Past-due medical bill text scam
Fake medical bill texts use vague details and collections threats to rush you into paying through a link.
How this scam works
The text uses a familiar kind of debt but withholds the details a real bill would let you check. A credit-damage threat pushes you toward the payment link before you call the provider or insurer.
Common versions of the message
- A vague recent ER visit
- A collections deadline
- A payment link with no itemized bill
What the message looks like
Text from +1 (555) 017-4402
MEDICAL BILLING NOTICE: Your account for your recent ER visit has a past-due balance of $1,284.50. Pay within 48 hours to avoid collections and damage to your credit: https://medpay-billing.top/acct
Fictional example based on common, publicly reported scam patterns.
The red flags
- 1
No real details: “recent ER visit”
No hospital name, no visit date, no account number
Without a provider name, visit date, or account number, the supposed visit cannot be matched to your records.
- 2
Collections threat: “within 48 hours to avoid collections”
Real providers send an itemized bill and give you time
The 48-hour collections threat is designed to make the link feel more urgent than asking the provider for an itemized bill.
- 3
Suspicious payment link: “medpay-billing.top”
Pay only through your provider's own portal or phone line
The example payment address ends in .top. Pay only through the provider's own portal or phone line.
What to do
- Do not pay from a text link.
- Call your provider or insurer using the number on your insurance card or their official website.
- Ask for an itemized bill before paying anything.
If you already replied, clicked, or paid
- If you entered card details, call the number on the card immediately and explain that they were entered on a suspicious billing page.
- If you shared insurance information, contact your insurer through the number on your card.
- If you created a password on the page and reused it elsewhere, change those passwords.
Got a message like this?
Paste it into TrustShield's free checker to see the warning signs in seconds. No sign-up needed to try it.