Quick Answer
The FTC warned on 29 October 2026 that health-insurance advertising can hide misleading offers or impersonators. Before sharing identity or payment details, leave the ad or unsolicited call and start independently at HealthCare.gov. Warning letters sent to 25 marketers and lead generators do not establish that those recipients committed wrongdoing.
If you already entered information through a suspicious link, use our phishing-link response guide to identify the next step.
For US households comparing coverage, the security question comes before the plan comparison: who is collecting your information, and how did you reach them? A convincing advert is not independent proof of identity.
What changed on 29 October
In a new announcement, Federal Trade Commission staff said they were sending warning letters to 25 companies marketing healthcare plans or generating sales leads. The concerns include misrepresented benefits, costs and incentives, and products described as comprehensive insurance when they are not.
The agency explicitly says the letters do not allege wrongdoing by their recipients. This is a warning and compliance reminder, not a finding that every named business is a scam. Nor does it mean every health-insurance advertisement is fraudulent.
A separate consumer alert published the same day warns that some pitches offer limited benefits or medical discount cards instead of the insurance people expect. Others impersonate government bodies or familiar insurers. The immediate audience is people encountering US open-enrollment advertising, including paid search results, social posts and telephone pitches.
Check the route before giving the details
The FTC’s 28 September guidance explains the identity risk: look-alike government addresses, official-looking logos and paid search placements can steer consumers to the wrong destination. That earlier advice is background to this week’s warning, not a newly disclosed breach.
Treat website identity and product suitability as two separate checks. A genuine seller may offer a product that does not meet your needs; an impersonator may copy the appearance of a genuine seller. Checking one does not settle the other.
- Close the advertising link or end the unsolicited call. Do not use a callback number supplied in the same pitch as your only verification.
- Type HealthCare.gov directly into your browser’s address bar. The FTC also gives the Marketplace number as 1-800-318-2596. This is an official assistance route, not an Impulsec commercial referral.
- Check who operates the destination before submitting a form. A padlock or encrypted connection alone does not establish that the organisation is genuine.
- Ask what the offer actually is and obtain its coverage and cost information in writing. Do not let the urgency of an advert replace verification.
If you already responded
Match your response to what you shared. The FTC’s standing scam-recovery guidance recommends contacting your bank or payment provider promptly if you paid a scammer and asking whether the payment can be reversed. Recovery is not guaranteed.
If you disclosed an account password, change it and any reused copy, and enable two-factor authentication. If you disclosed your Social Security number, follow the situation-specific advice at IdentityTheft.gov. Keep the advert, website address and messages; report suspected deception at ReportFraud.ftc.gov. These are US reporting resources.
What this warning does and does not tell you
The new letters do not identify how many consumers lost information through these particular adverts or establish that your own account was compromised. You do not need to assume a breach merely because you saw an ad. The useful response is to verify the destination before sharing information and act on any exposure that actually occurred.
For a wider look at caller-controlled verification, read our FTC phone-impersonation warning. For this week’s alert, keep one practical rule: choose your own official starting point before handing over identity details.
Sources and image credits
FTC consumer alert, 29 October 2026; FTC warning-letter announcement, 29 October 2026; FTC open-enrollment scam guidance, 28 September 2026; FTC scam-response guidance.
Related Articles
Share this article
Stuart Kerr Spindlow is Impulsec’s Publisher, Chief Editor and Lead Reviewer. He writes and maintains coverage of consumer cybersecurity and digital-safety software, with a focus on practical suitability, limitations and the evidence behind product claims. Read Stuart’s full profile.