Facebook Marketplace Insurance Scam: How It Works
Facebook Marketplace Insurance Scams: How Fake Buyer Protection Steals Your Money
Introduction
Imagine this: You're scrolling Facebook when a message request appears from someone you don't know. The message reads: "Hi, I think your husband is using my health insurance. Can you please check with him? Here's my policy number and information..."
It sounds bizarre, confusing, and urgent. Your first instinct might be to respond, ask questions, and figure out what's going on. That instinct—though completely natural—is exactly what the scammer wants. Because the moment you engage, you've opened the door to identity theft, phishing, and potential financial fraud.
This is the Facebook insurance identity theft scam, a social engineering attack that exploits confusion, concern for your family, and the complexity of health insurance systems. In this guide, we'll explain how this scam works, why it's effective, how to recognize it, and what to do if you're targeted.
How the Facebook Insurance Identity Theft Scam Works
Step 1: The Stranger's Message
You receive a Facebook message (often in a message request folder you don't check regularly) from someone you've never met. The profile may look legitimate—real photos, friends, posts—or it might be obviously fake with few details.
The message typically includes:
- A claim that your spouse, partner, or family member is using their health insurance
- A sense of urgency or confusion ("I don't understand how this happened")
- A request for your help to "sort this out"
- Their insurance policy number, name, or other identifying details
Example message:
"Hi, I'm sorry to bother you, but I received a notice from my insurance company that someone named [Your Spouse's Name] has been using my health insurance. I'm really confused about how this happened. Can you please check with your husband/wife? Here's my policy info: [details]. I need to resolve this ASAP. Thank you!"
Step 2: Creating Confusion and Urgency
The message is designed to create several emotional reactions:
✓ Confusion – How could your family member be using a stranger's insurance? It doesn't make sense.
✓ Concern – Is your spouse in trouble? Did someone steal their identity? Is there a billing error?
✓ Urgency – The sender needs this resolved "ASAP," which pressures you to respond quickly.
✓ Sympathy – The sender seems polite, confused, and genuinely concerned.
These emotions cloud your judgment and make you more likely to respond without thinking critically.
Step 3: The Information Gathering
Once you respond, the scammer begins extracting information under the guise of "resolving" the issue. They may ask:
- Your spouse's full name and date of birth (to "verify" they're the right person)
- Your insurance company and policy number (to "compare" with theirs)
- Your address (to "confirm" where billing might be going)
- Your phone number (to "call the insurance company together")
- Social Security numbers (claimed to be "needed" by the insurance company)
Each piece of information builds a profile for identity theft. Even seemingly harmless details (names, dates of birth, addresses) can be combined with other stolen data to open credit accounts, file fraudulent tax returns, or access medical services.
Step 4: The Escalation
In some versions of this scam, the fraudster escalates by:
- Claiming they've contacted the insurance company and "your name came up"
- Sending fake documents (insurance statements, bills, or official-looking letters)
- Creating a sense of legal urgency ("The insurance company is threatening to sue me")
- Requesting money to "settle" the fraudulent charges
Step 5: The Real Damage
By the time you realize it's a scam:
- The scammer has gathered enough personal information to commit identity theft
- They've used your details to open fraudulent accounts, file fake insurance claims, or apply for credit
- They may have already sold your information on the dark web to other criminals
The "insurance problem" was never real. It was just bait to trick you into revealing personal information.
Why This Scam Works
Exploits Trust in Social Media
Facebook creates a false sense of familiarity and trust. We assume that people who can find us on Facebook and message us must be somewhat legitimate—especially if their profile looks real.
Plays on Family Protection Instincts
When someone suggests your family member is involved in something suspicious, your first reaction is to protect them, clarify the situation, and resolve any issues. Scammers exploit this protective instinct.
Leverages Healthcare Complexity
Health insurance is confusing. Billing errors happen. Policies overlap. Identity theft in healthcare is a real problem. The scam's plausibility makes people lower their guard.
Uses Urgency to Bypass Critical Thinking
By claiming the issue needs immediate attention, scammers prevent you from pausing, researching, or consulting with others who might recognize the scam.
Appears Non-Threatening
Unlike aggressive phishing scams, this message seems polite, apologetic, and reasonable. The sender isn't asking for money (initially)—just "help" resolving a confusing situation.
Real-World Examples
Case Study: The Texas Health Insurance Scam
A woman in Dallas received a Facebook message from someone claiming her husband was fraudulently using their Blue Cross Blue Shield insurance. The sender provided a policy number and asked her to verify her husband's Social Security number and date of birth.
Fortunately, the woman became suspicious when the sender insisted she provide information immediately rather than contacting her insurance company directly. She blocked the sender and reported the profile to Facebook.
