CMS Warns Providers of Medical Record Request Scam

(June 25, 2024) The Centers for Medicare and Medicaid Services (CMS) has identified scams that attempt to fool health care providers into inappropriately releasing medical records. The requests reference Medicare.gov or @Medicare and direct providers to send records to an unfamiliar fax number to “update insurance accordingly.” CMS has shared an example of a scam request here. Warning signs include:

• poor grammar, misspellings, or strange wording;
• incorrect phone numbers;
• skewed or outdated logos; and
• graphics that are cut and pasted.

CMS recommends that providers who receive a questionable request work with their Medical Review Contractor to confirm authenticity and submit medical documentation through the Electronic Submission of Medical Documentation (esMD) system or CMS Medical Review Contractor secure internet portals, when available.