What Is Medical Identity Theft?
Most identity theft ends with a strange charge or a mystery account. Medical identity theft can end up somewhere less obvious — in a health record that now contains someone else’s treatment history mixed in with the real patient’s own.
The short answer
Medical identity theft happens when someone uses another person’s identity — often a name, date of birth, insurance ID, or Social Security number — to receive medical care, prescriptions, or equipment, or to submit fraudulent insurance claims. Unlike most forms of account takeover fraud, the damage isn’t limited to a financial account; it can also alter the actual medical record of the person whose identity was used, mixing in someone else’s diagnoses, treatments, or allergies.
How it typically happens
- Stolen insurance information. An insurance card or policy number can be enough for someone to receive treatment or fill prescriptions under another person’s coverage.
- Compromised health system records. Healthcare providers hold large amounts of identifying and insurance information, and breaches there can expose exactly what’s needed to commit this kind of fraud.
- Someone known to the victim. Because medical identity theft doesn’t always require a stranger — a family member without their own insurance sometimes uses someone else’s coverage — it can be harder to categorize as clearly criminal at first glance.
Why it’s harder to detect than financial fraud
A fraudulent credit card charge shows up on a statement that gets checked relatively often. A fraudulent medical claim shows up on an insurance explanation of benefits that many people skim past or don’t read closely, and the resulting changes to a medical record aren’t reviewed on any regular schedule at all. It often takes something jarring to surface it — a bill for treatment that never happened, a collections notice for a hospital visit that didn’t occur, or a mismatch discovered during an unrelated doctor’s visit, such as a blood type or allergy on file that isn’t accurate.
Why the medical record problem is the harder part
Correcting a fraudulent financial account is a well-established process involving credit bureaus and creditors. Correcting a medical record that has fraudulent entries mixed into legitimate ones is a different kind of problem, since providers have to sort out which parts of the record belong to which person without compromising the accuracy of either person’s actual care history. This is one of the reasons medical identity theft is often described as more disruptive to resolve than purely financial fraud, even when the dollar amounts involved are similar.
What tends to help
Reviewing insurance statements and explanations of benefits for unfamiliar claims, requesting copies of medical records periodically, and reporting discrepancies to both the healthcare provider and the insurer as soon as they’re noticed all help limit how far the problem spreads. As with other categories of fraud, documentation matters — noting exactly which claims or entries are being disputed, sometimes backed by an identity theft affidavit, makes it easier for a provider to investigate than a general complaint that something feels off.
What this means for you
Medical identity theft sits at the intersection of two systems — insurance billing and medical recordkeeping — that don’t always talk to each other cleanly, which is part of why it can take longer to fully unwind than a fraudulent credit card charge. Catching it early, through regular review of insurance and medical paperwork, is the most practical defense available.