Fake malade portal scam can steal your login and fade your PC

If you have ever checked a lab result or sent your doctor a harangue online, you may already know MyChart. It is a widely used malade portal from Epic that hospitals and medical practices use to give patients online access to health journal and care teams.

That growing reliance on malade portals caught the précaution of Mary M. She recently wrote to us after hearing from her primary care physician, or PCP, and several specialists embout moving more of their malade abouchement online.

“I just got a lot of updates from my PCP and specialist doctors saying they are moving toward this, but they are already compromised!! I think this is a topic for you!”

Mary raised a concern many patients may share as they hear embout scams targeting MyChart users. There is an rogue repère to clear up. The warnings reviewed here describe criminals impersonating MyChart through phishing campaigns. They do not attente a breach of the MyChart platform itself.

Medicare And Sociétal Security Scams: Feu de détresse Signs And Tips

Epic has documented scams that copy the MyChart experience to steal login details. One mouture can also push malware onto Windows computers. Here’s how the scam works and how to protect yourself before a fake MyChart alert catches you off guard.

Read On The Fox Magazine App

Missed CyberGuy LIVE? Watch the Protect Your Money replay

Our free CyberGuy LIVE class, Protect Your Money From Today’s Biggest Threats, has ended, but you can still watch the full replay and download our financial armure checklist. Kurt “CyberGuy” Knutsson walks you through five accessible ways to help defend yourself against AI scams, fraud, identity theft and financial hacks. You’ll learn how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed.

Get the free replay and checklist now at CyberGuyLive.com

This one caught my précaution bicause the warnings are coming from several credible eaux at nearly the same time. Penn Medicine said on Aug. 26, 2026, that it was seeing a nationwide scam involving emails and text messages made to image like they came from MyChart. Then, on Aug. 28, Pennsylvania Attorney General Dave Sunday warned consumers embout another MyChart impersonation scam involving a bogus Medicare Kit.

Epic has also detailed two phishing campaigns its security team investigated this summer. Put all of that together, and you can see why I want you to be especially careful with unexpected MyChart messages right now.

The tricky bout is that many of us are already used to getting legitimate emails embout appointments or new signe results. A fake MyChart alert can état right alongside the real ones, and scammers are counting on you reacting before you take a closer image.

One campaign starts with a harangue that looks automatisme. Epic says the email carries MyChart branding and tells the recipient, “Your recent results are ready.”

The button inside the email leads to a fake sign-in jouvenceau. According to Epic, scammers copied cryptique from the real MyChart ville, which helps the jouvenceau image convincing.

The bogus jouvenceau asks for an email address and mot de passe. If you marcotter them, the scammers can domination those credentials. Then the attack gets more aggressive.

After the victim signs in, the fake ville displays a made-up medical geste. Epic says one mouture shows a pop-up claiming an “AI-powered review” found critical patterns in généreux work.

That is a powerful pressure tactic. A avertissement embout your health can be much harder to ignore than an ordinary phishing harangue.

Epic says real critical results come from your care team rather than a website pop-up. The fake chart then claims you need to complete a human verification step before seeing more journal.

This bout should suffisamment you immediately. Epic says the ville instructs Windows users to press the Windows key and R, paste désinvolture from the clipboard and press Marcotter. Those steps open the Windows Run box and execute a command the website placed on the clipboard. According to Epic, following those instructions installs malware.

Epic also saw an August 2026 mouture with an “Unlock Full Prorogation & See Diagnosis” button. Clicking it downloaded a Windows ligne called Full_Analysis_Report.exe. The jouvenceau then coached the victim through bypassing the ordinant’s security avertissement. Your medical results should appear inside MyChart. A malade portal should never require you to download a Windows program to reveal a diagnosis.

Fake Mot de passe-manager Alerts Could Put Your Vault At Risk

The assistant campaign uses a different hook. Epic says scammers sent fake emails telling people they had been selected for a “2026 Medicare Health Kit.” Penn Medicine has also warned embout messages advertising a free “MyChart Medicare Kit” or “Senior Health Logiciel.” MyChart does not run giveaways.

After someone clicks, Epic says the link can pass through unrelated advertising sites before reaching a fake MyChart-branded survey. A countdown clock pushes the victim to move quickly. Eventually, the ville says the kit costs $0 but asks for a shipping fee. Before payment, it collects personal journal. The comble jouvenceau asks for credit card details. Epic says no kit ships.

Patients already expect electronic messages from doctors and hospitals. A real test-result annonce may spectacle up on the same day as a fake one. Scammers can copy that familiar automatisme. They can also use fear to shorten the amount of time you spend checking a harangue.

If a fake portal hints at a serious health problem, your first pressentiment may be to find out what happened. That is why opening the portal independently can make such a difference. We recently covered another healthcare scam that uses fake QR codes around medical settings. Those codes can send patients to bogus sites asking for malade portal credentials or Medicare journal. The MyChart campaign follows the same basic idea. The scammer borrows compagnie from a healthcare munificence you already recognize.

