ALERT: Phishing Attempt Targeting Medicaid Durable Medical Equipment/Prosthetics & Orthotics Suppliers Providers
NC DHHS has received notification of an email phishing attempt targeted at Durable Medical Equipment/Prosthetics & Orthotics Suppliers (DME/POS) providers.
The email appears to be from NC Medicaid, complete with the NC DHHS name and logo, and offers a link requiring the provider to verify information to avoid revocation of their license. Providers should NOT click on the link or follow the instructions of this phishing email.
For DME/POS providers, NC Medicaid requires certification, not licensure. Even when licensure is required, NC Medicaid does not have the authority to “revoke” a license issued by an external licensing board.
When a credential on the NCTracks provider enrollment record requires attention, NCTracks will send a notification to the provider through the NCTracks Provider Message Inbox detailing the actions needed to maintain participation. The Office Administrator of record may receive an email notifying of the message added to the Inbox, but neither NC Medicaid nor NCTracks will send an email offering a direct link to update a provider record.
If providers have been targeted by this phishing attempt, we recommend they contact their own Privacy/Security Officer and follow their agency’s protocols for such an attempt.
Questions? Contact:
- NCTracks Call Center: 800-688-6696
- Provider Ombudsman: 866-304-7062