Medical Identity Theft Explained: How to Read an Explanation of Benefits for Fraud
Most people treat an explanation of benefits the way they treat a receipt from a gas station: glance, toss, move on. That habit is exactly what medical identity theft depends on. An EOB is the paperwork your health plan sends after a claim is processed. It lists who provided care, what was billed, what the plan paid, and what you may owe. When someone uses your name, member ID, or Social Security number to get treatment, the EOB is often the first place the fraud leaves a footprint. Reading it takes a few minutes. Ignoring it can take months to untangle.
What an EOB Actually Tells You
An EOB is not a bill, even when it includes a patient responsibility amount. It is your plan's summary of a claim. A bill comes from the provider; an EOB comes from the insurer. The two should match. If they do not, that gap is worth investigating.
Look for the patient name, date of service, provider or facility name, claim number, services or procedure codes, billed amount, allowed amount, plan paid, and patient responsibility. Medicare recipients get a similar document called a Medicare Summary Notice. Keep every EOB for at least a year, and longer if you are dealing with a dispute. A shoebox works. A folder labeled by year works better.
The Five-Minute Review
Set aside five minutes per statement. You do not need medical coding knowledge. You need a pen and three questions.
- Did I receive this care? Check the date and provider. A visit on a day you were traveling or working is a flag.
- Do the details match my memory? A routine physical should not include lab work you never had. A single X-ray should not appear three times.
- Does the money make sense? Compare the EOB with any bill from the provider. If the provider bills $600 but the EOB says you owe $40, call before paying.
Write the claim number and the date you reviewed it on the statement. If something is wrong, you will need those notes later.
Red Flags That Point to Medical Identity Theft
Some errors are clerical. Others follow a pattern. Call your insurer's member services or fraud department if you see any of these:
- A provider you have never heard of, especially in another state.
- Services you would remember: surgery, emergency care, ambulance transport, durable medical equipment, addiction treatment, or maternity care.
- Dates that overlap with another appointment or a hospital stay.
- Duplicate claims for the same service on the same day.
- A denial letter saying you have reached a benefit limit you never used.
- A call from a collection agency about a medical debt that is not yours.
- A notice that your health plan account was accessed from an unfamiliar device or location.
- New patient portal accounts, prescriptions, or medical records you did not create.
One odd line can be a typo. Several odd lines, or a provider you cannot place at all, deserve a formal review.
When the Name Is Right but the Care Is Not
Not every unfamiliar claim is theft. A spouse may use a family plan. A parent may list an adult child by mistake. A provider may bill under the wrong patient because two people share a name or a birthday. Data entry errors happen, and they are usually fixable with a phone call. The distinction matters for your records. Ask the insurer to confirm the member ID, date of birth, and address attached to the claim. If those details are yours but the service is not, treat it as suspected fraud until the plan proves otherwise.
How to Dispute a Claim and Keep a Paper Trail
Call the number on the back of your insurance card. Say clearly: "This claim is not mine. I am requesting a fraud investigation." Ask for a reference number and the name of the representative. Follow up in writing if your plan allows it through a secure message or portal.
Request a full claims history for the past year or two, not just the statement in your hand. Ask whether the claim has been paid, denied, or sent to collections. If a provider billed you directly, request an itemized bill and tell them in writing that the charge is disputed. Keep copies of everything. Notes on a phone are fine, but dates and reference numbers should be somewhere you can find months later. If the dispute involves money you have already paid or a legal threat, consider speaking with a consumer protection attorney or a patient advocate.
If Fraud Is Confirmed
Move quickly and in writing. Notify your health plan's fraud department, the provider's billing office, and any collection agency involved. Ask your insurer to correct your claims history and remove fraudulent charges from your file. Check your credit reports for medical debts in collections and consider a free credit freeze or fraud alert with the major credit bureaus. File a report with the Federal Trade Commission at IdentityTheft.gov, which creates an identity theft report you can use with companies. In many cases, a police report is also worth filing, especially if the fraud is large or involves prescriptions. Request copies of your medical records from providers you do not recognize and ask for corrections if false information appears. For legal or financial decisions, a professional who knows your situation is worth the consultation.
Make the EOB a Ten-Minute Habit
Open each EOB the day it arrives. Check the provider, the date, and the services. Match it to any bill. If everything lines up, file it. If something does not, call and write down what you were told. That small routine is how you catch medical identity theft while it is still a paperwork problem instead of a medical records problem. Your health coverage belongs to you. Reviewing the paperwork is part of keeping it that way.
Photo: Cobanams / Pixabay


