By Eric Strand · October 2, 2026
Quick answer: MyChart is legitimate, but scammers impersonate it in Medicare-kit offers, fake test-result messages, and lookalike login pages. Don’t use a suspicious message’s links. Check through your usual MyChart app or your healthcare provider’s verified website.
Trying to check a MyChart scam email? Start with what it asks you to do. A kit giveaway, an unfamiliar sign-in page, or a demand to run software deserves a pause before you share anything.
Which MyChart scams have been reported?
Confluence Health’s September 21, 2026 warning says recent patient reports indicate these impersonation attempts remain active. That supports an ongoing warning; it does not establish an October surge or a total victim count.
1. The MyChart Medicare kit email
Southeast Health reports fraudulent kit emails, including the subject “Your MyChart Medicare Kit Awaits!” The hospital says these messages are phishing attempts. Avoid their links, including unsubscribe, and do not provide personal, payment, or health information.
Confluence Health also warns that MyChart does not run giveaways. A familiar logo does not turn a free-kit offer into a verified benefit.
2. Fake results and copied login pages
Epic’s summer 2026 security investigations documented result emails leading to imitation login pages. Examples included mychart-epic[.]com and my-chart[.]org. Fake charts then displayed alarming medical claims to pressure people into installing malware.
3. A “results” file that is actually a program
Epic describes an August 2026 variation delivering Full_Analysis_Report.exe and urging people past Windows security warnings. Do not run it. A download presented as medical results is not a reason to override security protections.
Confluence’s guidance also rules out instructions to run computer commands or keyboard shortcuts to verify or unlock MyChart.
How to verify a MyChart email or text
- Open MyChart independently. Use the app you normally use or a saved, verified provider address. Each organization can have its own MyChart URL; MyChart.org’s provider finder can help locate it.
- Check the relevant record. MyChart’s help center confirms that result notifications can arrive by email or text. View the actual results inside your account. Genuine billing information can also appear there.
- Ask your provider if anything is unclear. The FTC recommends contacting an organization through a number or website you already trust, rather than the contact details in the questionable message.
Never send a password or verification code in a reply or disclose it to a caller. Confluence warns against changing your account’s contact details to an email address or phone number you do not control.
For medical concerns: confirm the information with your care team through a known channel. A pop-up on an unverified site cannot authenticate a diagnosis.
What to do if you already responded
- Clicked but entered nothing: close the page. This alone does not prove an account or device was compromised.
- Entered a password: use the official account-recovery or password-change options. MyChart’s help center explains recovery for provider accounts and MyChart Central. Ask your provider’s help desk if you cannot regain access.
- Entered card details: contact your card issuer, report the suspected fraud, and ask about replacing the card. Epic recommends replacement after card information is exposed in this scheme.
- Ran the program or followed command instructions: Epic advises disconnecting the computer from the internet and having it assessed before accessing sensitive accounts.
- Shared a Medicare number: call 1-800-MEDICARE (1-800-633-4227) and review claims for unfamiliar services.
Report the message as phishing. The FTC directs consumers to ReportFraud.ftc.gov; use IdentityTheft.gov for recovery steps tailored to exposed personal information. Keep security software updated and enable multifactor authentication where available.
MyChart scam email FAQs
Tap a question to expand the answer.
Is MyChart itself a scam?
No. MyChart is Epic’s patient portal, used by healthcare organizations. This warning concerns messages and websites impersonating it. It does not establish wrongdoing by MyChart, Epic, or your provider.
Is the MyChart Medicare kit email real?
The kit emails described in the hospital warnings are phishing. Do not submit personal information, pay a shipping fee, or reply. If you have a separate question about a health-plan benefit, contact your plan directly.
Can a genuine MyChart message say my results are ready?
Yes. MyChart supports email and text result notifications. Open your usual app or trusted provider website to check the result; the subject line alone cannot authenticate the message.
Can a real MyChart result be downloaded as a PDF?
Yes. MyChart’s help center describes exporting result trends as a PDF from inside your account. That does not authenticate an unexpected attachment. The malicious example above is an executable program with an .exe extension.
Should I click unsubscribe in a suspicious MyChart email?
No. Southeast Health’s warning specifically advises against clicking unsubscribe links or replying to the fraudulent messages. Use your email app’s phishing-report option, then delete the message.
What if I shared my Medicare number?
Call 1-800-MEDICARE (1-800-633-4227), explain what happened, and check your Medicare claims for services you did not receive. Medicare.gov also links to identity-theft recovery help.
Related TIAS guides
Sources are linked beside the relevant claims. This guide covers documented impersonation tactics; it does not identify the operators or verify any individual reader’s message.
Leave a Reply