The patterns behind most financial scams targeting retirees — and a few habits that stop nearly all of them.
Scams targeting people on Medicare and Social Security are not rare edge cases. They are a business model. The product they sell is urgency mixed with fear — and a request for your number, your code, or your money before you can think.
The defense is boring on purpose: slow down, verify, don’t wire under pressure.
Pattern 1 — Medicare / SSA / IRS impersonation
What it sounds like. A call, text, or voicemail: “Your Medicare card needs to be replaced.” “Your Social Security will be suspended today.” “There’s a warrant — call this number.” “We’ve detected unusual activity; confirm your Medicare number.”
What is true. - Medicare will not cold-call you to ask for your Medicare number or to enroll you in a surprise plan. - SSA has official channels; threat-of-arrest-today scripts are a classic tell. - IRS does not demand gift cards, crypto, or wire transfers over the phone to “settle” a fake emergency.
What to do. Hang up. Call back using a number you look up yourself — Medicare.gov / 1-800-MEDICARE, SSA.gov / 1-800-772-1213, IRS.gov — not the number the caller recited. Never give bank access, one-time passcodes, or remote- control software to an inbound stranger.
Pattern 2 — Fake “benefits upgrade” / card replacement
What it sounds like. “You’re eligible for a new card / free grocery benefit / better plan — I just need your Medicare number and address to activate it.”
What’s going on. Your Medicare number is keys to the kingdom for fraudulent billing and identity abuse. “Free upgrade” is bait.
What to do. Plan changes happen through official enrollment periods and verified channels — or with a licensed agent you initiated contact with. SHIP can help you understand a mailer. A stranger who called you first is not SHIP.
Pattern 3 — Tech support theater
What it sounds like. Pop-up: “Your computer is infected — call Microsoft/Apple now.” Or a call claiming the same.
What’s going on. Remote access + stolen passwords + drained accounts. Legitimate tech companies do not cold-pop you into panic support.
What to do. Close the browser. Don’t call the number on the pop-up. If you need support, use a vendor’s official site you type yourself. If someone already has remote access, disconnect, change passwords from a different device, and call your bank.
Pattern 4 — Family emergency / “grandparent” scripts
What it sounds like. A crying voice or a text: “Don’t tell Mom — I need bail / rent / a fine wired today.”
What’s going on. Emotional hijack. Secrecy request is the tell.
What to do. Call the family member on a known number. Ask a question only the real person would know. Do not wire. Do not buy gift cards as “bail.”
Pattern 5 — Investment / “guaranteed high return” pitches
What it sounds like. “Guaranteed 10%+ with no risk.” “Private banking yield the public isn’t supposed to know.” “Act today or lose the allocation.”
What’s going on. Risk doesn’t vanish because someone used the word guaranteed. Urgency and exclusivity are props.
What to do. Real guarantees (when they exist) live in regulated insurance or bank products with contracts, disclosures, and tradeoffs — surrender charges, rate periods, claims-paying strength, fees. They do not arrive as a pressure pitch from a stranger. Verify licenses. Read the illustration. Sleep on it.
Pattern 6 — Annuity / insurance churning pressure
What it sounds like. “Move this today.” “Your current contract is terrible — sign the replacement now.” “Don’t talk to your kids / your current agent / your CPA.”
What’s going on. Some replacements are legitimate suitability work. Some are commission gravity dressed as rescue. The red flags are secrecy, speed, and refusal to put comparisons in writing.
What to do. Ask for a written side-by-side: surrender charges remaining, new surrender schedule, fees/riders, rate or income guarantee length, death benefit, and why the move is better for you — not for the producer’s month. Check licenses on your state DOI site. If you already own an annuity and want an educational benchmark against today’s ranges (not a sell order), tools like the Annuity Audit exist for that posture — category outcome, not a command to replace. Stay put is allowed.
Pattern 7 — Genetic testing / “free kit” / hospice & billing fraud awareness
What it sounds like. “Medicare covers a free genetic test kit — just give your number.” Or aggressive marketing into unnecessary services billed to Medicare.
What’s going on. Your number becomes a billing tool. You may get stuck with collection messes or compliance headaches you never asked for.
What to do. Don’t share Medicare numbers with kit marketers. If a test is medically needed, it runs through your clinician and a transparent billing path. Report suspected fraud through official Medicare fraud channels (Medicare.gov / 1-800-MEDICARE guidance).
