You open your mailbox and find a letter that looks terrifyingly official. It bears the logo of the U.S. Department of Health and Human Services, and it claims a recent audit of your account shows you received “improper payments” over the last year.
The letter warns that unless you verify your banking details immediately, the government will initiate a “clawback” of your Social Security benefits to recover the debt.
Alternatively, the letter might claim the opposite: You have overpaid your Medicare premiums and are owed a refund of thousands of dollars, but you must act now to claim it before the money is forfeited to the U.S. Treasury Department.
Both scenarios are lies. They are the latest evolution of Social Security and Medicare fraud — sophisticated, high-pressure schemes designed to exploit the confusion surrounding governmental changes.
Scams are as old as time, and they’ve survived by evolving. New rules and other changes can leave people confused, which creates an opening for fraudsters. Always stay guarded, but especially concerning anything that references the following.
Clawbacks
The term “clawback” terrifies anyone on a fixed income. It implies the government is coming to take money you have already spent. Scammers latch onto this legalistic term to sound authoritative.
Fraudsters are sending fake “demand letters” that mimic the visual style of the Social Security Administration or the Centers for Medicare & Medicaid Services (CMS). These letters often cite Section 1870 of the Social Security Act or other real statutes to convince you that the threat is legitimate.
They claim that due to a calculation error, you were overpaid. They threaten that your future benefits will be garnished — or “clawed back” — unless you pay a settlement immediately via wire transfer, gift card or cryptocurrency.
The reality is simple: Social Security and Medicare do not email or text you regarding overpayments.
If there is a legitimate billing issue, the process involves a series of official letters from the Social Security Administration or the Medicare program. It is never a sudden demand for immediate digital payment.
The new $2,000 cap
Scammers succeed because they anchor their lies in truth. A major regulatory change took effect in 2026: The out-of-pocket cap for prescription drugs dropped to $2,000.
Criminals use this good news to confuse beneficiaries. They call seniors claiming they need to “activate” this new cap or that the new rules triggered an audit of past payments. They might say, “Because the cap is lower, you overpaid last year, and we need your bank account number to deposit the difference.”
If anyone contacts you asking for personal details to “enroll” you in the $2,000 cap, hang up. This benefit is automatic. You do not need to apply for it.
The ghost of past data breaches
The most unsettling part of these calls? How much scammers know about you. You might receive a call from someone who knows your name, your doctor’s name and exactly which medications you take.
This precision is often fueled by data stolen in massive healthcare breaches over the last two years, such as the Change Healthcare cyberattack that exposed millions of records. Scammers buy this data on the dark web and use it to build trust.
When a caller recites your medical history, it is natural to assume they are a legitimate government official.
Do not trust the data. Just because they know your doctor’s name does not mean they are from Medicare.
Red flags to watch for
You can spot these scams by looking for specific behaviors the real government never exhibits:
- The “Refund Department”: Scammers often claim to be from the “Medicare Refund Department.” This department is fiction. Medicare does not make unsolicited calls to offer refunds.
- Threats of immediate action: A legitimate government agency will never threaten to cut off your benefits or arrest you during an initial phone call. They will never demand you stay on the line.
- Unusual payment methods: The government never asks for payment via gift cards, prepaid debit cards, Bitcoin or wire transfers.
- Spoofed caller ID: Scammers can make your phone display “Medicare” or “Social Security Administration.” This technology is cheap and easy to use.
How to verify and report
If you receive a threatening letter or a suspicious offer for a refund, take a breath. Do not engage with the sender or caller.
- Hang up or stop reading. Do not press any buttons to “speak to an operator.”
- Check your official account. Log in to your Medicare account. If you truly owe money or are owed a refund, the information will be listed there in your Medicare Summary Notice (MSN).
- Call the source. If you are still worried, call 1-800-MEDICARE (1-800-633-4227). This is the only way to be certain you are speaking to a real representative.
Protect your medical identity
Your Medicare number is as valuable as a credit card number. If a scammer gets it, they can bill Medicare for bogus surgeries, braces and medications in your name. This drains the system and can corrupt your medical records, potentially leading to incorrect treatment later.
Treat your Medicare card like a Social Security card: Leave it at home unless you are going to a doctor’s appointment. If you suspect your number has been compromised, report it to the FTC immediately.
In 2026, skepticism is your best financial defense. The government moves slowly and communicates via paper mail. Anyone rushing you is trying to rob you.

Add a Comment