Got a Bill for a Doctor You’ve Never Seen? That Might Be Medical Identity Theft

The warning signs of medical identity theft, and exactly what to do if you spot them

---

A bill shows up for a doctor’s visit you never had. Or your insurance statement lists a prescription you never filled. It’s easy to assume it’s a billing mistake, but it might be something more serious: someone else used your name, your Social Security number, or your insurance information to get medical care.

What medical identity theft actually is

The FTC defines it simply: someone is using your personal or financial information to get medical care, health insurance coverage, or prescriptions that belong to you, not them. That could mean a stranger using your insurance card number to see a doctor, fill a prescription, or submit a claim under your name.

Why medical identity theft can be especially dangerous

A stolen credit card is bad. A corrupted medical record can be dangerous. When someone else’s care gets billed under your name, their health information can blend into yours: a blood type, a drug allergy, a diagnosis, or a prescription that was never actually yours can end up sitting in the file a doctor reads before treating you. That mixed-up record can affect the care you get later, not just your finances.

Signs to watch for

• A bill or Explanation of Benefits (EOB) for care, tests, or equipment you never received
• A collections notice for a medical bill you don’t recognize
• Shipments of medical supplies, like back braces or testing kits, that you never ordered
• A notice that you’ve hit your insurance benefit limit when you haven’t used nearly that much care
• You discover a diagnosis, prescription, procedure, or other medical information in your records that doesn’t belong to you

What to do right away

1. Contact your health insurer directly. Use the number on your insurance card, not one from a text, email, or voicemail you received. Pull your Explanation of Benefits statements and flag anything that doesn’t match care you actually got.
2. Request your medical records. Under HIPAA, you generally have the right to access and get copies of your medical and billing records. There’s no single place to check this, so you may need to contact each provider separately, including doctors, hospitals, pharmacies, and labs.
3. Ask for incorrect information to be corrected. If you find care, diagnoses, prescriptions, or other information that isn’t yours, ask the provider or health plan in writing to amend the record. They may accept or deny your request. If they deny it, HIPAA generally gives you the right to have a statement of disagreement added to your record.
4. File a report at IdentityTheft.gov. The FTC’s site walks you through a personalized recovery plan and gives you pre-filled letters to send to credit bureaus, providers, and debt collectors.
5. Keep documentation of everything. Save bills, EOBs, letters, dispute confirmations, medical records, and notes from phone calls. Depending on the situation, you may also want or be asked to file a police report.
6. Check your credit reports for medical debt collection notices you don’t recognize. Don’t assume medical debt can’t appear on your credit report: current rules still allow unpaid medical debt that’s more than 365 days delinquent and over $500 to be reported, so an unfamiliar medical collection account is worth investigating rather than ignoring.

Fix both problems: the bill and the medical record

Getting a fraudulent bill removed is only half the job. If someone actually received medical care using your identity, check whether information from that visit made its way into your medical record.

Look for diagnoses you don’t recognize, medications you don’t take, allergies that aren’t yours, unfamiliar test results, procedures you never had, and incorrect demographic information.

The goal isn’t just to prove you don’t owe the bill. It’s to make sure the next doctor who opens your chart is looking at your medical history, not the identity thief’s.

How to lower your risk going forward

• Treat your insurance card like a credit card. Keep it secure, and shred old EOBs and benefit statements before throwing them out.
• If a provider’s office asks for your full Social Security number, ask whether they can use a different identifier instead.
• Actually read your EOB statements when they arrive, rather than filing them away unopened. Catching an error early is far easier than untangling it months later.

The takeaway

Getting the fraudulent bill removed is only half the job. Make sure someone else’s medical history isn’t still sitting in your record. That’s the part that actually protects you the next time you see a doctor.

---

This article is for general education and isn’t legal or medical advice. If you suspect medical identity theft, IdentityTheft.gov is the best place to start a personalized recovery plan.

Sources:

• Federal Trade Commission: What To Know About Medical Identity Theft
• Federal Trade Commission: IdentityTheft.gov
• Consumer Financial Protection Bureau: What Do I Do If I Am a Victim of Identity Theft?
• U.S. Department of Health & Human Services: Your Medical Records