A Click That Could Cost More Than a Password September 2, 2026 The email looks routine. The message that appears to come from MyChart, it’s complete with the familiar logo and a notification that recent test results were ready. The patient clicks the link and signs in. Within minutes, personal information has been handed over to scammers operating a fake website designed to look exactly like the real thing. Healthcare organizations across the country are warning patients about an increase in sophisticated MyChart-related scams that use trusted branding to steal passwords, personal information and credit card details. Scammers may send emails, text messages or direct users to websites that closely resemble legitimate MyChart pages. Some messages claim new test results are available. Others promise free gifts, health kits or prizes. Their goal is the same: convince people to click a link and provide sensitive information. One recent scam begins with an email claiming that laboratory results are ready to view. The included link directs users to a fake MyChart login page. After entering credentials, victims may see alarming messages about critical health findings and instructions to complete unusual “verification” steps on their computers. Those actions can install malicious software. Another scam advertises a free Medicare health kit. Victims are guided through surveys and promotional pages before being asked to provide personal information and payment details for shipping charges. The promised reward never arrives. Patients can protect themselves by checking email addresses and website URLs carefully before clicking links. MyChart, Epic and healthcare organizations will never ask for passwords or verification codes by phone, text or email. Users should also be skeptical of giveaways or urgent requests that demand immediate action. If a message seems suspicious, avoid clicking links and contact your healthcare organization’s help desk directly. Experts say one simple rule remains the best defense: If something doesn’t feel right, stop and verify before taking action. How to Protect Yourself From MyChart Scams Check the sender’s email address carefully. Look beyond the display name and verify the full email address before opening links or attachments. Inspect website addresses before signing in. Make sure the URL belongs to your healthcare organization or an official MyChart site. Watch for misspellings, extra words or unusual web addresses. Access MyChart through trusted methods. Use the MyChart mobile app, a saved bookmark or your healthcare organization’s official website instead of clicking links in emails or text messages. Never share your password or verification codes. MyChart, Epic and healthcare organizations will never ask for passwords or security codes by email, text message or phone. Be cautious of urgent or alarming messages. Scammers often create a sense of urgency by claiming critical test results, account issues or immediate action is required. Ignore offers for free gifts, prizes or health kits. MyChart does not conduct giveaways or award free products in exchange for personal or payment information. Do not run commands or software from a website. No legitimate MyChart page will ask you to press keyboard shortcuts, paste commands into your computer or download software to view results. Do not click suspicious unsubscribe links. If you believe an email is fraudulent, delete it or mark it as spam instead of interacting with it. Protect your contact information. Never change your email address or phone number at someone’s request unless you initiated the change through official channels. When in doubt, contact your healthcare organization directly. Call the official help desk or clinic number to verify whether a message is legitimate. If You Think You May Have Been Scammed Disconnect your computer from the internet and seek technical assistance if you downloaded software or followed instructions to run commands. Close the webpage immediately if you clicked a link but did not enter any information. Report suspicious emails as junk or phishing. Review your contact information in MyChart. Change your MyChart password if you entered login credentials. Contact your bank and replace your card if you entered payment information.
