Medical identity theft happens when someone uses your personal information to get medical care, buy drugs, or file fake insurance claims. It can ruin your medical records and cost you thousands of dollars. You need to act fast. Report it to your health insurer, the Federal Trade Commission, your healthcare providers, and the three major credit bureaus. You also need to get a copy of your medical records and dispute any wrong information. This guide walks you through each step in order.
How To Report Medical Identity Theft Step By Step
Start by gathering proof. Collect your insurance cards, any bills or explanation of benefits that look wrong, and notes about what you know. Then follow these steps in order.
First, call your health insurer. Tell them your identity was stolen and ask them to flag your account. They will open a fraud investigation and may issue you a new member ID number. Ask for that in writing.
Second, file a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official identity theft report. You will also get a personalized recovery plan. The FTC report is a key document you will need later.
Third, report the theft to your healthcare providers. Call the offices where the thief received care. Ask to speak with their privacy officer or compliance department. Tell them the records are fraudulent and ask them to flag your file.
Fourth, file a police report. Some providers and insurers require one before they will correct records. Go to your local police station with your FTC report and any evidence you have.
Fifth, contact the three credit bureaus. Place a fraud alert on your credit files. A fraud alert makes it harder for someone to open new accounts in your name. Review your credit reports for any medical collection accounts you do not recognize.
What Does Medical Identity Theft Look Like?
Medical identity theft can be hard to spot because it does not always show up on your credit report. The thief might use your name and insurance number to get treatment. Your medical records then contain their diagnoses, allergies, and test results.
Common warning signs include a bill for a service you never received, a call from a debt collector about a medical debt that is not yours, an explanation of benefits showing a visit you never made, or a denial of insurance coverage because you hit a benefit limit you did not know about.
You might also find wrong information in your medical records. A blood type that is not yours. A diagnosis for a condition you do not have. An allergy listed that you have never had. These errors can be dangerous the next time you need medical care.
Some people only discover the theft when they are denied coverage or prescribed a medication that conflicts with a condition they never had.
Why Is Medical Identity Theft Dangerous?
Financial identity theft costs you money. Medical identity theft can cost you your health. If a thief’s blood type, allergy information, or diagnosis gets into your records, a doctor could make a treatment decision based on wrong data.
For example, if the thief is allergic to penicillin and that allergy is on your chart, you might be denied a drug you need. If the thief has a chronic condition like diabetes, your doctor might treat you for a disease you do not have.
There is also a financial side. The thief may leave unpaid bills in your name. Those bills can go to collections and damage your credit score. You may also lose your health insurance eligibility if the thief uses up your benefits.
Medical identity theft also affects your medical history in ways that are hard to reverse. Correcting credit report errors is straightforward. Correcting medical records requires contacting every provider the thief visited and asking them to fix their files.
What Documents Do You Need To Report Medical Identity Theft?
Before you start reporting, gather these items. Having them ready makes the process faster.
- Your health insurance card and member ID number
- A copy of your FTC identity theft report
- Any bills or explanation of benefits that are not yours
- A list of providers the thief may have visited
- Your driver’s license or other government ID
- Your Social Security number if the thief used it
The FTC report is the most important document. It gives you legal protections under the Fair Credit Reporting Act. It also helps when you dispute fraudulent charges with providers or insurers.
Keep copies of every letter, email, and form you send. Write down the date, time, and name of everyone you speak with. You may need this trail if the dispute drags on.
How To Get Your Medical Records Corrected
Under federal law, you have the right to see and correct your medical records. The Health Insurance Portability and Accountability Act, or HIPAA, gives you this right. Providers must respond to your request within 30 days in most cases.
Start by requesting a copy of your medical records from every provider the thief visited. You will need to know which providers those are. Your insurer’s fraud department can often tell you where the thief received care.
Review the records carefully. Look for diagnoses, test results, prescriptions, and personal details that are not yours. Write down exactly what is wrong.
Send a written dispute to each provider. Explain that your identity was stolen and list the specific errors. Include a copy of your FTC report and any police report you filed. Ask them to correct or remove the wrong information.
Providers are not always quick to fix records. They may ask for more proof. They may also claim the records are accurate because the person presented your ID. Stay persistent and keep records of every interaction.
How To Protect Yourself After Reporting
After you report the theft, your work is not done. You need to monitor your accounts and records for signs that the thief is still active.
Place a fraud alert on your credit files. The alert lasts one year and can be renewed. It requires businesses to verify your identity before opening new accounts.
Consider placing a credit freeze. A freeze blocks access to your credit report entirely. It is stronger than a fraud alert but also more inconvenient because you must lift it before applying for credit. Both options are free.
Review every explanation of benefits you receive. Even after you report the theft, a new fraudulent claim can appear. Check your insurer’s online portal regularly for activity you do not recognize.
You may also want to request a copy of your medical records every few months for the first year. This helps you catch new errors before they become a problem.
What If The Thief Used Your Social Security Number?
Medical identity theft sometimes involves your Social Security number. If the thief used it to get care or file claims, the risk is higher. They may also use it to open financial accounts or commit other fraud.
Contact the Social Security Administration if you believe your number was used. You can also place a fraud alert on your credit files as described above.
Your FTC identity theft report is still your main tool. It documents the crime and gives you a recovery plan. Follow that plan even if it feels repetitive.
If the thief used your Social Security number for employment purposes, the IRS may be involved. The IRS has a process for identity theft victims. You can find guidance on their website.
Can You Prevent Medical Identity Theft?
You cannot fully prevent someone from stealing your information. But you can make it harder and catch it earlier.
Never share your insurance card or member ID with anyone who does not need it. Treat it like a credit card. Do not post photos of it on social media, even to show a new baby or a recent visit.
Shred documents that contain medical or insurance information before throwing them away. Review your explanation of benefits statements every month. If you see a claim you do not recognize, call your insurer immediately.
Be cautious about giving your information to free health screenings or wellness events. Some of these are legitimate. Some are designed to collect personal data. Ask why they need your insurance information and how they will protect it.
If you get a call or email asking for your insurance information, do not provide it. Call the company back using a phone number you know is correct.
Frequently Asked Questions
How long does it take to resolve medical identity theft?
It can take several months to over a year depending on how many providers were involved. The longer the thief used your information, the more records need correction.
Will I have to pay medical bills that are not mine?
No. Under federal law, you are not responsible for debts caused by identity theft. You must file an FTC report and dispute the charges with the provider and credit bureaus.
What is the difference between a fraud alert and a credit freeze?
A fraud alert requires businesses to verify your identity before opening accounts and lasts one year. A credit freeze blocks access to your credit report entirely until you lift it.
Can medical identity theft affect my health insurance coverage?
Yes. If the thief uses your benefits, you may hit coverage limits or receive denials for care you need. Report the theft to your insurer immediately to protect your benefits.