When she contacted her actual insurance company, they confirmed:
- Her husband's information had NOT been used fraudulently
- The "policy number" provided by the scammer was fake
- This was a known scam targeting Facebook users
Case Study: The Fake Documents
A man in Ohio received a similar message accompanied by what appeared to be an official insurance statement showing charges under his wife's name. The document looked professional, with logos, formatting, and policy details.
Believing it was legitimate, he provided his wife's date of birth and their insurance policy number to "help resolve" the issue. Days later, fraudulent credit applications appeared in his wife's name.
The "insurance statement" was completely fabricated—a convincing forgery designed to add legitimacy to the scam.
Case Study: The Follow-Up Call
After a woman responded to one of these Facebook messages, she received a phone call from someone claiming to be from her insurance company's fraud department. The caller had details from her Facebook conversation and asked her to verify her Social Security number, address, and policy information over the phone.
She complied, believing she was protecting herself from fraud. In reality, she had given scammers everything they needed to steal her identity.
Red Flags: How to Recognize This Scam
🚩 Unsolicited Facebook messages from strangers – Legitimate insurance issues are communicated through your insurance company, not random Facebook users.
🚩 Claims a family member is using someone else's insurance – This scenario is extremely rare and would be handled by insurance companies, not individuals tracking you down on social media.
🚩 Requests for personal information – No legitimate person would need you to verify Social Security numbers, policy numbers, or personal details via Facebook.
🚩 Urgency and pressure – "I need to resolve this ASAP" is a classic scam tactic designed to prevent you from thinking clearly.
🚩 Sharing their personal information freely – Scammers provide fake policy numbers and details to make the story seem legitimate and encourage you to reciprocate.
🚩 No official communication from your insurance company – If there were a real issue, your insurance company would contact you directly through official channels (mail, email, phone).
🚩 Poorly written messages or unusual phrasing – Many scammers operate from overseas and use translation tools, resulting in awkward grammar or phrasing.
🚩 Fake or suspicious Facebook profiles – Check the sender's profile. Newly created accounts, few friends, stock photos, or no personal history are red flags.
🚩 Requests to move the conversation off Facebook – Scammers often ask you to text, call, or email them to avoid Facebook's fraud detection systems.
What to Do If You Receive This Message
Do NOT Respond
The best response is no response. Do not engage with the sender, even to tell them you think it's a scam. Responding confirms your account is active and may invite more scam attempts.
Do NOT Provide Any Information
Never share:
- Full names
- Dates of birth
- Social Security numbers
- Insurance policy numbers
- Addresses
- Phone numbers
Even "harmless" details can be used for identity theft when combined with other stolen data.
Verify Independently
If you're concerned there might be a real issue:
✅ Contact your insurance company directly – Use the phone number on your insurance card or official website (not any contact info provided by the Facebook sender).
✅ Ask if there have been any fraudulent claims or issues – Your insurance company will tell you if your policy has been compromised.
✅ Do not mention the Facebook message initially – Just ask generally if there are any issues with your account. This prevents you from accidentally confirming information the scammer might be fishing for.
Report and Block
✅ Block the sender immediately – Prevent further contact and remove them from your Facebook experience.
✅ Report the profile to Facebook – Go to their profile, click the three dots, and select "Report Profile." Choose "Scam or Fraud."
✅ Report the message – You can also report individual messages as scams.
✅ Warn others – Post on your timeline (without tagging or naming the scammer) to alert friends and family about this scam.
Secure Your Facebook Account
✅ Review your privacy settings – Limit who can send you messages and see your personal information.
✅ Enable two-factor authentication – Protect your account from being hacked.
✅ Check your friends list – Remove any unfamiliar or suspicious accounts.
✅ Review tagged photos and posts – Scammers often gather information from your public posts, photos, and tags.
What to Do If You've Already Responded
If you've already engaged with the scammer or provided information:
1. Stop All Communication Immediately
Block the sender and do not respond to any further messages, calls, or emails.
2. Contact Your Insurance Company
- Inform them your identity may have been compromised
- Ask them to flag your account for potential fraud
- Request a review of recent claims and activity
- Get a new policy number if necessary
3. Place a Fraud Alert on Your Credit
Contact one of the three major credit bureaus and request a fraud alert:
- Equifax: 1-800-525-6285 | equifax.com
- Experian: 1-888-397-3742 | experian.com
- TransUnion: 1-800-680-7289 | transunion.com
A fraud alert requires lenders to verify your identity before opening new accounts.
4. Monitor Your Credit Reports
Request free credit reports from AnnualCreditReport.com and review them for:
- Unfamiliar accounts or credit inquiries
- Addresses you don't recognize
- Incorrect personal information
5. Consider a Credit Freeze
A credit freeze prevents anyone (including you) from opening new credit accounts until you lift the freeze. This is stronger protection than a fraud alert.
