New Medicare Card in the Mail? Is It Real or a Scam?
Quick answer: A new Medicare card in the mail is most likely real, about 1.3 million people got one with a new number in 2026. It is paper, free, and comes with a letter. Medicare will never call, text, or email to verify, activate, or charge for it. If anyone does, hang up and call 1-800-MEDICARE yourself.
A new red, white, and blue Medicare card showed up in your mailbox. You did not ask for it, and nobody called first. That is unsettling, but it is also how a real Medicare card arrives. About 1.3 million people got a new card with a new number in 2026, so yours is probably the real thing. But scammers know about the mailing too, and they are using it as the cover story for calls and texts that ask you to verify, activate, or pay for a card. This page sorts out which card is real, which contact is fake, and the one rule that settles it every time.
Why did you get a new card? Two separate mailings
The first thing to know is that there were two separate mailings, and they are not the same story. Mixing them up is how the confusion starts, and it is also how a scammer's story starts to sound believable.
The big mailing: about 1.3 million new numbers. In March 2026, about 1.3 million Medicare beneficiaries began receiving new cards with new Medicare numbers. The new numbers took effect April 14, 2026.
Here is the honest part: CMS has not published a detailed public explanation for this wave of new numbers. That is worth saying plainly, because you will see guesses online, including claims that a specific breach caused it. We are not repeating those guesses here, because CMS has not said that. What we do know is that each card arrived with a letter explaining why that person's number changed, and that coverage and benefits did not change. The old number stops working once the new card arrives, so your doctors and your pharmacy need the new one.
The smaller mailing: about 103,000 people, after a different incident. Separately, and earlier, CMS mailed new cards to about 103,000 people. In June 2025, CMS said bad actors had fraudulently created Medicare.gov accounts between 2023 and 2025. They used valid beneficiary information, including Medicare numbers, coverage start dates, last names, birth dates, and ZIP codes. CMS deactivated every fake account, blocked new accounts from foreign internet addresses, and mailed new cards with new numbers to the people affected.
CMS also said it had no reports of identity fraud or misuse as a direct result. If your card came with a letter about a Medicare.gov account you never created, this is the mailing yours came from.
Why does the distinction matter? Because the two mailings have different causes, different dates, and different letters. A caller who mixes them up, or who cannot say which mailing yours came from, is not from Medicare. And if a caller tells you the 1.3 million reissue happened because of a specific hack, that is a guess dressed up as a fact. CMS has not said that.
What the real card looks like, and what came with it
The real Medicare card is a paper card. It is free. It arrives by regular mail, with a letter. It shows your name, your Medicare number, and your coverage. The Medicare number is called a Medicare Beneficiary Identifier, or MBI. It is an 11-character mix of letters and numbers, and it began replacing the old Social Security number based cards in 2018. The card has no chip. There is no plastic version. There is nothing to activate, nothing to confirm, and nothing to pay.
The letter matters as much as the card. It carries the logo of the Centers for Medicare & Medicaid Services, part of the U.S. Department of Health and Human Services, and it explains why your number changed. It does not ask for money, gift cards, or personal information. It does not ask you to call a number to activate anything. If the envelope that arrived had a letter like that, and a paper card, you are looking at the real thing.
Not sure? Check it yourself, two ways. Log in to your Medicare.gov account and look for your card there, or call 1-800-MEDICARE at 1-800-633-4227 and ask whether a new number was issued to you. Use the number printed on your old card or on the Medicare.gov site, never a number from a call, a text, or a postcard. And remember that your card does not show Part D drug coverage or a Medicare Advantage plan. Those come on separate cards from your plan.
The one rule
The whole page comes down to one rule, and it comes from the Federal Trade Commission. In its September 2025 alert, the FTC described the script. Scammers impersonating Medicare tell you that you need a new or updated card, then ask for your Medicare, bank account, or credit card number. But real Medicare cards are free and mailed to you automatically. And true Medicare representatives will not call, text, or email you out of the blue to ask for your numbers or a payment.
Medicare's own rule says the same thing in plainer words: Medicare will never call you uninvited and ask you to give personal or private information. Medicare only asks you to verify information if you contacted them first. So the test is simple. Did Medicare reach out to you first, about your card, asking for something? Then it is not Medicare. Hang up, delete the message, and check it yourself at 1-800-MEDICARE.
Caller ID does not change the answer. The FTC warns that a screen can show Medicare's name or phone number and still be a scammer, because caller ID can be faked. A real name on the screen proves nothing. What the caller asks you to do is the whole test.
The scam scripts
The calls and texts follow a small set of scripts. Knowing them in advance is what breaks them.
