The FTC has received 166 complaints over the past five years referencing MyChart, with several related to the current “Medicare Kit” phishing wave, Gizmodo reported.
The scam emails carry subject lines such as “Your MyChart Medicare Kit Awaits!” and offer a free “Senior Health Package” tied to Medicare wellness benefits, directing recipients to complete a short survey and pay a shipping fee to claim the kit. Complainants in Illinois, Minnesota, Oklahoma and Indiana, filed between July and August 2026, reported entering credit card information only to be charged twice — once for the advertised shipping cost and again by a separate, unrelated company, according to the Sept 8 story.
The wave follows warnings from dozens of health systems since mid-August, including Norfolk, Va.-based Sentara Health, Philadelphia-based Penn Medicine and Cleveland-based MetroHealth. Epic pointed the news outlet — and Becker’s — to its existing “Staying Safe From Scams and Fraud” guidance on MyChart.org, which advises anyone who entered payment information to contact their bank and anyone who downloaded a file from a phishing site to disconnect the device before reconnecting it to personal or work accounts.
MyChart is used by patients at thousands of hospitals and clinics nationwide, giving a single templated phishing campaign the potential to reach a broad share of the country’s patient population regardless of which health system they use.
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