6. Report to the FTC
File an identity theft report at IdentityTheft.gov. This creates an official record and provides a recovery plan.
7. Monitor Your Medical Records
Request a copy of your medical records from your insurance company and healthcare providers. Look for:
- Treatments or prescriptions you didn't receive
- Unfamiliar doctors or facilities
- Incorrect medical history
8. File a Police Report
Contact your local police department and file a report. Bring:
- Copies of the Facebook messages
- Any information you provided to the scammer
- Your identity theft report from the FTC
9. Change Your Passwords
Update passwords for:
- Email accounts
- Insurance company portals
- Financial accounts
- Any other accounts with personal information
Use strong, unique passwords and enable two-factor authentication everywhere possible.
How to Protect Yourself Going Forward
Strengthen Facebook Privacy Settings
✅ Limit who can send you messages – Go to Settings > Privacy > How People Find and Contact You > Message Requests. Set to "Friends of Friends" or "Friends Only."
✅ Review who can see your posts – Limit your posts to "Friends Only" rather than "Public."
✅ Hide your friends list – Go to your profile > Friends > Edit Privacy (pencil icon) > Set to "Only Me."
✅ Limit personal information visibility – Review what information is visible on your profile (birthday, location, family members, employer). Hide anything you don't want strangers to see.
✅ Turn off facial recognition (if available) – Prevents scammers from using your photos in fake profiles.
Adopt Healthy Skepticism
✅ Assume unsolicited messages are scams until proven otherwise – Especially from strangers making unusual claims.
✅ Never provide personal information via social media – Legitimate organizations use official, secure channels.
✅ Verify independently before responding – Always contact the relevant company directly using official contact information.
✅ Trust your instincts – If something feels off, it probably is.
Educate Family Members
✅ Share this information – Many people, especially older adults, are vulnerable to social engineering scams.
✅ Establish family protocols – Agree that if someone receives a strange message about a family member, they'll check with the family member directly before responding.
✅ Practice "pause before you post" – Remind family members that everything they share publicly can be used by scammers.
Why Health Insurance Identity Theft Is Particularly Dangerous
Unlike credit card fraud (where you're typically not liable for fraudulent charges), health insurance fraud can have serious consequences:
-
Medical identity theft affects your medical records – Fraudulent treatments, diagnoses, or prescriptions can become part of your permanent medical history, potentially affecting future care and insurance coverage.
-
It can be harder to detect – You may not notice fraudulent medical claims until you receive an unexpected bill or are denied coverage.
-
Resolving it is more complex – Correcting medical records and insurance claims can take months or years.
-
It affects your insurance premiums – Fraudulent claims can increase your rates or lead to coverage denial.
This is why protecting your health insurance information is just as important as protecting your financial data.
Conclusion
The Facebook insurance identity theft scam is a sophisticated social engineering attack that exploits trust, confusion, and family protection instincts. By making a bizarre, urgent claim about your family member using someone else's insurance, scammers trick you into revealing personal information that leads to identity theft.
The best protection is simple: Never respond to unsolicited messages from strangers making unusual claims about you or your family members. Always verify independently through official channels.
If you receive one of these messages, block the sender, report the profile to Facebook, and contact your insurance company directly if you have any concerns. Protecting your identity starts with recognizing when someone is trying to steal it.
Stranger claiming your family is using their insurance? Don't respond. Block them, report the profile, and contact your insurance company directly if you're concerned. Legitimate insurance issues never come through Facebook messages.
Social Media Post
🚨 New Facebook Scam Alert! 🚨
Scammers send messages claiming YOUR SPOUSE is using THEIR health insurance. They ask you to "verify" information to resolve it.
🎯 Goal: Steal your identity through social engineering
Red flags: ✖️ Unsolicited message from stranger ✖️ Claims family member is using their insurance ✖️ Requests personal info (SSN, DOB, policy #) ✖️ Creates urgency ("need to resolve ASAP")
❌ DO NOT respond! ✅ Block & report to Facebook ✅ Contact your insurance company directly if concerned ✅ NEVER share personal info via social media
#FacebookScam #IdentityTheft #SocialEngineering #HealthInsuranceScam #ScamAlert #PrivacyProtection #OnlineSafety #FraudAlert #StaySafe
Courtney Delaney
Founder, ScamSecurityCheck
Courtney Delaney is the founder of ScamSecurityCheck, dedicated to helping people identify and avoid online scams through AI-powered tools and education.
Learn moreSupport Our Mission
ScamSecurityCheck is built to protect people from online fraud. Your contribution helps us keep building free security tools and resources.
