply, with reductions or waivers depending on prior coverage and circumstances. Ask HIICAP about your situation before canceling or replacing anything.

If you already shared your Medicare number

Stop the uncertain interaction and call Medicare at 1-800-633-4227. Explain what you shared and how the request arrived. Ask what protective steps are appropriate. Do not send additional information to the original contact as an attempt to undo the disclosure.

The FTC also directs suspected Medicare fraud to the Senior Medicare Patrol at 1-877-808-2468. Review Medicare statements for unfamiliar services and ask your provider or plan about inconsistencies. If someone used your information to obtain medical care or services, notify your provider or plan and report medical identity theft at IdentityTheft.gov for a personalized recovery plan.

Be cautious about anyone who subsequently offers to fix the problem for a fee. Our refund-recovery scam explainer covers that separate follow-on risk.

Related questions about enrollment verification

Does a Medicare number request always mean fraud?

No. A legitimate enrollment or beneficiary-initiated service interaction can require identifying information. Verify the recipient and purpose first. An unexpected request claiming to be Medicare is a different situation.

Can I get information without agreeing to enroll?

Yes. Medicare’s marketing rules say a plan cannot require you to speak with a sales agent to get plan information. A representative may offer enrollment materials but cannot require your signature before you are ready. Keep asking questions separate from authorizing a change.

Should my family helper take over my account?

Not simply because an advertisement is confusing. Ask for help navigating while keeping the decision to sign in or share information yours. HIICAP can provide objective assistance without turning a family member into an insurance salesperson.

References

• Medicare: Open Enrollment
• FTC: What to know ahead of Open Enrollment to avoid health insurance scams
• Medicare: Marketing rules for health plans
• FTC: Medicare fraud affects everyone, so here’s what to know and do
• New York State Office for the Aging: HIICAP
• New York DFS: Protections for Medicare Beneficiaries
• FTC: IdentityTheft.gov recovery assistance

Need help navigating official websites while keeping your personal information under your control? I’m Mitchell Flecker. For FleckTech technology help, call (631) 319-8324 on Long Island or (518) 318-8324 in the Capital Region or book a consultation. For Medicare counseling, use HIICAP.

For more plain-English guidance that helps you stay confident online, subscribe to the FleckTech newsletter.