Healthcare Spoofing and Online Scam Efforts

Healthcare spoofing is a type of fraud where someone pretends to be a healthcare provider, hospital, clinic, or health insurance company to try to get your personal or medical information. Scammers often rely on creating a sense of trust and urgency to get you to act.

Scammers may call or text you from a phone number that looks like it belongs to a hospital, clinic, or healthcare organization you’re familiar with. Even though the phone number or email may look real, it’s important to know how to determine if an inquiry about your care is legitimate. Scammers may also use email, social media or fake websites that appear legitimate. 

How to Protect Yourself from Scams

• Be cautious with sharing sensitive information by phone or text. Never provide your Social Security number, health insurance information, financial information or other sensitive personal information unless you initiated the call or are certain you are speaking with your healthcare provider. Even confirming basic details like your birthdate or address can give scammers important information about you. Say as little as possible and avoid saying the word “yes.” Instead, say "Hello" or "Who is this?" as scammers can clone your voice and apply it elsewhere.
• Be cautious clicking links. Do not click on links in texts or emails claiming to be from your healthcare provider. Instead, log in to MyUnityPoint to confirm the information needed.
• Be skeptical of messages offering prizes, rewards or special offers in exchange for clicking a link or sharing information.
• Check the domain. Authorized UnityPoint Health recruiters and staff will never use public email domains like @gmail.com, @yahoo.com or @outlook.com.
• Know who can receive your information. UnityPoint Health will only discuss your medical records with you, with individuals you’ve specifically authorized for UnityPoint Health to do so, with other providers who are treating you or as permitted or required by law.
• Verify health updates in your patient portal. If a call or text about your care seems suspicious, check MyUnityPoint for messages or updates. Official patient messages will always be viewable in MyUnityPoint.
• Watch for threatening or urgent language. Scammers often pressure you to act quickly or make threats. UnityPoint Health will never rush or threaten you.

Because scammers can make phone numbers, emails and text messages appear legitimate, always verify a request before sharing personal or financial information.

How UnityPoint Health May Contact You

UnityPoint Health uses phone calls, text messages and email to support your care and account needs in accordance with applicable laws and communication preferences. Knowing what to expect can help you identify suspicious communications and protect your personal information.

You may hear from us to:

• Confirm, provide information or remind you about upcoming appointments
• Discuss billing questions or outstanding account balances
• Follow up on a question you had
• Provide information about post-visit care
• Request updates to your insurance information through approved, secure processes
• Verify basic personal information when establishing care as a new patient
• Share health information, community updates, wellness resources, news and other marketing communications you have chosen to receive. You can unsubscribe from marketing emails at any time.

UnityPoint Health will never:

• Contact you unexpectedly and ask you to enroll in Medicare, Medicaid or other government programs
• Request your Social Security number, banking details or other sensitive financial information through an unsolicited call, text or email
• Demand immediate payment using gift cards, prepaid debit cards, wire transfers or similar payment methods
• Threaten to delay or deny care if you do not provide personal information right away

What to Do if Something Doesn't Seem Right

If you receive a suspicious call, text or email claiming to be from UnityPoint Health:

• End the conversation or delete the message
• Do not click links or download attachments
• Do not share personal, financial or medical information
• Do not call back or otherwise respond to the suspicious number
• Contact your clinic or hospital using a phone number listed on an official billing statement, the UnityPoint Health website or MyUnityPoint

Report Suspected Fraud

If you have received a call, text or email where you believe someone is impersonating UnityPoint Health, report the incident to:

• Federal Trade Commission: Report Fraud to the FTC
• Medicare (for Medicare-related scams): Report Medicare Fraud

If you shared personal information, passwords or financial information with a scammer, change your passwords immediately and contact your bank, credit card company or other affected organizations.