Verification habits that actually work
appropriate registrations. No license, no conversation. 3. Written everything. Illustrations, plan comparisons, surrender schedules. If they
won’t write it, you won’t sign it. 4. Cooling-off. Any product that “expires tonight” if you don’t sign can expire
without you. 5. Payment methods. Gift cards, crypto, wire-under-threat, cash dropped at a park
bench — full stop.
6. Second brain. One trusted person who will hear the pitch cold. Secrecy requests
try to remove that person. 7. Confirm enrollment. If someone claims they “enrolled you,” check your
Medicare account / official confirmations. Unauthorized plan changes are a known abuse pattern — report and unwind through official channels.
What licensed help looks like vs what pressure looks like
Healthy Unhealthy
You initiated or scheduled Cold fear call with a deadline today
Options compared in writing “Only this carrier / only today”
Suitability questions asked Suitability skipped
Stay-put is an acceptable outcome Stay-put mocked as ignorance
Licenses and appointments clear Vague “we’re with Medicare” language
Time to review with spouse/advisor “Don’t tell anyone”
Insurance isn’t tangible. Service and process are how you see what you’re buying. A producer who hates process is selling urgency, not advice.
Checklist — an earlier chapter
I will not give Medicare / SSN / bank codes to inbound callers. I will look up phone numbers myself. I will not wire money or buy gift cards under threat. I will verify DOI licenses before insurance applications. I will demand written comparisons for replacements. I will treat “don’t tell your family” as a siren, not a confidence.
Where this doesn’t help. This chapter cannot list every scam variant. Criminals iterate. The habits transfer even when the script changes.
Why retirees are targeted (without the condescension)
Criminals follow money and predictable access points. Medicare numbers, Social Security deposits, home equity, and accumulated retirement accounts are targets. Age is not the insult. Access and politeness are the exploit. Many successful people are used to solving problems by engaging — which is exactly what a scripted caller wants.
You are not “bad at technology” if you refuse a remote-access request. You are competent.
Mail and SMS variants
Pressure is not only a phone channel.
SMS: “Your Medicare benefits will stop — verify here” + short link. Email: fake CMS/SSA branding, bad URLs on hover. Door knockers: “We’re in the neighborhood updating Medicare files.” Mailed forms that look official but route data to a third party.
Habit: type official domains yourself. Do not click through from fear messages. If a form arrives, call the official number and ask whether the form is real before you return it with personal data.
How to check a license (practical)
BrokerCheck / IAPD as applicable). 5. If they claim to be “with Medicare,” hang up — Medicare does not send freelance
upgraders.
Mismatch between the name on the application and the name who pitched you is a stop sign.
If you already shared information
Act the same day:
Call 1-800-MEDICARE and ask what to do about possible number compromise / unauthorized enrollment. Check your Medicare account for plan changes you did not authorize. Contact your bank / credit cards; consider fraud alerts. Report to FTC IdentityTheft.gov and your state DOI if an insurance angle was involved. Tell a trusted family member — secrecy helps the scammer, not you.
Shame delays reporting. Speed reduces damage.
Seminar culture — the soft version of pressure
Free dinner seminars are not automatically scams. Some are education. Some are sales funnels with thin disclosure. Your filter is the same:
Was the education real, or only fear + product? Were tradeoffs disclosed? Were you pushed to sign before leaving? Can you take the illustration home and compare for a week?
A good educator survives contact with your CPA and your sleep schedule. A pressure pitch does not.
A household rule you can adopt tonight
Agree on this sentence with anyone who shares your accounts:
“We do not move money, share Medicare or Social Security numbers, or grant remote access based on an inbound call, text, or pop-up — ever. We hang up, look up, and call back on a published number.”
Put the official numbers on the fridge:
Medicare: 1-800-633-4227 Social Security: 1-800-772-1213 Your bank’s number from the back of the card (not from a caller)
Boring. Effective. Repeatable.
Churning vs legitimate review — the distinction
Reviewing an old contract because rates, needs, or riders changed can be responsible. Replacing a contract every time a new producer appears is often just gravity.
Ask: What specifically is better for me after surrender costs? If the answer is mostly “the new bonus looks big,” keep asking. Bonuses are not free; they are priced into limitations somewhere in the contract. Read the limitation before you celebrate the bonus.
Soft check. If a call, pop-up, or meeting needs your fear more than your understanding, end it. You can always restart a legitimate conversation on your calendar tomorrow.
Have a question this didn't answer? Ask our education assistant — it only answers from this guide, never recommends a product, and always says "look it up" for anything with a dollar sign.
Ask a Question →