Fake Healthcare Enrollment Scams via Email
How fraudulent emails impersonating health insurance marketplaces and government health programs enroll recipients in worthless plans or harvest Social Security numbers during open enrollment windows.
Part of: Fake Government Healthcare Enrollment Scams
Last reviewed: 9 June 2026
The open enrollment period for health insurance generates a predictable surge of legitimate promotional and administrative emails from insurers, marketplaces, and brokers. This surge creates cover for fraudulent enrollment emails that blend into a recipient's inbox at precisely the moment they are actively seeking coverage information. An email about a plan, a subsidy, or an enrollment deadline arriving during open enrollment does not immediately raise suspicion.
Fake healthcare enrollment emails exploit this seasonal pattern more effectively than phone calls, because an email can present a full plan summary with branding, fee schedules, and network descriptions that look convincingly professional. The email format also allows recipients to share the link with a family member, unwittingly spreading the reach of the fraudulent portal.
This guide covers how to identify a fraudulent enrollment email and the specific data it should never request.
How this scam works on email
An email arrives appearing to come from healthcare.gov, a state marketplace, or a well-known insurer. It references the current enrollment period and describes a plan for which the recipient appears to qualify, including a premium amount that reflects a subsidy calculation. A call to action directs the reader to enroll or confirm their existing coverage.
The link leads to a convincing enrollment portal that requests the standard information a genuine marketplace enrollment requires: full name, date of birth, household income, address, and Social Security number for identity verification. It may also ask for bank account details to set up automatic premium payments or to receive an upfront subsidy payment.
After the information is submitted, the portal may display a confirmation screen and even a fake plan ID card. The data is used for identity theft and fraudulent insurance applications in the victim's name. The victim may only discover the fraud when they try to use their supposed coverage and find no record of enrollment.
Common red flags
- Email link goes to a domain that is not the official marketplace website for your state
- Plan offers premium amounts or subsidies that seem too good compared to other options you have seen
- Portal requests bank account details for premium payments before any plan is formally accepted
- Email address of sender does not match the official marketplace or insurer domain
- Urgency about a closing deadline that cannot be confirmed on the official enrollment calendar
- Portal does not allow you to log in with an existing marketplace account
How to protect yourself
- Access enrollment only through healthcare.gov (US) or your official state marketplace portal — type the address directly
- Verify the open enrollment dates on the official portal before responding to any enrollment email
- Never provide your Social Security number through a link in an email — log in to your existing account directly
- If you have submitted information to a suspicious portal, place a fraud alert with the credit bureaus and check your official enrollment status
- Verify any plan through the official marketplace search before accepting it
How to report it
- Report to the FTC at reportfraud.ftc.gov
- File a complaint with your state insurance commissioner
- Report phishing emails to the Anti-Phishing Working Group at [email protected]
- If Social Security number was shared, contact the SSA's OIG at 1-800-269-0271
Frequently asked questions
I gave my SSN to a fake enrollment portal. Am I actually enrolled in a real plan now?
No, providing information to a fraudulent portal does not create genuine insurance coverage. Check your actual enrollment status by logging into the official marketplace account directly, and if you have no account or the portal was not official, assume you have no real coverage from that submission.
Can scammers actually bill Medicare or use my information to buy real insurance in my name?
Yes, stolen Social Security numbers and personal details can be used to submit fraudulent insurance applications or claims in your name. Report the incident to the FTC and your state insurance commissioner, and monitor any explanation-of-benefits statements for services you did not receive.
Is it risky to give my income and household details to an enrollment email since that's normally required anyway?
Income and household details are part of a genuine subsidy calculation, but they should only be submitted through your logged-in account on the official marketplace site, not via a link in an unsolicited email. Combined with your SSN, this data is valuable for identity theft even without a bank number attached.
How can I verify that a healthcare enrollment email is genuine?
Go to the official marketplace website directly and log in to your account. Any real notification about your coverage or enrollment period will be reflected there. Never rely solely on an email to confirm enrollment status.
What does a genuine healthcare marketplace email look like?
Genuine marketplace emails direct you to log in to your existing account at the official domain — they do not ask you to enter your SSN or banking details via a new form. They also reference your existing coverage or a specific plan you have previously viewed.