A box arrives. Inside is a knee brace, a glucose monitor, a back support, or some other piece of medical equipment you never discussed with a doctor and never ordered. It feels almost harmless — free stuff, maybe a mix-up. State attorneys general are now actively warning that it's neither. It's the leading edge of a billing fraud scheme, and if you keep the item or ignore the bill that follows, you can become an unwitting participant in a scam that drains real money from Medicare and puts your benefits at risk.
📋Quick Summary
- State Attorneys General, including Pennsylvania's, issued fresh 2026 warnings about unsolicited durable medical equipment (DME) mailed to Medicare beneficiaries.
- Scammers obtain your Medicare number — often through a prior phone scam — then bill Medicare or you directly for equipment you never ordered or needed.
- The equipment itself (braces, monitors, wheelchairs, back supports) is often low-quality or entirely undelivered despite being billed.
- You are never obligated to pay for equipment you didn't request, and receiving it doesn't create a debt.
- Reporting it protects your benefits and helps investigators shut down the billing scheme.
- Do not use or return equipment without reporting it first — how you handle it affects the investigation.
How This Scam Actually Works
This scheme runs differently than the phone-call scams most Medicare fraud warnings focus on. Instead of trying to extract your Medicare number over the phone, the scam often starts after your number has already been compromised — through a prior phishing call, a data breach, or purchase on the black market — and the equipment itself is the second stage of the fraud, not the first.
Once a scammer has your Medicare number, they submit a claim for durable medical equipment — items like back braces, knee braces, glucose monitors, wheelchairs, or orthopedic supports — billed as medically necessary and prescribed, when no such prescription exists. Medicare pays the claim. In many cases, a low-cost or even non-functional item is actually shipped to your address to make the paper trail look legitimate; in others, nothing arrives at all despite Medicare being billed as though it did. Either way, the fraud has already succeeded before you ever open your mailbox — the box arriving on your porch is evidence of a crime that already happened, not something you caused.
Pennsylvania's Attorney General issued a direct 2026 warning on this exact pattern, noting that recipients who receive equipment they didn't order should not assume it's a harmless mix-up. The office specifically advised residents to report unsolicited devices both to Medicare and to their state's consumer protection office, since the scheme depends on victims staying quiet or simply throwing the item away without flagging it. For related context on the phone-based side of these networks, see our reporting on AI-voice Medicare scam calls in 2026.
If medical equipment arrives that you didn't order and never discussed with a doctor: do not use it, do not sign anything the delivery driver presents, and do not simply throw it away. First, call your doctor's office to confirm they never prescribed it — this rules out any legitimate mix-up. Then call 1-800-MEDICARE (1-800-633-4227) to report the unsolicited shipment and ask them to review your account for fraudulent billing. File a complaint with your state Attorney General's consumer protection office. You are not obligated to pay for anything you didn't order, and receiving unsolicited merchandise does not create any legal debt — federal law is clear on this point regardless of what any bill or collection notice claims.
Why This Costs You More Than a Bill You Can Ignore
Even though you can't be legally forced to pay for equipment you never ordered, the damage from this scam extends well past a single fraudulent charge, which is why officials are treating it as urgent rather than a minor annoyance.
Every fraudulent DME claim billed under your Medicare number draws down against your actual coverage record. If your Medicare number has been used for one fraudulent claim, it's frequently used for others, and a pattern of unusual billing activity on your account can complicate legitimate future claims — a real piece of equipment you actually need later can get flagged or delayed because your billing history already looks irregular. Fraudulent claims paid out under your number also contribute to the roughly $100 billion in improper Medicare payments the Department of Health and Human Services has identified in recent years, costs that indirectly pressure the broader program's finances and, over time, everyone's premiums.
There's also a data-security dimension worth taking seriously. If scammers have your Medicare number, they very likely also have other identifying information gathered from the same breach or phishing attempt — your address, potentially your Social Security number, banking details. A DME scam arriving at your door is often a visible signal that a larger identity compromise happened somewhere upstream, and it's worth treating as a prompt to review your broader financial and identity protections, not just your Medicare account specifically. Reviewing your 2026 scam-call warning guide is a good next step for spotting the upstream calls that often precede these shipments.
Related Medicare Updates
✅What This Means for You
Explore Further
How to Tell a Scam Shipment From a Real One
Because durable medical equipment is a legitimate Medicare benefit — a real knee brace or glucose monitor that your doctor actually prescribed is genuinely covered — the challenge is distinguishing a real shipment from a fraudulent one, especially since scam versions are deliberately built to look identical.
The clearest signal is whether your doctor's office can confirm the order. Every legitimate piece of Medicare-covered DME requires a written order from a treating physician, and that order should exist in your medical records regardless of which supplier fulfilled it. If your doctor's office has no record of prescribing the item, that's a definitive sign the shipment is fraudulent, regardless of how official the packaging or paperwork looks.
A second signal is whether you had any prior interaction with the supplier. Legitimate DME suppliers typically follow up after a doctor's referral — a phone call to confirm your address and insurance details, a conversation about sizing or specifications. A box that simply arrives with no prior contact from the supplying company is unusual for a real order and common in fraudulent ones.
Cost and quality can also be telling, though less reliably. Fraud schemes often use inexpensive, generic equipment because the scammer's profit comes from the Medicare billing, not from selling a good product — a poorly made or oddly generic item, especially one that doesn't match what you'd expect for the billed amount, is worth extra scrutiny. That said, this signal alone isn't conclusive; the doctor confirmation step is the one that actually resolves the question.
📊Unsolicited Equipment Scam: Quick Reference
Protecting Your Number Going Forward
Because this scam depends on a compromised Medicare number, the most effective long-term protection is the same guidance that applies across nearly every Medicare fraud variation — treating your Medicare number with the same vigilance you'd apply to a Social Security number or credit card.
Never provide your Medicare number over the phone, by text, or by email to anyone who contacts you first, regardless of how official they sound or what urgency they create. Medicare and legitimate healthcare providers do not need to "verify" your number this way — they already have it on file. If you're ever unsure whether a request is legitimate, hang up and call 1-800-MEDICARE directly using the number on your card, not a number provided by the caller.
Review your Medicare Summary Notice regularly — the statement mailed every three months listing everything billed under your account. This is the single most reliable way to catch fraudulent DME billing before or shortly after it happens, since the notice will show equipment claims even if you never received a physical item. If you spot anything unfamiliar, report it immediately rather than assuming it's an error that will resolve itself.
Finally, if you do become a victim of this specific scam, know that reporting it does more than protect you individually — investigators use these reports to identify and shut down the billing networks responsible, which are frequently large operations targeting thousands of beneficiaries with the same scheme. A single report from you is one data point in a pattern investigators are actively building against these networks right now. For the broader landscape of scam types currently circulating, our AI-voice scam reporting and 2026 CMS scam-call warning cover the phone-based variants that most often precede a fraudulent shipment.
