Faced with ever more inventive scammers, Health Insurance has published some advice for insured persons, to enable them to recognize fraudulent requests. They take the form of phone calls, text messages or malicious emails.
These recommendations come shortly after a massive data leak. In mid-March, the computer accounts of 19 health professionals, mainly pharmacists, were hacked in order to steal the administrative data of more than 500,000 policyholders. Health Insurance, which filed a complaint, nevertheless asserts that these files did not contain any banking information, contact information (address, telephone), or data on illnesses or the consumption of care.
Personal data is precisely what scammers are interested in. You may have already found a message on your answering machine asking you to call back your Primary Health Insurance Fund (CPAM), via a number other than 3646. In this case, the most of the time, “to make you call a heavily surcharged number in order to extract money from you indirectly”, warns the Health Insurance on its site.
It is good to know that, when your CPAM, the real one, contacts you by telephone, only three numbers are likely to be displayed: 3646, of course, but also 01 87 52 00 70, for calls made in the framework of operations for vaccination against Covid-19, and 09 74 75 76 78 for those linked to the contact tracing system intended to limit the circulation of the virus. In addition, the Health Insurance will never ask you for your bank details or any password.
Vigilance is also required regarding text messages. Scammers take advantage of the fact that health insurance sometimes inserts links to information pages in the text messages it sends, on ameli.fr for example. These messages, which are authentic, direct you directly to the site to allow you to connect to your account, using your identifiers. But they never ask for the communication of personal elements.
VERIFY THE FROM ADDRESS of emails
This is not the case with fraudulent sms which, in one way or another, always seek to obtain your contact details, in particular bank details. Health Insurance cites, for example, messages that inform the insured of the alleged delivery of a new Vitale card or the imminence of a refund. Each time, you are asked to click on a link that sends you to a form to collect confidential data. You don’t have to answer it.
Unfortunately, your mailbox is also the playground of scammers. The latter are sometimes very skilful in reproducing the visual codes of Health Insurance and impersonating it in a credible manner. Here again, to disentangle the true from the false, you must be attentive to what is asked of you. “Health Insurance never asks for the communication of personal elements (medical information, social security number or bank details) by email, outside the secure space of the ameli account”.
Other clues can guide you since, for example, the Health Insurance never indicates a file reference in the subject of the emails it sends. It never asks for reimbursement validation, does not present itself as customer service and never writes in red in its emails to policyholders. It can also be useful to hover over the sender of the email with your mouse, in order to reveal his complete address and check whether it seems personal or professional.