The "new card" call. A caller says Medicare is issuing new cards and needs to confirm your number so they can mail yours, or to activate it. This is the exact script the FTC flagged in its September 2025 alert. The Iowa Attorney General put it even more plainly in October 2026: nobody calls you to confirm the number first. Free card replacements come by mail, after a request through your Medicare account or through 1-800-MEDICARE. The call is the scam, whatever it says after hello.
The plastic chip card text. A text says your paper Medicare card is expiring, and you can request a free plastic chip card by tapping a link. There is no plastic chip Medicare card. CMS has announced no such card, and no card upgrade of that kind exists. Any text offering one is a scam. Do not tap the link. Forward the text to 7726, which spells SPAM on a phone keypad.
The official-looking postcard. Some families have reported postcards that look official, saying the card is being upgraded and telling them to call an 800 number within 14 days or their benefits will pause. Medicare does not send cards this way, and it does not set 14-day deadlines by postcard. Do not call the number on the postcard. If you want to check, call 1-800-MEDICARE yourself.
The "verify or lose your benefits" pressure. A caller warns that your coverage will be suspended unless you confirm your Social Security number or Medicare number right now. Medicare does not threaten to suspend coverage over the phone, and it does not set a same-day deadline for confirming details. Urgency is the tell. A real letter gives you time. A scammer gives you minutes.
Real vs. fake, side by side
A side-by-side check makes the difference obvious. If the contact in your hand matches the right-hand column on even one row, treat it as a scam.
| Check | Real card mailing | Scam contact |
|---|---|---|
| How it reaches you | Regular mail, with a letter, nothing to do | Phone call, text, or postcard asking you to act |
| The fee | Free, always, no payment of any kind | A processing or activation fee, or a card number to charge |
| Activation | Nothing to activate, the card just works | You must "activate" it by reading a code or confirming a number |
| Who contacts first | Nobody calls or texts first | They call or text you first, out of the blue |
| The number to call | 1-800-MEDICARE, a number you looked up yourself | A number they gave you, in the call, text, or postcard |
| The deadline | No deadline, no threat | "Within 14 days or your benefits pause" |
The 10-second check
Here is the check, in order. The first step that points to a scam ends it.
- Did it arrive by mail, with a letter? If it came by phone, text, or postcard asking you to act, stop there. That is not how a real card arrives.
- Does it ask for money, a code, or your number? A real card asks for nothing. A fee, an activation step, or a request to confirm your number is a scam.
- Hang up, or delete the message. Do not call the number they gave you, and do not tap the link. Both lead to the scammer, not to Medicare.
- Verify it yourself. Log in to your Medicare.gov account, or call 1-800-MEDICARE at 1-800-633-4227, a number you looked up yourself. If a new number was issued to you, they can confirm it.
Then forward a scam text to 7726. That is free, and it helps your carrier block the sender. Do not reply to the text, not even STOP.
Not this card: flex cards and benefit cards are different
One more confusion to clear up, because scammers lean on it. Some Medicare Advantage plans load a dollar allowance onto a flex card or spending card, usually for over-the-counter items. Those cards come from your plan, after you enroll in it, and they are a plan benefit, not a Medicare card. Original Medicare, Parts A and B, has no benefit card at all.
So a text offering a "Medicare benefit card" worth thousands of dollars for groceries, gas, or utilities is a different scam, built on a different piece of real news. It is not the card in this page. If that is the text you got, read our Medicare flex card guide instead. The same one rule applies: Medicare does not text you a card offer out of the blue.
What to do if you already shared your number or paid
Do not panic, and do not wait. What you do in the first hour matters most.
- Call 1-800-MEDICARE right away at 1-800-633-4227. Say your Medicare number may have been shared, and ask what to watch for. Medicare can issue a new number if yours has been misused.
- Check your Medicare Summary Notices for charges or services you do not recognize. That is where a stolen number usually shows up first, as a bill for care you never got.
- Go to IdentityTheft.gov for steps matched to exactly what you shared, and consider a free credit freeze at Equifax, Experian, and TransUnion. A freeze is free by federal law, and it stops new accounts from being opened in your name.
- Report it. Call the HHS Office of Inspector General hotline at 1-800-HHS-TIPS (1-800-447-8477), or report online at oig.hhs.gov/fraud/report-fraud/. Then tell the FTC at ReportFraud.ftc.gov. Your local Senior Medicare Patrol (SMP) at 1-877-808-2468 can also help. If you are 60 or older, the National Elder Fraud Hotline at 1-833-372-8311 can help with reports.
- Keep everything: the letter and card if one arrived, screenshots of the text, the call log, and any payment confirmations. You will need dates and the number that called.
