In this article4
If you got a text or email offering a free "MyChart Medicare Kit" or "Senior Health Package," don't click it. It's a phishing scam, and Pennsylvania Attorney General Dave Sunday says no such program or reward exists. Becker's Hospital Review lists 41 health systems that either warned patients about it or had patients report the messages. With Medicare Open Enrollment underway, here's how to spot the message, what to do if you clicked, and another Medicare scam going around this fall.
📋Quick Summary
- Texts and emails offering a "MyChart Medicare Kit" or "Senior Health Package" are a scam. No such kit or reward exists.
- They don't come from MyChart, its parent company Epic, or health systems.
- The goal is to get you to click a link and give up your MyChart password or personal information.
- Delete the message without clicking any links, including "unsubscribe."
- A separate pitch says you must join a Part D drug plan or lose Medicare coverage. Part D is voluntary, so ignore it.
What the Fake MyChart Message Looks Like
The messages use the name of MyChart, a popular online patient portal used by many hospitals and health care providers, and offer a free "Medicare Kit" or "Senior Health Package." Becker's reports subject lines such as "Your MyChart Medicare Kit Awaits!" Virtua Health says the messages don't come from MyChart, its parent company Epic, or Virtua or other health systems.
The Pennsylvania Attorney General's office says the messages try to trick you into clicking malicious links and giving up passwords and personal information, which allows hackers to get into patients' MyChart portals.
Becker's list includes Penn Medicine, Cleveland Clinic, Mass General Brigham, Northwell Health, MD Anderson Cancer Center, Mount Sinai Health System and Emory Healthcare.
Virtua Health says MyChart does not offer giveaways, and that messages promising free gifts or health kits may be scams.
How to Spot It, and What to Do If You Clicked
- Look closely at the sender's full email address and the website address.
- Watch for spelling and grammar errors, and for offers of free items or services, especially ones that need a quick decision.
- Delete the message without clicking links or opening attachments. Don't click "unsubscribe," which is likely also malicious.
- Don't reply with your password or verification codes by phone, text or email. Virtua says it will never ask you for them.
- MyChart will not ask you to use keyboard shortcuts or run commands to "verify," "fix" or "unlock" your account, so don't follow a message that says it will.
- Use only the official MyChart website or app your medical team gave you. If you're not sure how to reach it, contact your medical office.
In a post that Epic pointed Becker's to, Epic's director of research and development, Trevor Berceau, said the rise in scam attempts is due to scammers taking advantage of the popularity of the MyChart brand rather than any security concern, and that patients can continue to use MyChart as normal.
If you already clicked or entered your password: Don't reply or enter anything more. Contact your doctor's office using the number on your own records, and report the message using the options below.
Related Medicare Updates
Another Scam This Fall: "Join Part D or Lose Medicare"
On October 12, Michigan's insurance and health departments told older adults to ignore anyone who says they must join a Part D prescription drug plan or lose their Medicare coverage. They say the drug plan is "completely voluntary."
Going without drug coverage can still cost you later: if you go 63 or more days in a row without Medicare drug coverage or other creditable drug coverage after your Initial Enrollment Period is over, you may owe a late enrollment penalty that is permanently added to your premium. But Medicare will never call you to sell you anything.
Michigan also says insurance agents and brokers can't state that they're from Medicare or that Medicare or any state or federal agency asked them to call or visit you, and that a postcard claiming to be from Medicare or authorized by Medicare is a scam. Our guide to Open Enrollment scams covers other tricks to watch for.
If you're comparing drug plans for real, see our plan-by-plan look at 2027 premiums.
Where to Report It
- Report suspected Medicare fraud by calling 1-800-MEDICARE (1-800-633-4227).
- If you're in a Medicare Advantage or drug plan, you can also call the I-MEDIC at 1-877-772-3379.
- Report scams to the Federal Trade Commission at ReportFraud.ftc.gov.
- Get help from your local Senior Medicare Patrol.
- In Pennsylvania, you can report scams to the Attorney General's Bureau of Consumer Protection at 1-800-441-2555 or through its online complaint form.
- Scammers also use AI-generated voices on calls. See our guide to AI voice scam calls.
Scammers also use fake "benefit card" texts. See our guide to the Medicare benefit card text.
✅What This Means For You
If you got a "MyChart Medicare Kit" message: Delete it without clicking anything. The kit doesn't exist.
If you already clicked or entered your password: Don't reply or enter anything more. Call your doctor's office using the number on your own records, and report the message.
If someone calls saying you must join Part D or lose Medicare: Hang up. Part D is voluntary, and Medicare won't call to sell you a plan. Call 1-800-MEDICARE yourself if you have questions.
If you help an older parent or relative: Tell them the MyChart kit isn't real, and remind them to use only the MyChart app or website their doctor gave them.
Sources
- 41 health systems warn of MyChart 'Medicare Kit' scam — Becker's Hospital Review, Aug 27, 2026
- AG Sunday Warns Pennsylvanians of Phishing Scam Targeting “MyChart” Patient Portal Users — Pennsylvania Office of Attorney General, Aug 28, 2026
- Email Scam Warning: Delete Emails Offering 'MyChart Medicare Kit' or 'Senior Health Package' — Virtua Health, Aug 26, 2026
- DIFS and MDHHS Share Tips to Help Older Adults Avoid Scams During Medicare Open Enrollment Period — Michigan Department of Insurance and Financial Services and Michigan Department of Health and Human Services, Oct 12, 2026
- How much does Medicare drug coverage cost? — Medicare.gov, Undated, accessed Oct 29, 2026
- Reporting Medicare fraud & abuse — Medicare.gov, Undated, accessed Oct 29, 2026
- ReportFraud.ftc.gov — Federal Trade Commission, Undated, accessed Oct 29, 2026
- Senior Medicare Patrol — Senior Medicare Patrol Resource Center, Undated, accessed Oct 29, 2026
- Scam Complaints — Pennsylvania Office of Attorney General, Undated, accessed Oct 29, 2026
Explore Further
Common questions about the MyChart Medicare Kit scam
- Is the MyChart Medicare Kit real?
- No. Pennsylvania's attorney general says no such program or reward exists. Texts and emails offering it are a phishing scam meant to get your password and personal information.
- Is the MyChart Medicare Kit message from my doctor?
- No. Health systems say these messages don't come from MyChart, its parent company Epic, or the health systems themselves. If you're unsure, call your doctor's office using the number on your own records.
- Is it still safe to use MyChart?
- Epic says the scam attempts come from scammers using the popular MyChart name, not from a security concern, and that patients can continue to use MyChart as normal. Use only the official app or website your medical team gave you.
- Do I have to join a Part D plan or lose my Medicare?
- No. Michigan's insurance and health departments say the drug plan is completely voluntary and tell people to ignore anyone who says you must join or lose your Medicare coverage. If you go 63 or more days in a row without Medicare drug coverage or other creditable drug coverage after your Initial Enrollment Period is over, you may owe a late enrollment penalty.
- Where do I report a MyChart or Medicare scam?
- Call 1-800-MEDICARE (1-800-633-4227) for suspected Medicare fraud and report scams to the FTC at ReportFraud.ftc.gov. In Pennsylvania you can also contact the Attorney General's Bureau of Consumer Protection at 1-800-441-2555. If the message used your health system's name, contact your doctor's office too.
