Welcome to Orqet Phishing News, your monthly update on staying ahead of phishing threats.
Fake “MyChart Medicare Kit” Emails Are Targeting Patients Nationwide
Hospitals and health systems across the country are warning patients about phishing emails that impersonate MyChart, the online patient portal millions of people use to check test results, message their doctor, and refill prescriptions.
The emails use the subject line “Your MyChart Medicare Kit Awaits” and mention a free “2026 MyChart Senior Health Package” or Medicare wellness benefits. They are not from MyChart or your healthcare provider, they are built to steal your personal, medical, and financial information.
How It Works
- You receive an email with a subject like “Your MyChart Medicare Kit Awaits” or a similar “free senior package” offer.
- The email uses the MyChart name and logo to look official and trustworthy.
- It asks you to click a link or button to confirm your address or claim your free health kit.
- The link leads to a page designed to collect personal, medical, financial, or insurance information.
- Some versions pressure you to act quickly or risk missing out on the benefit.
Why It Is Dangerous
- It specifically targets Medicare patients, who are often older adults and frequent targets of scams.
- The MyChart branding makes the email look like it came from your own doctor’s office or hospital.
- Information stolen this way can be used for medical identity theft or insurance fraud, not just financial fraud.
- This same “trusted brand plus free benefit” approach works against any healthcare, insurance, or benefits program.
Source: malwaretips.com
Your Best Defense
Do not take a chance and guess.
If something feels even slightly wrong, submit the message to Orqet. Orqet will analyze the message for you and tell you if it is safe or malicious, with no risk to you.
What You Can Do Now
- Do not click links, open attachments, or reply to unexpected “MyChart” or “Medicare kit” emails.
- Never provide personal, medical, financial, or insurance information by email.
- If you are unsure whether a message is real, call your healthcare provider directly using a number from their official website, not one listed in the email.
- Always use the Orqet “Report Phish” button when you are unsure.
Submitting suspicious emails to Orqet helps protect you and prevents scams from spreading to others.
Real-World Examples
WITN News Coverage: Reporting on ECU Health’s patient warning describes the exact subject line used and how patients, especially elderly ones, are reacting to the scam. (WITN)
MetroHealth Patient Alert: MetroHealth’s official warning explains the “free health kit” and Medicare wellness bait used in the emails and what to do if you receive one. (MetroHealth)
The Bottom Line
A familiar logo and the promise of a free benefit do not make an email real. Health systems nationwide are seeing the same scam, which means it is worth a second look no matter who it appears to be from.
Stay safe with Orqet.
Quick Tips to Stay Safe
- Pause before clicking any email offering a free kit, package, or benefit.
- Never enter medical or financial details on a page you reached from an email link.
- Log in to your patient portal directly through your provider’s official website or app instead of clicking email links.
- Report suspicious messages to Orqet instead of trying to determine whether they are legitimate yourself.
Phishing Joke of the Month
Why did the phishing email pretend to be from the doctor’s office?
Because “Free gift, just click here” gets better results than an actual check-up reminder!
Cybersecurity is serious, but staying informed does not have to be dull!
Stay vigilant,
Orqet Team