Early Signs a Telehealth Prescription Service Was Created With Your Identity

Telehealth made getting care more convenient, but it also created an opening for medical identity theft. Criminals can use your name, date of birth, and address to open an online telemedicine account and route prescriptions—sometimes for controlled substances—to pickup or delivery. Catching the earliest signs helps you stop charges, prevent dangerous medication records from attaching to your name, and reduce future exposure.

Why criminals create telehealth prescription accounts in your name

Fraudsters prize telehealth platforms because identity verification can be inconsistent, and virtual visits are quick. With enough personal details, they can:

• Obtain prescriptions (sometimes controlled substances) for resale or abuse.
• Ship medications to drop addresses or pickup at pharmacies using your profile.
• Run up telehealth visit fees, subscription charges, and pharmacy costs tied to your insurance or out-of-pocket billing.
• Pollute your medical history, complicating real care later (e.g., drug interactions or “doctor shopping” flags).

Early signs a telehealth prescription service was created with your identity

These are the most common weak signals that appear days or even hours before charges post or medications are dispensed. Investigate any that apply—even one can be enough to start containment.

1) Unexpected pharmacy texts or calls

• “Your prescription is ready” or “We’re processing your refill” from a chain pharmacy you don’t use.
• Pickup reminders for a medication you don’t recognize or a store location you never selected.
• Automated calls asking to confirm delivery address for a shipment you didn’t order.

What to check: Call the pharmacy using the number on its official website, not links in messages. Ask if a new profile or recent prescription exists for your name and date of birth. You don’t need medication details—just whether activity is pending or ready.

2) Prior authorization or insurer notices you didn’t expect

• Insurance letters, app alerts, or emails about a prior authorization request for a medication you don’t take.
• Explanation of Benefits (EOB) showing a telehealth visit you didn’t attend or prescription review you didn’t request.

What to check: Call the member services number on your insurance card. Ask for the provider name, service date, and medication name tied to the request or claim, and tell them you suspect medical identity theft.

3) New-patient “welcome” emails from telehealth platforms

• Account creation confirmations or “complete your intake forms” emails from telemedicine brands you don’t know.
• Multi-factor or one-time codes arriving out of the blue, especially if repeated.

What to check: Do not click links. Go directly to the vendor’s public site, locate support, and ask if an account exists with your email, phone number, or date of birth. Request closure and event logs for unauthorized activity.

4) Shipping or delivery notices tied to pharmacy fulfillment

• Parcel tracking emails or texts from carriers for “pharmacy” or “specialty pharmacy” shipments you never ordered.
• Delivery attempts or signature-required notices when you weren’t expecting a package.

What to check: Validate the tracking number on the carrier’s website. If the sender shows as a pharmacy or fulfillment partner you didn’t use, contact them directly to cancel and flag the account as fraudulent.

5) Activity in your state’s prescription monitoring report

Many states operate a Prescription Drug Monitoring Program (PDMP). If you can access your own report, look for unfamiliar prescribers, pharmacies, or controlled substances.

What to check: If your state allows patient access, request your PDMP report and review recent entries. Otherwise, ask your primary care provider or pharmacist to help check for suspicious listings.

6) Unexpected charges, holds, or small “test” transactions

• Small telehealth platform charges that look like monthly fees, intake visits, or $0 authorizations.
• Pharmacy charges labeled as verification tests or copay checks.

What to check: Review recent bank and card activity. If you find unknown charges, contact the card issuer for a new number and dispute the transactions. Keep copies of statements for your fraud report.

7) Address mismatches or pickup locations you didn’t choose

• Pharmacy notices referencing a store far from home.
• Receipt emails showing a delivery address you don’t recognize (sometimes a parcel locker or short-term rental).

What to check: Ask the pharmacy to note the address, block shipments to it, and flag the profile for fraud. Document the address in case law enforcement requests it.

How to verify a suspected telehealth prescription account quickly

When you spot a red flag, move fast to validate it without over-sharing your data.

1. Contact the pharmacy first. Use a verified number from the pharmacy’s official website or your member card. Ask: “Is there a recent prescription under my name and date of birth?” If yes, request a hold/cancel and ask them to flag the profile as suspected identity theft.
2. Call the telehealth platform’s fraud or support line. Provide only the minimum required identifiers (name, date of birth, phone, and email). Ask when the account was created, what identifiers were used, and to close or lock the account. Request written confirmation.
3. Notify your health insurer. Ask them to flag your account for potential medical identity theft, review recent claims, and block out-of-network telehealth charges unless you approve.
4. Document everything. Keep screenshots of texts/emails, call logs, names of representatives, dates, and ticket numbers. This record helps with disputes and any police or FTC filings.

