BBB Warns of MyChart Phishing Scam

Scammers are sending fake giveaway texts and emails that copy MyChart logos to steal patient login credentials.

Updated on Nov. 5, 2026 in Cybersecurity

Bold flat-color editorial illustration of a single red fishing lure and hook on a cream background, evoking a deceptive bait used to lure people into a phishing scam. — The Better Business Bureau warned MyChart patients that scammers are sending fake giveaway texts and emails copying the platform's logos to steal login credentials, though the platform has not been breached. AI Illustration. Upload story photo >

Live Poll

Do you feel confident you could spot a fake text or email from your doctor's portal?

The Better Business Bureau warned patients about a phishing scheme targeting MyChart users, in which scammers send fraudulent texts and emails promising rewards. MyChart has not suffered a data breach, and Epic, which created the platform, has stated the site has not been hacked.

Why it matters

The scam exploits trust in official patient portal communications to capture login credentials, insurance details, and payment information from people who may be managing their health records. Patients who receive unexpected giveaway messages risk having their accounts compromised even though the underlying platform itself has not been breached.

The Better Business Bureau's alert is a consumer protection advisory rather than a measured incident count, and it reports that MyChart has not suffered a data breach. The number of people targeted or defrauded has not been disclosed.

The players

Better Business Bureau

A nonprofit organization that publishes consumer alerts and tracks scams to help people avoid fraud.

Epic

The health software company that created MyChart and stated that the patient portal has not been hacked.

The details

Scammers send text messages and emails containing copied MyChart logos, promising giveaways and directing recipients to spoofed pages that request login credentials, insurance details, or shipping fee payments. MyChart does not conduct giveaways and does not request passwords or verification via text or email.

November 5, 2026: Better Business Bureau publishes warning about the MyChart phishing scam.

Threat Landscape

This alert follows the pattern of Better Business Bureau scam warnings that document phishing campaigns impersonating trusted brands, here applied to the MyChart patient portal. Health portals hold sensitive medical and insurance data, making them attractive targets for credential-harvesting schemes.

Patients should not click links in unexpected giveaway texts or emails and should log in to MyChart only through official channels. Anyone who entered credentials on a suspicious page should change their password and monitor their insurance and payment accounts.

The takeaway

Treat unexpected giveaway messages claiming to come from a health portal as suspicious, since legitimate MyChart communications will not request passwords or verification by text or email.