Guides
Phishing and impersonation scams using insurer names
How fake emails, texts, calls and websites borrow an insurer's name, the red flags, how to verify a message, and what to do if you clicked or paid.
An impersonation scam uses the name, logo or voice of an insurer, agent or regulator to get your login, bank details or a payment. Treat any unexpected message about your policy as unverified until you confirm it through a phone number or website you found yourself, never through the message. Real insurers do not need you to pay a fee to receive a death benefit, and they do not demand payment by gift card, cryptocurrency or wire.
How common this is
Pretending to be a trusted business is the most-reported kind of fraud. The FTC said on June 15, 2026 that people reported losing $3.5 billion to imposter scams in 2025, including about $1 billion to business impersonators, and that imposter scams made up nearly one in three fraud reports. Those numbers are not specific to insurance, but insurers are among the businesses scammers copy, because policyholders pay premiums regularly and beneficiaries expect money.
State regulators have noticed. The Connecticut Insurance Department's May 15, 2026 notice warns that fraudulent emails, texts and online messages are increasingly used to get personal and financial information, and that scammers use realistic emails, websites and logos.
Versions you may see
| Version | What the message says | What is really happening |
|---|---|---|
| Overdue premium | "Your policy will lapse today unless you pay" | A payment link or number goes to the scammer. A real lapse follows a grace period and written notices; see life insurance grace periods and lapses |
| Account verification | "Confirm your identity to avoid suspension" | A fake login page steals your username and password |
| Claim "release fee" | "A claim is ready, but you must pay a tax or fee first" | An advance-fee scam aimed at beneficiaries |
| Unclaimed benefit | "We found a policy in your name" | Phishing for your Social Security number; see unclaimed money and heir-finder scams |
| Fake agent or "senior benefits" caller | A caller says they are updating your policy or benefits | Seeking account numbers or Medicare/Social Security details |
| Regulator impersonation | "Insurance department officer" demanding payment | Regulators do not demand payment to settle your claim |
| Spoofed caller ID | The number looks like the insurer's | Caller ID can be faked, so it proves nothing |
| Fake website | A near-identical web address, found in an ad | Credentials or card details are harvested |
Deepfake voices and AI-written messages make grammar mistakes a weaker clue than they once were. Judge the request, not the polish.
Red flags
- Urgency or a threat ("today," "legal action," "final notice").
- A request for a one-time code sent to your phone. No insurer needs that code read aloud.
- Payment by gift card, prepaid card, cryptocurrency, wire or payment app.
- A link or attachment you did not expect.
- A demand for your full Social Security number or bank login. Insurers may ask for parts of identifiers when you call them, but they do not ask for passwords.
- A message about a policy you do not have, or from a company you never dealt with.
- Instructions to keep the conversation secret or stay on the line.
How to verify a message: step by step
- Pause. Do not click, call back or reply.
- Match the message to your records. Do you own a policy with that company? Check where you keep policy documents; see where to keep your policy and who to tell about it.
- Find the real contact. Use the phone number printed on a statement or policy, or type the insurer's web address yourself. Avoid search ads for the company name, which can be copied.
- Ask the company directly whether it sent the message and whether any action is needed on your account.
- Check any agent. If a person contacts you claiming to be your agent, verify the license using how to check that an insurance agent is licensed.
- Log in only through the official site or app. Turn on multi-factor authentication where the insurer offers it, and use a unique password.
- Report it (see below) even if you did not fall for it.
Beneficiaries and grieving families
After a death, beneficiaries are especially exposed. Scammers read obituaries or buy lists, call to "help" with claims, and charge fees. The real claim process is free: contact the insurer's claims department directly, as described in how to file a life insurance claim. If you are not sure which policies exist, use the free NAIC locator described in how to find a lost life insurance policy. Be wary of anyone who asks for money to find or release a benefit, and be careful about who receives payment: confirm bank details with the insurer by phone before sending any documents with account numbers. privacy and your life insurance data: who sees it and your rights explains what insurers may do with your data.
If you clicked, replied or paid
- Clicked a link or opened an attachment: disconnect, run a security scan, change the password on the account concerned and on any other account that used it.
- Gave a password or a code: change it at once, and contact the real company.
- Shared bank or card details: call the bank or card issuer, report the fraud and ask to replace the account or card.
- Shared your Social Security number: consider a credit freeze with each credit bureau, and use IdentityTheft.gov for a recovery plan.
- Paid money: contact the payment provider immediately and report the loss.
- Report to the FTC at ReportFraud.ftc.gov, to the FBI's IC3 if it happened online, and to your state insurance department, which can alert the real insurer and other consumers. If the dispute is with a genuine insurer, see how to file a complaint against a life insurer.
Key takeaways
- Unexpected messages about a policy, a lapse or a claim should be verified through contact details you find yourself.
- Real insurers do not demand gift cards, crypto, wires, one-time codes or fees to pay a death benefit.
- Caller ID, logos and polished writing prove nothing; the request itself is the test.
- Act fast if you shared credentials or money, and report to the FTC and your state insurance department.