CMS Warns Physicians of Fraud Schemes

June 26, 2025

The Centers for Medicare & Medicaid Services (CMS) is warning physicians and practices about fraud schemes that are increasingly targeting Medicare providers.  

Bad actors are impersonating CMS officials and sending phishing fax requests for medical records and documentation, falsely claiming to be part of a Medicare audit. 

Email phishing attacks are still a common occurrence, but CMS is now hearing about more fraudulent fax requests being sent out to medical practices.  

CMS emphasized that it does not initiate audits by requesting medical records via fax. Physicians and practices are urged to take steps to protect their data. If physicians receive a suspicious request, do not respond. CMS encourages you to work with your Medical Review Contractor if you receive a questionable or suspected fraudulent fax request to confirm its validity.