Fake BetterHelp / Talkspace / Teladoc / Cerebral telehealth therapy subscription payment failed, membership cancelled, or unauthorized account access phishing — fraudulent email impersonating BetterHelp, Talkspace, Teladoc, or Cerebral claiming the recipient's online therapy or telehealth subscription payment has failed, their therapy access has been suspended, or unauthorized access was detected on their mental health account — directing them to update billing, renew the subscription, or verify identity through a credential-harvesting portal; BetterHelp 4M+ active subscribers ($95-425/month); Talkspace 2M+ users; Teladoc Health 60M+ members; Cerebral 150,000+ patients; mental health accounts contain sensitive protected health information (PHI) including diagnosis records, therapy notes, and prescription history; HIPAA-regulated PHI commands a premium on dark web markets; therapy is appointment-based and time-sensitive, creating urgency to restore access before the next scheduled session

Phishing emails impersonating BetterHelp, Talkspace, Teladoc, Cerebral, or other telehealth and online therapy platforms claiming the recipient's therapy subscription payment has failed, their membership has been cancelled, their therapy sessions are suspended, or unauthorized access was detected on their mental health account — directing them to update billing, renew the subscription, or verify identity through a credential-harvesting portal. Key facts: (1) Telehealth and online therapy platforms hold some of the most sensitive personal data regulated under HIPAA: BetterHelp's 4M+ active subscribers pay $95-425/month and their accounts contain complete therapy session histories, therapist notes, mental health diagnoses, medication information, and intake questionnaires covering depression, anxiety, trauma, and relationship issues; Teladoc Health serves 60M+ members across mental health, primary care, and specialist consultations; Talkspace serves 2M+ users; a single compromised mental health account gives attackers protected health information (PHI) that sells for $250-500 on dark web markets versus $5-30 for typical financial records; (2) The therapy subscription billing failure lure is psychologically targeted: therapy is appointment-based and time-sensitive — a patient who believes their subscription has lapsed fears missing their next scheduled session with their therapist, creating high urgency to restore access immediately; for patients managing depression, anxiety, or other conditions, interrupting therapy feels medically consequential, removing critical seconds of phishing skepticism; (3) The BetterHelp FTC fine ($7.8M, 2023) for sharing user data without consent established that telehealth companies do collect and share sensitive mental health data in ways users don't expect — this real regulatory history makes users more susceptible to 'account security' and 'data protection' lures from fake telehealth security emails; (4) Telehealth account credentials give attackers access to personal health records, prescription history, insurance information, and payment methods. Warning signs: sender domain not betterhelp.com, talkspace.com, teladoc.com, or cerebral.com; telehealth platforms never ask for login credentials via email; any billing issue should be resolved only through the official app or direct website navigation.