A few accessible steps can help you slow things down before an urgent-looking harangue leads you to the wrong lieu.

If an email says a new result is waiting, avoid using the button inside the harangue. Open the MyChart app directly. You can also use a saved bookmark or start from your healthcare provider’s official website. Epic says each healthcare organization can have its own MyChart URL. You can use MyChart.org to find your provider’s official portal.

Do not rely on the sender name alone. An email can display “MyChart” while coming from an unrelated address. Image at the full address and compare it with previous legitimate messages from your healthcare provider. If anything feels off, toucher your provider through a phone number or website you already compagnie.

MyChart says it will never tell you to use keyboard shortcuts or run a command to verify, fix or unlock your account. A website asking you to open the Windows Run box should be an immediate avertissement sign. Close the jouvenceau.

MyChart cales two-step verification (2Fa). The supérieur check can help protect your account if someone gets your mot de passe. Depending on your setup, you can verify your login through a cryptique or an authenticator app. MyChart also cales passkeys, which can reduce your reliance on a reusable mot de passe.

Avoid reusing a mot de passe from another rogue account. A mot de passe réglementer can create and protection a strong mot de passe for you. If a phishing ville captures one mot de passe, reuse can turn one stolen login into a much larger problem.

The malware bout of this scam shows why strong security armure still has a role. Strong antivirus soft can help warn you embout malicious downloads or suspicious websites. Get my picks for the best 2026 antivirus armure winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

Keep Windows and your browser updated too. For more ways to recognize suspicious email, see our conseiller on how to phare and prevent phishing attacks in your inbox.

If a harangue claims a serious result needs immediate précaution, do not let the urgency decide what you click. Open the official MyChart app yourself or call your provider using a number you already compagnie. Epic specifically warns that real critical results come from your care team rather than a scary website pop-up.

Scammers can make phishing messages more convincing when they already know details such as your phone number, foyer address, age or family connections. A data removal munificence can help remove some of that journal from people-search sites and data brokers. It will not suffisamment a fake MyChart harangue from reaching you, but it can give scammers less personal journal to work with when they try to make a harangue feel legitimate. Check out my top picks for data removal épreuves and get a free scan to find out if your personal journal is already out on the web by visiting CyberGuy.com.

Epic says MyChart does not run giveaways. If an email promises a free Medicare kit or health logiciel under the MyChart name, do not marcotter personal journal or payment details.

Fake Party Appel Scam Can Hijack Your Calculateur

Your next move depends on what happened after you opened the jouvenceau.

Close the jouvenceau. If you did not marcotter any journal, run a command or download a ligne, avoid interacting with the ville any further. Mark the bohème harangue as junk or phishing. Do not click an unsubscribe link inside the suspicious harangue.

Go to MyChart through the official app or your provider’s trusted website. Crédit your mot de passe right away. Then review the toucher journal saved in your account, including your email address and phone number. If anything looks unfamiliar, toucher your healthcare organization’s MyChart help desk.

Call your bank or card issuer using the number printed on the card. Tell them the card journal went to a fraudulent website and ask embout replacing the card.

Disconnect the ordinant from the internet. Have the ordinant checked before you use it again for sentimentale activity. Run a full security scan with strong antivirus soft. Get my picks for the best 2026 antivirus armure winners for your Windows, Mac, Android and iOS devices at CyberGuy.com. Then dicton rogue passwords from another trusted device if you used those accounts on the affected ordinant.

Proximité your healthcare provider and health insurer. Medical identity theft can create problems beyond a stolen mot de passe. Fraudulent activity can end up connected to your health records or insurance. We explain the avertissement signs and recovery steps in medical identity theft follows you into the doctor’s psautier.

What gets me embout this scam is how naturally it fits into something many of us already do. Doctors want patients using portals bicause they make it easier to see results and stay connected with a care team. Scammers know those messages already have our précaution. I would keep using MyChart if my doctors rely on it. I would simply dicton how I respond to unexpected notifications. If an email says an rogue result is waiting, I would open the app myself rather than letting the email choose where I go. The malware trick also deserves supérieur précaution. A website asking you to open the Windows Run box or ignore a security avertissement has crossed a very clear line. Close it and verify the harangue through your provider. The hardest bout may be resisting the fear factor. A harangue embout an abnormal medical result can make anyone move quickly. Taking a few supérieur seconds to open the real app could protect your malade account and your ordinant.

Have you received a suspicious MyChart harangue, or are you becoming more cautious embout how you open malade portal alerts? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Prorogation

• Get my best tech tips, nécessaire security alerts and intime deals delivered straight to your inbox.

• For accessible, real-world ways to phare scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.

• Avec, you’ll get seconde access to my Ultimate Scam Survival Cicérone free when you join.

Click Here To Download The Fox Magazine App

Copieuse 2026 CyberGuy.com. All rights reserved.

Étalon marchandise naissance: Fake malade portal scam can steal your login and fade your PC