Skip to main content
ThreatPhishing & impersonation

Fake health insurance enrollment / PII harvest scam — $0 premium ACA/Obamacare plan + government subsidy + you qualify + provide SSN/Medicare ID to enroll + urgent deadline + identity theft setup

fake-health-insurance-plan-pii-harvest-scam

What this tier means

High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.

How Gorganizer detects this

Fake health insurance enrollment and PII harvest scam — cold emails impersonating ACA marketplace enrollment, Obamacare subsidy processing, or Medicare Advantage plan switching, offering "$0 premium" plans or "government subsidies" and directing the victim to provide their Social Security Number, date of birth, Medicare ID number, and household income — all the data needed for full identity theft. In the most damaging variant, scammers enroll victims in real ACA plans without their knowledge (using harvested SSNs) and pocket the premium subsidy while victims lose their legitimate coverage. The Biden-era ACA subsidy expansion (ARPA) created widespread $0-premium plans, which scammers exploit as bait since $0 premium plans are real for many income levels. Key distinctions: real HealthCare.gov enrollment occurs on a secured government portal, never via cold email; Medicare does not call or email requesting Medicare ID numbers; real agents identify themselves with their National Producer Number; government agencies never email with "deadline expires today" urgency. FTC 2024: health insurance fraud was responsible for $1.8B in losses. Report suspicious health insurance solicitations to the Health and Human Services Office of Inspector General (1-800-HHS-TIPS).

False-positive guard

Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.

About the scoring engine

Gorganizer's scoring engine emits over 1,800 signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.

Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.

Ready to clean your inbox?

Gorganizer scans your Gmail with this signal and 1,800+ others, then cleans everything in one click. $4.99 one-time, no subscription.

Get started