Fake Healthcare Enrollment Scams via Email
How fraudulent emails impersonating health insurance marketplaces and government health programs enroll recipients in worthless plans or harvest Social Security numbers during open enrollment windows.
Part of: Fake Government Healthcare Enrollment Scams
Last reviewed: 9 June 2026
The open enrollment period for health insurance generates a predictable surge of legitimate promotional and administrative emails from insurers, marketplaces, and brokers. This surge creates cover for fraudulent enrollment emails that blend into a recipient's inbox at precisely the moment they are actively seeking coverage information. An email about a plan, a subsidy, or an enrollment deadline arriving during open enrollment does not immediately raise suspicion.
Fake healthcare enrollment emails exploit this seasonal pattern more effectively than phone calls, because an email can present a full plan summary with branding, fee schedules, and network descriptions that look convincingly professional. The email format also allows recipients to share the link with a family member, unwittingly spreading the reach of the fraudulent portal.
This guide covers how to identify a fraudulent enrollment email and the specific data it should never request.
How this scam works on email
An email arrives appearing to come from healthcare.gov, a state marketplace, or a well-known insurer. It references the current enrollment period and describes a plan for which the recipient appears to qualify, including a premium amount that reflects a subsidy calculation. A call to action directs the reader to enroll or confirm their existing coverage.
The link leads to a convincing enrollment portal that requests the standard information a genuine marketplace enrollment requires: full name, date of birth, household income, address, and Social Security number for identity verification. It may also ask for bank account details to set up automatic premium payments or to receive an upfront subsidy payment.
After the information is submitted, the portal may display a confirmation screen and even a fake plan ID card. The data is used for identity theft and fraudulent insurance applications in the victim's name. The victim may only discover the fraud when they try to use their supposed coverage and find no record of enrollment.
Common red flags
- Email link goes to a domain that is not the official marketplace website for your state
- Plan offers premium amounts or subsidies that seem too good compared to other options you have seen
- Portal requests bank account details for premium payments before any plan is formally accepted
- Email address of sender does not match the official marketplace or insurer domain
- Urgency about a closing deadline that cannot be confirmed on the official enrollment calendar
- Portal does not allow you to log in with an existing marketplace account
How to protect yourself
- Access enrollment only through healthcare.gov (US) or your official state marketplace portal — type the address directly
- Verify the open enrollment dates on the official portal before responding to any enrollment email
- Never provide your Social Security number through a link in an email — log in to your existing account directly
- If you have submitted information to a suspicious portal, place a fraud alert with the credit bureaus and check your official enrollment status
- Verify any plan through the official marketplace search before accepting it
How to report it
- Report to the FTC at reportfraud.ftc.gov
- File a complaint with your state insurance commissioner
- Report phishing emails to the Anti-Phishing Working Group at [email protected]
- If Social Security number was shared, contact the SSA's OIG at 1-800-269-0271
Frequently asked questions
How can I verify that a healthcare enrollment email is genuine?
Go to the official marketplace website directly and log in to your account. Any real notification about your coverage or enrollment period will be reflected there. Never rely solely on an email to confirm enrollment status.
What does a genuine healthcare marketplace email look like?
Genuine marketplace emails direct you to log in to your existing account at the official domain — they do not ask you to enter your SSN or banking details via a new form. They also reference your existing coverage or a specific plan you have previously viewed.