If a new Medicare card arrived in your mailbox this year — even though you did not ask for one — you are not alone, and there is generally no reason for concern. In 2026, the Centers for Medicare & Medicaid Services (CMS) reissued Medicare numbers to roughly 1.3 million beneficiaries as a precautionary security measure. The new cards are real, your coverage has not changed, and the switch is designed to protect you.
Here is what happened, what to do with a new card, and how to tell a genuine Medicare mailing apart from a scam.
What Happened
CMS reissued approximately 1.3 million Medicare Beneficiary Identifiers (MBIs) — the 11-character number printed on your red, white, and blue Medicare card. Replacement cards began arriving in the mail in March 2026, and the new numbers became effective on April 14, 2026.
A few key facts about the reissue:
- The new cards were mailed automatically — no one needed to request one
- Only beneficiaries whose information was involved in a specific security incident received new numbers
- If you did not receive a new card, your existing Medicare number generally remains valid and unchanged
- The card itself looks the same as before; only the Medicare number printed on it is different
Why the Numbers Changed
The reissue followed a Medicare.gov security incident disclosed by CMS. According to CMS, between 2023 and 2025, unauthorized individuals used legitimate beneficiary information — including Medicare numbers, dates of birth, ZIP codes, last names, and coverage start dates — to create Medicare.gov accounts without the beneficiaries' knowledge.
In response, CMS took several steps:
- Deactivated the fraudulent accounts created with beneficiary information
- Blocked account creation from foreign IP addresses
- Monitored claims activity for the affected beneficiaries to watch for suspicious billing
- Replaced the MBIs of affected beneficiaries so the exposed numbers can no longer be used
Importantly, CMS has said it is not aware of any identity theft or fraud that resulted directly from the incident. The decision to issue new numbers was a protective, fraud-prevention measure — not a response to confirmed misuse. It works much like replacing a credit card after a retailer's data breach: it closes the door before a problem can develop.
For a broader look at how Medicare fraud works, see our guide to protecting yourself from Medicare fraud.
What to Do If You Received a New Card
If one of the new cards arrived at your address, the steps are simple. Most importantly, understand what did not change:
- Your coverage did not change. Your Medicare Part A and Part B benefits are the same.
- Your premiums did not change. The reissue has no effect on what you pay.
- Your plan did not change. Any Medicare Advantage plan, Part D drug plan, or Medigap policy you have is untouched.
The only thing that changed is the number itself. With that in mind, here is what to do:
- Destroy your old card after the effective date of April 14, 2026. Shred it or cut it up — do not simply toss it in the trash, since the old number is still personal information.
- Give the new number to your doctors, pharmacy, and insurance plan. Providers bill Medicare using your MBI, so each office you visit should have the current one on file.
- Store the new card safely. Treat the number like a bank account number — do not share it with anyone who contacts you unexpectedly.
Remember: no action was needed to request the card — it arrived automatically at the address Medicare has on file. If you believe you were affected but have not received a card, or if you have moved recently, call 1-800-MEDICARE to confirm your mailing address and card status.
How to Spot a Fake
Whenever Medicare mails new cards, scammers see an opportunity. Fraudsters may claim they need to "verify" your information, charge a fee, or "activate" your new card. Knowing how Medicare actually communicates makes these schemes easy to recognize:
- Real Medicare cards are paper, not plastic. If someone offers you a plastic, chipped, or laminated "upgraded" Medicare card, it is not from Medicare.
- Real Medicare cards require no activation. Your new card works automatically as of its effective date. Anyone who says you must activate it is not from Medicare.
- Medicare will not call, text, or email you asking for your Medicare number, Social Security number, or bank information. Medicare generally communicates by mail.
- There is never a fee. Replacement cards are free. Anyone demanding payment for a new card is a scammer.
If you receive a mailing, call, or message you are unsure about, verify it independently by calling 1-800-MEDICARE or logging into your own account at Medicare.gov. Do not use phone numbers or links provided by the person who contacted you.
If You Suspect a Scam
If you think someone has attempted to steal your Medicare number — or already has it — take these steps:
- Call 1-800-MEDICARE (1-800-633-4227) to report the contact and ask whether any suspicious activity appears on your account. TTY users can call 1-877-486-2048.
- Report it to your local Senior Medicare Patrol (SMP). SMP is a federally funded program that helps beneficiaries prevent, detect, and report Medicare fraud. Find your state's program at smpresource.org.
- Review your Medicare Summary Notice or plan statements regularly. Equipment, tests, or services you did not receive are often the first sign that someone is billing Medicare with your number.
You can also get free, unbiased help from your State Health Insurance Assistance Program (SHIP) at shiphelp.org if you want someone to walk through a suspicious situation with you.
Avoiding Claims Hiccups
Because the old numbers were deactivated, using an outdated MBI after the transition can cause practical headaches:
- Denied or delayed claims — If a provider bills Medicare with your old number, the claim may be rejected and need to be resubmitted.
- Held-up applications — Applications for programs that verify your Medicare number, such as Medicaid or Extra Help, may stall if the number on file no longer matches.
- Pharmacy delays — Your pharmacy's system may flag a mismatch at the counter until the new number is entered.
The fix is usually simple: tell your provider's billing office that you received a reissued Medicare number in 2026 and ask them to update your record before your next visit. Providers can also look up your current MBI electronically, so a denied claim can generally be corrected and resubmitted at no cost to you. If a claim problem persists, call 1-800-MEDICARE.
Where to Learn More
- Medicare.gov — Official information about Medicare cards, your account, and reporting fraud
- CMS.gov — CMS announcements and details about the security incident and card reissue
- 1-800-MEDICARE (1-800-633-4227) — Medicare's official helpline; TTY users can call 1-877-486-2048
- smpresource.org — Your local Senior Medicare Patrol for fraud prevention and reporting
- shiphelp.org — Free, unbiased Medicare counseling through your State Health Insurance Assistance Program
Summary and Next Steps
The 2026 Medicare card reissue is a protective measure, not a cause for alarm. Here are the key points to remember:
- CMS reissued about 1.3 million Medicare numbers after a Medicare.gov security incident; new cards were mailed starting March 2026 and became effective April 14, 2026
- According to CMS, there is no known identity theft or fraud resulting directly from the incident — the new numbers are a precaution
- Your coverage, benefits, premiums, and plan did not change — only the number did
- If you received a new card, destroy the old one, share the new number with your doctors and pharmacy, and store the card safely
- Real Medicare cards are paper, free, and require no activation — and Medicare will not call, text, or email asking for your information
- Report suspicious contacts to 1-800-MEDICARE or your local Senior Medicare Patrol, and check your Medicare Summary Notices regularly
If you received a new card, take a few minutes before your next appointment to make sure your providers have the updated number on file. And if anything about a Medicare mailing or call feels off, verify it through Medicare.gov or 1-800-MEDICARE before sharing any information.
