---

For millions of older Americans, MyChart has become a routine part of managing healthcare. It’s where patients may check test results, communicate with doctors, schedule appointments, and review prescriptions.

That familiarity is exactly what scammers are trying to exploit.

Health systems around the country are warning patients about fraudulent emails and text messages that look as though they came from MyChart. The messages typically tell recipients they qualify for a free “MyChart Medicare Kit,” “Medicare Health Kit,” “Senior Health Package,” or similar benefit.

There’s just one problem: there is no such MyChart giveaway.

The Pennsylvania Attorney General’s Office warned consumers about the scam in late August. By that point, dozens of health systems around the country had also issued warnings.

---

How the scam works

The approach can be particularly effective against older adults because the message combines two familiar names: MyChart and Medicare.

A recipient may receive an email or text saying a free 2026 Medicare Health Kit is waiting to be claimed. The message contains a link that leads to a website or survey.

Some versions eventually ask the recipient to provide a credit or debit card number to cover a small shipping fee for the supposedly free medical supplies. That small payment can open the door to additional charges.

In one complaint reported to the Federal Trade Commission (FTC), a consumer in their 70s provided a Mastercard number to pay $9.95 for shipping. Another attempted charge of $29.95 reportedly followed.

Other versions of the scam may be designed to steal something potentially even more valuable: MyChart usernames and passwords, verification codes, Medicare information, or other personal data.

---

A MyChart message doesn’t mean MyChart was hacked

Receiving one of these messages does not necessarily mean criminals have gained access to your medical records or that your doctor’s office has suffered a data breach.

Instead, scammers are impersonating a service they know many patients already trust. It’s a form of social engineering. A message that carries a familiar MyChart logo and mentions Medicare may appear legitimate, especially when it arrives among genuine healthcare notifications.

Logos aren’t proof that a message is authentic. They can easily be copied and placed in fraudulent emails and websites.

---

Red flags

Older adults and caregivers should be cautious about unexpected messages offering free Medicare supplies, health kits, wellness packages, prizes, or rewards.

Be especially suspicious if a message asks you to provide a Medicare number, insurance information, MyChart password, or verification code. Requests to complete a survey or pay a small shipping or processing charge are also warning signs.

Even an “unsubscribe” link can be risky. Some health systems have warned patients not to click unsubscribe buttons in suspicious MyChart messages because the link itself could be malicious.

The safest response to an unexpected MyChart email or text is simple: don’t click anything in the message.

Instead, open the MyChart app that you normally use or type your healthcare provider’s known website address into your browser. If the message is about an appointment, bill, prescription, or test result, that information should generally also appear in your legitimate account.

If you’ve already entered your MyChart password on a suspicious website, change it immediately and review your account for anything unusual.