June 25, 2025
Attention: Phishing Fax Requests
Please be aware of this important CMS notice in response to questions and concerns about suspicious faxes:
Alert: Medicare Fraud Scheme Involving Phishing Fax Requests
CMS has identified a fraud scheme targeting Medicare providers and suppliers. Scammers are impersonating CMS and sending phishing fax requests for medical records and documentation, falsely claiming to be part of a Medicare audit.
Important: CMS doesn't initiate audits by requesting medical records via fax. Protect your information. If you receive a suspicious request, don't respond. If you think you got a fraudulent or questionable request, work with your Medical Review Contractor to confirm if it's real.
Additional Information
To confirm if a request is valid, we encourage you to reference the websites below for details about each Medical Review Contractor's specific additional documentation request process (including sample letters in some cases). If you still have questions, please use the contact information to reach out.
Contractor Type | Contact Information |
---|---|
Medicare Administrative Contractor (MAC) |
CGS J15 Part A CGS J15 Part B CGS J15 HHH |
Beneficiary & Family Centered Care Quality Improvement Organization (BFCC-QIO) |
Acentra Health Livanta |
Comprehensive Error Rate Testing (CERT) |
|
Recovery Audit Contractor (RAC) |
Performant (Region 1 – KY, OH) Cotiviti |
Supplemental Medical Review Contractor (SMRC) |
|
Unified Program Integrity Contractor (UPIC) |
CoventBridge Qlarant SafeGuard Services |