Got a new Medicare card in the mail? How to spot the real one from a scam

Older Americans have been told to watch out for mail scams, especially ones involving Medicare. Even well-laid retirement plans can be easily derailed by fraudsters. However, a recent data security breach has caused the federal government to issue new Medicare cards via mail.

Here's what happened and how you can spot the real Medicare card from the fake one fraudsters send.

Why did Medicare send new cards?

In May 2025, Medicare began receiving calls from beneficiaries who received letters confirming that they had created Medicare.gov accounts they never made. The Centers for Medicare & Medicaid Services investigated and found that bad actors had fraudulently created accounts between 2023 and 2025 using valid beneficiary information, including Medicare Beneficiary Identifiers, dates of birth, ZIP codes, last names, and coverage start dates.

In response, CMS deactivated the fraudulent accounts, blocked the creation of new Medicare.gov accounts from foreign IP addresses, and began replacing Medicare numbers and mailing new cards to affected beneficiaries.

Roughly 1.3 million Medicare beneficiaries have been issued new cards with new ID numbers following a data security incident, according to the Pennsylvania Health Law Project. The new Medicare numbers became effective April 14, 2026, and replacement cards have been arriving in mailboxes nationwide ever since, TheStreet reports.

What a real Medicare card looks like

Medicare cards are paper, and they're free, according to the FTC. If someone offers you a "new plastic card," that's a script scammers have used for years and a tell that they're trying to trick you into giving them your money.

The legitimate replacement also arrived with a letter from Medicare explaining why a new number was issued, along with instructions to destroy your old card. Forbes contributor and Medicare specialist Diane Omdahl reviewed the mailings her clients received and noted that the real letters did not ask for money, gift cards, or personal information, and the paper card should match the sample shown on Medicare.gov.

What a scam looks like

Scam versions tend to invert every one of those details. A plastic or laminated card designed to look more official than the paper original. A phone number you're urged to call to "verify your identity" or "activate" your benefits. And pressuring you to act right now.

The FTC warns that scammers ask for Medicare numbers to "verify your identity" or to offer "new plastic cards," then use what you share to commit fraud in your name.

Here are a few things real Medicare will never do

• Call, text, or email you out of the blue asking for your Medicare, bank account, or credit card numbers
• Charge you for a new or replacement card. Real cards are free and mailed automatically.
• Call you uninvited to request personal information for you to get your new card
• Tell you your card is expiring. As long as you're enrolled and paying your premium, it doesn't expire.

How serious is this threat?

The amount of Medicare fraud is quite staggering, so the potential for scammers needs to be taken seriously. The Senate Special Committee on Aging's 2025 fraud report found $80.5 million in confirmed losses to health care scams in 2024, and notes the real figure is likely much higher because these losses often go unreported. 

Government imposter scams more broadly, the category that includes fake Medicare calls, cost victims nearly $789 million in 2024, per FTC data cited in the same report.

Still not sure? Verify it yourself

If a mailing feels off, call Medicare directly at 1-800-MEDICARE (1-800-633-4227). Use that number, not any number printed on the mailer in question. A scammer's phone number always connects you to the scammer, no matter how official the letterhead looks.

You can also log into your account at Medicare.gov to check your enrollment and card information, or create one if you haven't yet. And if you were affected by the breach, share your new card and ID number with your health care providers as soon as possible to avoid billing hiccups.

Think you've spotted a scam? Report it to the FTC at ReportFraud.ftc.gov, or call 1-800-MEDICARE. The CMS also recommends reviewing your Medicare Summary Notices and Explanation of Benefits for unfamiliar charges and reporting anything suspicious.

Bottom line

The new Medicare card that arrived this spring is most likely the real thing: paper, free, and accompanied by a letter that explains the security incident without asking you to activate anything or hand over personal information. The fakes give themselves away with plastic cards, callback numbers, and pressure to act fast.

When something feels off, skip the number on the mailer and call 1-800-MEDICARE directly. It would be a big financial mistake if you got scammed by someone pretending to be a Medicare representative, so you need to be diligent in protecting your information.

One wrinkle worth knowing if you're among the roughly half of beneficiaries on Medicare Advantage is that your day-to-day card doesn't change. CMS says those enrolled in Medicare Advantage or Part D drug plans should keep using their plan's ID card as usual at the doctor and pharmacy, though they'll still need their Medicare number when switching plans or being admitted to the hospital.

So file the new paper card somewhere safe, treat the number like a credit card, and be suspicious of anyone claiming your Advantage plan needs it to "update your records."