Patients across the United States are being targeted by fraudsters who pose as MyChart, the widely used patient portal that lets individuals communicate with their health‑care providers. MyChart, licensed by Epic Systems Corporation, says it has observed a surge in counterfeit emails, text messages, phone calls and web pages designed to look official.

Typical scam tactics

Fake medical results – One common ploy begins with an email claiming that a patient’s test results are ready. The message includes a link or button that appears to lead to MyChart, but the URL actually points to a fraudulent sign‑in page. The fake site may display alarming lab values and then ask the user to prove they are human by pressing the Windows key, “R,” followed by “Ctrl” and “V,” and finally “Enter.” Those keystrokes open a Windows command box, paste a hidden code and execute malware on the computer. No legitimate health portal ever asks users to use keyboard shortcuts to verify or unlock an account.

A variation of this scam asks recipients to download a program in order to view the full medical report. MyChart stresses that genuine lab results are accessed only through the official website or mobile app, never via a downloaded executable.

Fake Medicare kit giveaway

The second scheme starts with an email stating the recipient has been selected for a free Medicare health kit. The message directs the user to a survey page that may feature a countdown clock and claims that only a few kits remain. After completing the survey, the victim is told they have won a kit valued at $149 and is asked to pay a small shipping fee. The scammers then collect personal details—name, email, phone number, mailing address—and ultimately request credit‑card information. MyChart confirms it does not run any giveaways; any prize that requires payment is not a prize but a purchase.

How to protect yourself

MyChart recommends a few simple steps to verify the legitimacy of any communication:

• Check the sender’s full email address. Official MyChart messages come from a domain owned by your health‑care organization.
• Hover over any link to view the complete URL before clicking. Each health system has its own MyChart web address; use a bookmarked site or the official app instead of following links in unexpected messages.
• If you click a link but do not enter any information, close the page and report the message as junk or phishing.
• If you entered your MyChart password, reset it immediately.
• If you provided credit‑card details, contact your bank, dispute the charge as fraud and request a new card.
• If you followed keyboard instructions or installed a program, disconnect the computer from the internet and have it inspected by a trusted technician before using it for personal, financial or work purposes.

Stay informed

For ongoing consumer‑protection updates, follow the National Consumer Unit and the National Consumer Correspondent, Allie Jasinski, on Instagram, TikTok and YouTube. Readers with additional questions or story ideas can email [email protected]. Subscribing to the twice‑weekly consumer newsletter provides deeper explanations and practical guidance on avoiding scams like these.

Original reporting: WLWT Cincinnati — read the source article.