Medical identity theft is one of the fastest-growing forms of fraud, yet it receives far less attention than credit card theft or financial identity theft. If someone steals your insurance information, they can file fraudulent claims, receive medical treatment under your name, and saddle you with thousands of dollars in bills — all while potentially corrupting your medical records with dangerous inaccuracies.
Why Insurance Fraud Is So Dangerous
Unlike a stolen credit card that you can cancel and replace, insurance identity theft can have life-threatening consequences. When a thief uses your health insurance to receive medical care, their medical history — including blood type, allergies, medications, and conditions — can get mixed into your records. In an emergency, doctors relying on those corrupted records could make treatment decisions based on someone else's medical profile.
Insurance fraud also has severe financial consequences. Victims report spending an average of $13,500 and over 200 hours resolving medical identity theft — far more than traditional identity theft.
Signs Your Insurance Information Has Been Stolen
Watch for these warning signs:
- Unexpected medical bills for treatments or procedures you never received
- Explanation of Benefits (EOB) statements listing services you didn't use
- Collection notices for medical debts you don't recognize
- Insurance claim denials because your benefits have been maxed out by someone else
- Errors in your medical records — conditions, medications, or treatments that aren't yours
- IRS notices about unreported medical income or discrepancies on your tax return
- Calls from healthcare providers about appointments you didn't schedule
Check Your Medical Records Regularly
Request copies of your medical records from your primary care physician and any specialists at least once a year. Look for unfamiliar diagnoses, prescriptions, or procedures. Catching discrepancies early can prevent dangerous mix-ups and limit financial damage.
Immediate Steps to Take
1. Contact Your Insurance Company
Call your insurer's fraud department immediately. Report the unauthorized activity and request a review of all recent claims. Ask them to:
- Flag your account for fraud monitoring
- Issue a new insurance ID number
- Provide a complete list of all claims filed under your policy
- Investigate and reverse any fraudulent charges
2. Request Your Medical Records
Contact every healthcare provider, hospital, pharmacy, and clinic where the thief may have used your information. Under HIPAA, providers must respond to your records request within 30 days. Review the records carefully and flag any entries that don't belong to you.
3. File a Report at IdentityTheft.gov
Visit IdentityTheft.gov to create a personalized recovery plan. The FTC's site will generate a detailed action plan specific to your situation and provide pre-filled letters you can send to insurance companies and healthcare providers.
4. File a Police Report
While local police may not actively investigate medical identity theft, a police report creates an official record that can help you dispute fraudulent charges and prove to creditors and insurers that you're a victim of crime.
5. Place a Fraud Alert on Your Credit
Medical identity theft often leads to financial identity theft. Contact one of the three credit bureaus (Equifax, Experian, or TransUnion) to place a fraud alert on your credit file — the bureau you contact is required to notify the other two. Consider a credit freeze for stronger protection.
6. Review Your Credit Reports
Check your credit reports at AnnualCreditReport.com for any unfamiliar medical debt in collections or new accounts opened in your name. Dispute any fraudulent entries in writing.
How to Correct Your Medical Records
Correcting medical records after identity theft requires persistence:
- Write to each healthcare provider identifying the specific entries in your records that are fraudulent
- Request an "accounting of disclosures" to learn who has received your medical information
- Ask providers to notify other entities who may have received incorrect records
- Follow up in writing if providers don't respond within 30 days
If a provider refuses to correct your records, you have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.
Keep a Detailed Paper Trail
Document every phone call, letter, and interaction related to your case. Record dates, names of representatives, reference numbers, and outcomes. This documentation is essential if you need to escalate your case to regulators or pursue legal action.
Protecting Yourself Going Forward
- Guard your insurance cards like you would a credit card — don't leave them in your car or share photos of them
- Review every EOB statement as soon as it arrives, even if you think it's routine
- Shred documents containing insurance information before discarding them
- Use a secure patient portal instead of email for healthcare communications
- Be wary of unsolicited calls from people claiming to be from your insurance company — verify by calling the number on your insurance card directly
- Monitor your credit regularly for medical debt collections
Remove Your Personal Data From Broker Sites
Thieves often obtain insurance and personal information from data broker websites, which aggregate your name, address, phone number, and other details from public records and commercial sources. Removing your information from these sites reduces the raw material available to identity thieves.
PrivacyOn continuously monitors and removes your personal information from over 100 data broker sites, includes dark web monitoring to alert you if your data appears in stolen databases, and provides 24/7 protection for your entire family. It's one of the most effective ways to reduce your exposure to insurance fraud and other forms of identity theft.