Immediate containment steps

Act on these steps the same day you discover suspicious activity:

• Freeze your credit with all three bureaus to block new lines of credit in your name; some telehealth platforms or pharmacies may run soft or hard checks for financing or subscriptions.
• Change passwords on your primary email, mobile carrier account, and any accounts sharing the same password as your email. Enable multi-factor authentication (preferably an authenticator app).
• Secure your phone number. Add a port-out PIN with your carrier to reduce SIM-swap risk, which criminals can use to intercept codes for telehealth accounts.
• Place fraud alerts with the credit bureaus if you suspect broader identity misuse.
• Report to the FTC at IdentityTheft.gov and obtain an Identity Theft Report. It can help compel businesses to provide records and remove fraudulent charges.
• Ask pharmacies to add notes to your profile that any controlled-substance prescriptions require in-person ID verification.

How to clean up your records after a fraudulent prescription event

After you stop immediate activity, work to prevent future fallout:

• Request an accounting of disclosures from the telehealth provider and any associated pharmacy. Ask for dates, prescribers, and items billed or dispensed under your identifiers.
• Ask your primary care provider to review your medication list and problem list for accuracy. Request corrections in your electronic health record if bogus entries exist.
• File disputes with your insurer for any fraudulent claims and request a special handling note to scrutinize future telehealth charges.
• Check your PDMP (where available) for unfamiliar entries and ask your provider or state program for correction or fraud flags.
• Monitor mail for follow-up bills, collections letters, or additional pharmacy notices. Dispute immediately and reference your FTC report number.

Prevent repeat abuse: tighten your data exposure

Telehealth fraud often starts with exposed personal information: full name, date of birth, phone numbers, email addresses, and home address. Reduce what’s publicly available and what can be used to pass knowledge-based verification.

• Remove your data from people-search sites. Opt out from major data brokers and people-finder sites that list your age, relatives, addresses, and phone numbers.
• Minimize oversharing. Avoid posting your birthday, recent moves, or family details that help pass identity quizzes.
• Use unique emails (aliases) for healthcare portals and pharmacies to limit cross-service exposure.
• Use strong, unique passwords and an authenticator app on email, mobile carrier, and healthcare portals.
• Watch for breach notifications and change credentials immediately if an email or phone appears in a breached dataset.

Monitoring that helps you catch the next signal sooner

Fraud rarely happens in isolation. A telehealth account created in your name may coincide with new-account attempts, insurance misuse, or card testing. Credit and identity monitoring can reveal changes early—new inquiries, new accounts, or address changes. If you want a single place to watch credit and identity-related activity, consider a monitoring tool that alerts you quickly so you can act before charges stick. One option is available here: SmartCredit for privacy, credit monitoring, and identity protection.

How pharmacies and telehealth platforms can work with you

You can ask businesses to apply extra friction to your profile without blocking legitimate care:

• Add a fraud flag requiring in-person ID verification for controlled substances or first-time prescriptions.
• Restrict pickup locations to a small set of stores you actually use.
• Disable mail-order shipping unless you explicitly enable it.
• Require live-agent review for telehealth visits initiated under your identifiers.

What not to do

• Don’t click links in suspicious texts or emails to “verify your prescription” or “cancel delivery.” Go directly to official websites or phone numbers.
• Don’t share full SSN unless legally required and you initiated the call to a verified number.
• Don’t ignore small alerts. A single “ready for pickup” message could be the only warning you get before a controlled-substance claim posts to your record.

Sample call scripts

Pharmacy

“I received a message about a prescription I didn’t request. Can you check if there is a recent prescription under my name and date of birth? If so, please place it on hold or cancel it, note suspected identity theft, and block shipments or pickups without in-person ID. I’ll provide my FTC Identity Theft Report once filed.”

Telehealth platform

“I’m reporting medical identity theft. Please confirm whether an account exists under my name, date of birth, and email/phone, the date created, and any recent visit or prescription requests. I need the account locked or closed and written confirmation of all actions.”

Documentation to keep

• Copies of texts, emails, and letters.
• Call logs with dates, times, and names.
• Screenshots of app notifications and tracking pages.
• EOBs, claims numbers, and any pharmacy ticket or prescription numbers.
• FTC Identity Theft Report and any police report number.

Red flags summary checklist

• Unrecognized pharmacy ready-for-pickup or delivery texts/calls.
• Insurer prior authorization or EOB for unknown medication or visit.
• Telehealth “welcome” emails or one-time codes you didn’t request.
• Carrier tracking for pharmacy shipments you didn’t order.
• New entries in your PDMP, unfamiliar prescribers, or distant pharmacies.
• Small or $0 test charges from telehealth or pharmacy merchants.
• Receipts showing mismatched delivery addresses or distant pickup stores.

Conclusion

Telehealth prescription fraud often starts with small, confusing signals—a pickup text, a prior-authorization notice, or a welcome email. Treat these as serious early warnings. Confirm activity with the pharmacy and platform, stop fulfillment, alert your insurer, and document everything. Then harden your identity: reduce exposed personal data, lock down core accounts, and set up monitoring so the next anomaly is caught even sooner. Acting quickly protects your wallet, your medical record, and your peace of mind.