Medical identity theft can affect your insurance coverage, treatment history, and financial records in ways that are difficult to unwind.
This guide explains how to report identity theft involving your medical information and the exact steps to take with providers, insurers, credit bureaus, and law enforcement.
What Medical Identity Theft Looks Like
Medical identity theft happens when someone uses your name, Social Security number, insurance member ID, or other personal data to get medical care, prescriptions, or billing services.
It can also occur when a thief gives your information to a provider so their records are mixed into yours.
- Incorrect diagnoses or treatments in your health record
- Unexpected bills for services you never received
- Insurance claims you do not recognize
- Prescription activity you did not authorize
- Denied coverage because your benefits were used elsewhere
Because healthcare records are shared across hospitals, labs, pharmacies, and insurers, one fraudulent event can spread quickly.
Gather Evidence Before You Report
Before you file reports, collect as much documentation as possible.
A clear paper trail makes it easier to correct records and challenge charges.
- Billing statements, explanation of benefits forms, and claim summaries
- Names, dates, and account numbers tied to suspicious charges
- Copies of prescriptions or appointment records that look wrong
- Notes from phone calls, including dates, times, and representative names
- Any police report or identity theft affidavit you already have
Keep digital and paper copies in one folder.
If possible, save screenshots of online claims portals before they change.
How to Report Identity Theft Involving Your Medical Information
When you report the theft, contact each organization that can stop the fraud or correct the record.
Do not rely on a single phone call.
1. Notify the healthcare provider or hospital
Ask the provider’s billing office, medical records department, or privacy officer to review the suspicious entries.
Request that they flag the account for possible identity theft and investigate any treatments, procedures, or dates of service you do not recognize.
Send a written dispute if the office allows it.
Include copies of the suspicious documents and ask for confirmation that the account is under review.
2. Contact your health insurer
Report fraudulent claims to your insurer’s fraud department or member services.
Ask for the claim numbers, dates of service, and provider names associated with the suspicious activity.
Request that the insurer:
- Block future claims tied to the fraud
- Review whether benefits were improperly paid
- Reissue an updated explanation of benefits if needed
- Help you correct any plan records linked to the theft
3. File an identity theft report with the Federal Trade Commission
Use IdentityTheft.gov to create an official recovery plan and identity theft report.
This report is useful when disputing medical debts, insurance claims, and inaccurate records because it shows the problem is part of a broader identity theft case.
Save the recovery plan, report number, and any affidavits the FTC generates.
4. File a police report if the fraud is significant
A police report is especially useful if the medical identity theft led to large bills, stolen prescriptions, or repeated misuse.
Bring your FTC report, government ID, and all supporting documentation.
Ask for a copy of the report or the report number.
Some providers and insurers will not fully investigate without it.
Dispute Incorrect Medical Records
Fraudulent treatment entries can become part of your medical history and affect future care.
Ask the provider or hospital’s health information management department to correct or amend the record.
- Identify each inaccurate entry precisely
- Explain why it is wrong and attach supporting documents
- Request an amendment under the provider’s record-correction process
- Ask whether the incorrect entry was shared with any other facilities
Healthcare providers may not delete certain records, but they can often add corrections, annotations, or amendments.
That matters because future clinicians may rely on the chart when making decisions.
Dispute Fraudulent Medical Bills and Collections
Do not pay a bill you believe is tied to identity theft until you have disputed it in writing.
If the account has already been sent to collections, notify the collector immediately and include your identity theft report.
Your dispute should say:
- The account is not yours or includes fraudulent charges
- You are an identity theft victim
- You want the debt placed on hold pending investigation
- You want written confirmation of the outcome
If a bill appears on your credit reports, dispute it with each credit bureau and attach proof.
Medical collections can affect your score, although recent changes to credit reporting have reduced how some medical debt appears.
Protect Your Insurance and Future Care
After the initial report, strengthen your account security so the fraud does not continue.
Medical identity thieves often exploit weak access controls or reused passwords.
- Change passwords for insurance, pharmacy, and patient portal accounts
- Turn on multifactor authentication where available
- Ask your insurer for a new member ID if your number was exposed
- Review benefits statements every month
- Request copies of your medical records periodically to spot new errors
If your Social Security number was involved, consider a credit freeze with Equifax, Experian, and TransUnion.
A freeze helps limit new accounts opened in your name.
When to Escalate the Case
Escalate the matter if the provider refuses to investigate, the insurer keeps paying fraudulent claims, or the same identity theft keeps reappearing.
If the records involve prescription drugs, controlled substances, or repeated false visits, the risk to your care and reputation is higher.
You may also want help from a patient advocate, state insurance department, attorney general’s office, or consumer protection agency.
These entities can pressure organizations to respond when standard complaints stall.
Documents to Keep After You Report
Keep a complete file even after the problem seems resolved.
Medical identity theft can resurface months later when old claims reprocess or records are shared across systems.
- FTC identity theft report and recovery plan
- Police report, if filed
- Copies of all disputes and response letters
- Updated medical records showing corrections
- Insurance claim explanations and adjusted bills
- Credit bureau dispute results and confirmation numbers
Organized records help you respond quickly if a provider, insurer, or collection agency contacts you again about the same account.
What to Say in a Written Complaint
If you need a concise template, include the basics: that you are reporting identity theft involving your medical information, which account or claim is affected, what you want corrected, and what documents you are attaching.
State that you want a written response and ask for a reference number.
Clear, factual language usually works better than a long explanation.
Focus on dates, account identifiers, and the specific action you want each organization to take.