Every fall, as Medicare’s annual enrollment period approaches, the volume of scams aimed at older Americans climbs sharply. Fraudsters know the calendar as well as anyone, and they time their schemes to coincide with the weeks when beneficiaries expect to hear about plan changes, new benefits and updated cards. That expectation is exactly what makes the season dangerous. A message about a Medicare card or benefit does not feel out of place in October, which is precisely why a fake one can slip past someone’s usual caution.
One scheme drawing particular attention this year arrives not as a phone call but as a text message. It appears to come from an official-looking short code and pushes the recipient toward a fake link about a new card or updated benefits. Because texting feels immediate and personal, and because many people assume a numeric short code must be legitimate, this format can be especially convincing. Knowing how the scam works, and how the real Medicare program actually communicates, is the best defense against it.
How the “new card” text works
Consumer regulators have documented a rise in unsolicited messages, including texts sent from the short code 42474, that claim a new Medicare card or benefit is waiting and urge the recipient to click a link. State officials and the Better Business Bureau have warned about fraudulent Medicare outreach designed to look official, and the “new card” hook is a recurring theme. The link typically leads to a page built to harvest personal details, the Medicare number, or payment information, all of which can be used for identity theft or fraudulent billing.
The psychology behind the message is straightforward. It creates a small sense of urgency, suggests a benefit the recipient might lose by ignoring it, and dresses itself in the trappings of officialdom. A short code lends an air of legitimacy because people associate those numbers with banks and other real institutions. But a short code can be used by anyone who sets one up, and the presence of an official-sounding number proves nothing about who is actually behind the message. The safest assumption is that an unexpected text about a Medicare card is not from Medicare at all.
How Medicare actually reaches people
The single most useful fact to keep in mind is that Medicare does not send unsolicited texts asking for personal or payment information. The program communicates primarily by mail, and it does not cold-call, cold-text or email beneficiaries out of the blue demanding the Medicare number, bank details or a fee to send a card. Legitimate Medicare cards are mailed, and there is no charge for them. Any message that asks a beneficiary to click a link and enter sensitive details to receive or activate a card is a warning sign in itself.
Federal authorities have emphasized this point as enrollment season opens. The Federal Trade Commission has urged consumers to stay alert to open-enrollment scams and to guard their Medicare number as carefully as a Social Security or credit card number. Once a scammer has that number, they can attempt to bill Medicare for services never provided or use the identity in other fraudulent ways, which is why treating the number as a closely held secret matters so much.
Concrete steps to stay safe
The protective steps are simple and worth committing to memory. First, do not click links in unexpected texts or emails claiming to be from Medicare, including any message from a short code like 42474 about a new card. A link that cannot be clicked cannot lead to a data-harvesting page. Second, never share the Medicare number, Social Security number or payment information in response to an unsolicited message or call, no matter how official it sounds or how urgent it feels.
Third, when in doubt, verify through official channels rather than the contact information in the suspicious message. Beneficiaries can call 1-800-MEDICARE directly to confirm whether any legitimate outreach is underway and to report suspected fraud. Deleting the message without engaging is perfectly acceptable, and there is no penalty for ignoring a fraudulent text. Beneficiaries can also report scams so that authorities can track and act on emerging schemes. Talking through these steps with family members, particularly those who may be less familiar with texting scams, adds another layer of protection.
It also helps to slow down before reacting to any message that creates urgency. Scammers rely on a rushed, emotional response, the quick tap on a link before a person has time to think. Building in a simple pause, treating every unexpected message about a card or benefit as suspect until verified, defeats much of the scheme’s power. A legitimate benefit will not vanish because someone took an hour or a day to confirm it through an official channel, and no real Medicare communication punishes a beneficiary for being careful.
Family members and caregivers play a valuable role here. A brief conversation about what these texts look like, and a shared agreement to check with one another before acting on any surprise message, can protect a relative who might otherwise be caught off guard. Fraud thrives on isolation and secrecy, so simply talking openly about the schemes reduces their reach. Reporting suspicious messages, rather than quietly deleting them, also helps authorities track the tactics fraudsters are using during the busy season.
Timing the vigilance to the calendar
Because these schemes cluster around enrollment, it helps to know the real calendar. The fall Annual Enrollment Period runs from October 15 to December 7, the window when beneficiaries can legitimately review and change their coverage. Scammers exploit this period precisely because genuine plan activity is happening, so extra caution during those weeks is well placed. Any pressure to act instantly, pay a fee for a card, or hand over personal information should be treated as a red flag regardless of the date.
The broader takeaway is that a scam-wary mindset is the strongest safeguard an older American can carry into enrollment season. Medicare’s real communications do not demand secrecy, speed or payment for a card, and they do not arrive as surprise texts with links. By pausing before clicking, refusing to share the Medicare number, and verifying anything questionable through 1-800-MEDICARE, beneficiaries can move through the busy enrollment weeks without handing fraudsters the opening they are hoping for.
This article was produced with AI assistance and fact-checked against the primary and official sources linked above.
Free tool for readers: You check your blood pressure — when did you last check your retirement? You can get your free Retirement Safety Score in about five minutes, with no sign-up to see it.
