Same Number, Different Fraud: Phishing Scam Spoofs the OIG Fraud Hotline

Posted by Frank Strafford on May 1, 2017 in Industry News,
Scam on red dice


Thousands Hit by OIG Phone Scam

All over the country, people have been getting calls from the U.S. Health and Human Services Office of the Inspector General (OIG), but they’re actually scam calls that just look like they’re from the OIG. Although the scam has reached thousands, the OIG is working to control the damage by raising awareness and offering tips for keeping personal information safe.

The OIG spoofing scam

With this scam, people receive a call that appears to be from an OIG staff person who is calling to notify them that they have won a grant of $9,000 from the U.S. government. To get the grant, they must wire $250 or give the authorization code for a $250 iTunes gift card. The caller also asks for personal information, such as the person’s name, address, Social Security number and bank information.

First, the bad news: thousands of these calls were made to people across the U.S., according to Thomas O’Donnell, Assistant Inspector General for Investigations at HHS. But there’s good news, too. Only a small number of people believed the scammers and sent money or divulged personal information. Also, an OIG check of its own data to see if it had been hacked by the scammers, has confirmed that it has not been compromised.

The other good news? Two people are under investigation and a criminal case is in process.

The OIG does not make unsolicited calls to the public. In addition, federal grants are not usually given to individual citizens – and definitely are never sold. However, the calls looked legitimate because the scammers managed to spoof the OIG hotline phone number for reporting fraud —1-800-HHS-TIPS (1-800-447-8477).

What is spoofing?

Spoofing is when someone makes a phone call look to you like it’s coming from a different phone number on caller ID. With the OIG scam, the scammers made their calls look like they were coming from the OIG fraud hotline.

When people are asked for sensitive information, they rightfully question whether the person asking the question has a right to the information. With spoofing, scammers can make it look like the request is coming from a trusted, legitimate source. To make matters worse, when the call appears to be from the federal government, people can get nervous and rush to do whatever is asked.

Tips for Scam Resistance

Spoofing scams like this one and the one that affected the Internal Revenue Service have become more and more common. As a result, the public is becoming more educated about how to identify a fake call and avoid being scammed. It can still be difficult to recognize a scam because callers are good actors and can be very convincing. Follow these guidelines to avoid being drawn into a scam:

  • Remember that the federal government does not make unsolicited calls.
  • Be aware that the federal government will not call to offer cash awards or collect any money from you.
  • Do not give your personal information, especially your date of birth, Social Security number, mother’s maiden name, bank information or credit card number, to any caller you don’t know.
  • Don’t be fooled if the caller has some of your personal information already – that doesn’t mean the caller should have that information or that the call is legitimate. If you want to confirm, you can hang up, find the correct phone number for that office, and call them yourself to ask if the call was legitimate.

Alert Your Partners And Those You Serve

When you work to increase public awareness about this scam and others, you not only serve the greater good but also build your reputation as a trusted advisor. You can spread the word in a number of ways:

  • Work with your organization’s human resources to notify employees through the organization’s communication channels, like the intranet or email.
  • Talk with the communications department about how to get the word out to customers, members, patients and families, so they can build their scam resistance.
  • Reach out to your business partners and contractors to notify them about the scam.

The OIG spoofing scam was not the first scam and it won’t be the last. Those of us who work to keep information secure and prevent unlawful practices in the health industry are trusted advisors to the public. By raising awareness about scams and sharing tips for how to avoid getting scammed, we are in a good position to help others do their part to keep private information out of the wrong hands and help the HHS save their resources for things like updating the OIG exclusion list.

About Frank Strafford

About Frank Strafford

Related Articles

Improved LEIE Data Access Noted as ...

August 23, 2021

As the keynote speaker at the Health Care Compliance Association (HCCA) Compliance Institute on April 21, 2021 the HHS OIG Deputy Inspector Christi Grimm reviewed the OIG’s top 10 compliance priorit...

How Screening Differs by Healthcare Industry ...

January 3, 2023

DOWNLOAD PDF Streamline Verify has worked many organizations in the healthcare industry during our many years in business. In addition to health plans, hospitals, universities and physician gr...

Apache’s Log4j Vulnerability – A ...

March 25, 2022

On February 8,  the Senate Homeland Security and Government Affairs Committee held a full hearing to address the Log4j software vulnerability made public in November of 2021 and to better underst...

Understanding OIG Exclusions

OIG Exclusions Screening Process

Exclusion FAQS

Quick OIG Exclusion Basics

Employing Excluded Individuals

Consequences to Employing an Excluded Individual

OIG Compliance Law

Laws and Publications on OIG Compliance

More Compliance Resources

Our Culture

We build the best, so you can perform at your best.

Trusted for Good Reason

  • ✓ Guaranteed accurate
  • ✓ Certified Secure
  • ✓ Audit Proof
  • ✓ Feature-rich reporting
  • ✓ Round the clock real-time-data
  • ✓ Processing fully automated

Security First

  • ✓ Cloud hosted
  • ✓ Encrypted data
  • ✓ Real-time backups

Trusted for Accuracy

  • ✓ Physical security
  • ✓ Restricted access
  • ✓ Single sign-on
  • ✓ Password security
  • ✓ Certified secure
  • ✓ Cross checking




Average workload reduction by implementing the Streamline Verify program



Establishments trust Streamline Verify nationwide



Serving the healthcare industry’s unique compliance needs since 2011



Setting standards with hourly synchronization to primary source data