Few phone calls raise the pulse like one that claims to be from Medicare or Social Security. These two programs sit at the center of retirement life — which is exactly why impersonating them is one of the most common scams aimed at older adults. Understanding how the real agencies operate, and how the impostors differ, turns a frightening call into an easy hang-up.

How the Medicare impersonation scam works

A caller says they’re from Medicare and offers a reason they need your Medicare number: a new card is being issued, your plan is expiring, you qualify for extra benefits or medical equipment, or there’s been “suspicious activity” on your account. Some versions are friendly and helpful; others are stern and threatening. Both endings are the same — they need you to “confirm” your Medicare number, Social Security number, or bank details.

What the real Medicare does: Medicare communicates by mail. It does not call to sell plans, offer equipment, or ask you to verify your number. Your Medicare number is like a bank card number — the only people who should ever hear it are your doctors, your pharmacy, and callers you dialed using the number on your Medicare card (1-800-MEDICARE).

How the Social Security scam works

This version leans on fear. The caller — sometimes a recording — claims your Social Security number has been “suspended,” linked to a crime, or used to open fraudulent accounts. To fix it, you must confirm your number, pay a fee, or move your savings to “protect” them, often via gift cards or wire transfer. The caller ID may even display a real agency phone number.

What the real SSA does: Social Security numbers are never “suspended” — that isn’t a real thing. The agency communicates by mail, will never threaten arrest, and will never ask for payment of any kind, least of all by gift card. Threats plus urgency plus unusual payment methods equal a script, every time.

The three questions that unmask an impostor

• “Did I contact them, or did they contact me?” Unexpected contact asking for information or money is the number-one red flag.
• “Are they trying to rush or frighten me?” Real agencies send letters and give you time. Scammers need you scared and hurried.
• “Are they asking for an odd payment method?” No government agency accepts gift cards, wire transfers, or cryptocurrency. Ever.

What to do when the call comes

• Hang up. You owe an unexpected caller nothing — not even an explanation.
• Verify on your terms: call 1-800-MEDICARE or your local Social Security office using the number from an official letter or ssa.gov — never a number the caller provides.
• Tell someone. Mention the call to family, a friend, or your community’s staff. Scam waves hit whole neighborhoods; your report protects the next person.
• Report it: impostor calls can be reported to the FTC at reportfraud.ftc.gov, and Social Security impostors to the SSA Office of the Inspector General.

If you already shared information

Take a breath — quick action closes most doors. Call your bank if financial details were shared, monitor your Medicare statements for services you didn’t receive, and consider a free credit freeze with the three credit bureaus if your Social Security number was involved. Our calm walkthrough of what to do after a scam encounter applies here too. The most important step: tell someone without shame. These scripts are professionally engineered — falling for one is not a personal failing.

Frequently asked questions

Does Medicare ever call beneficiaries at all?

In limited cases — such as returning a call you made or following up on an issue you opened. The safe rule stands: if the call is unexpected and asks for your number or money, hang up and call 1-800-MEDICARE yourself.

Caller ID showed the real agency’s number. Doesn’t that prove it’s genuine?

Unfortunately, no. Caller ID can be faked with widely available tools — a technique called spoofing. Treat caller ID as decoration, not identification.

What if the caller already knew part of my information?

Scammers often open with details from data leaks to sound official. Knowing your name, address, or even the last digits of your number proves nothing. The request they’re building toward is what matters — and it’s what gives them away.