Watch for the second scam. Days later, someone may offer to get your money back, or to "fix" your Medicare number, for a fee. Real agencies and Medicare do not charge you to recover stolen money or to fix your number, and anyone asking for an upfront fee is running a recovery scam.
And if anything feels rushed or confusing, show the card or the message to someone you trust before you act on it. Tell an older relative the one sentence that stops this scam: "Medicare will never call you about your card. Hang up and call 1-800-MEDICARE."
How to get a replacement card yourself
If your card is lost, damaged, or stolen, getting a new one is free, and you do it yourself. Log in to your Medicare.gov account and order a replacement card, or call 1-800-MEDICARE at 1-800-633-4227 (TTY 1-877-486-2048) and ask for one. You can also request one through your my Social Security account, or in person at a local Social Security office. The card arrives by mail, and your coverage stays active while you wait.
If you need proof of coverage before the card arrives, print a copy from your Medicare.gov account. And if your card arrives with wrong information, a wrong name or wrong coverage dates, contact Social Security first. Social Security keeps the official record, and Medicare pulls from it.
Got a suspicious text?
Paste it into our free checker for a plain-English verdict before you tap anything.
Check It Now — Free →Frequently asked questions
Is my new Medicare card real?
Probably yes, if it arrived by mail as a paper card with a letter from CMS, and nobody asked you to pay, activate, or confirm anything. About 1.3 million people got a new card with a new number in 2026. To be sure, check your Medicare.gov account or call 1-800-MEDICARE (1-800-633-4227), never the number on a call, text, or postcard.
Why did Medicare send me a new card?
There were two separate mailings. About 1.3 million people got new numbers in 2026; CMS has not published a detailed public explanation for that wave, but the letter with your card explains your case. Separately, about 103,000 people got new cards after CMS found Medicare.gov accounts created fraudulently between 2023 and 2025. Your coverage and benefits did not change either way.
Will Medicare call me about my new card?
No. Medicare will never call, text, or email you out of the blue to ask for your Medicare number, bank details, or a payment. Medicare only asks you to verify information if you contacted them first. If someone calls about your card, hang up and call 1-800-MEDICARE (1-800-633-4227) yourself.
Do I have to pay for it or activate it?
No. A real Medicare card is free, and there is nothing to activate. Your old number stops working once the new card arrives, so give your doctors and pharmacy the new number. Your coverage and benefits stay the same.
What if I already gave my number to a caller?
Call 1-800-MEDICARE (1-800-633-4227) right away and say your number may have been shared. Check your Medicare Summary Notices for charges you do not recognize. Go to IdentityTheft.gov for next steps, consider a free credit freeze, and report it to the HHS Office of Inspector General at 1-800-447-8477 and the FTC at ReportFraud.ftc.gov.
Is the "plastic chip card" text real?
No. CMS has announced no plastic or chip Medicare card. Texts saying your paper card is expiring and offering a free plastic card through a link are scams. Do not tap the link. Forward the text to 7726 (SPAM) and report it at ReportFraud.ftc.gov.
Related: Medicare Scams Explained: Calls, Texts & Fake Websites →
Related: Does Medicare Call You About Benefits? What Is Real →
Related: Why Am I Getting So Many Medicare Calls? →
Related: I Shared My Medicare Number. What Do I Do Now? →
Related: Medicare Flex Card Scam: Is the Free Grocery Card Real? →
Related: Medicare Open Enrollment Scams: 5 Red Flags (Oct 15–Dec 7) →
Related: Fake Medicare Websites in Search Ads? How to Spot Them →
Related: Clicked Only? What to Do Right Now, Step by Step →
Related: Letter Explainer: Understand Any Letter in Plain English →
Related: Free Scam Text Checker for Seniors: Check Any Text →
Related: Fake Medicare Appointment Letter? The 'Reserved' Trap →
Sources: Centers for Medicare & Medicaid Services, CMS Notifies Individuals Potentially Impacted by Data Incident (June 30, 2025); Federal Trade Commission, This Medicare Open Enrollment Season, Learn How to Protect Yourself From Scams (September 30, 2025); Delaware Department of Insurance, Medicare Assistance Bureau, Important Reminders Ahead of Open Enrollment (October 15, 2026); Center for Medicare Advocacy, New Medicare Cards Arriving for Some (June 11, 2026); TheStreet, New Medicare Card: How to Spot the Real One From a Scam; Iowa Attorney General, Attorney General Brenna Bird Warns Iowans About Medicare Scams as Open Enrollment Begins (October 15, 2026). Last updated November 2, 2026.