MyChart phishing scam warning

UAB Medicine is aware of an emerging cyberattack focused on the Epic MyChart patient portal using email and text messages.

How the scam works

• False promises: Scammers send messages offering a free “MyChart Medicare kit” or “senior health package”.
• The trap: The messages include links to fake websites designed to look like the real portal.
• The goal: Hackers try to trick you into typing your password, personal data, or verification codes.

How to stay safer

• Do not click links: Avoid clicking links in unexpected emails or text messages about rewards or health kits.
• Check the web address: Look at the web address in your browser to ensure that it matches your official healthcare provider’s actual MyChart address.
• Use the official app: Access MyChart through a trusted bookmark or the official mobile app.
• Never share passwords or codes: Staff members from Epic or your hospital will never ask for your password or verification codes by phone, text, or email.
• Learn more about protecting yourself from MyChart scams and fraud.

Note: This alert is being shared for informational purposes only. This phishing attempt is not connected to any breach or compromise of our systems. Our MyChart platform and the patient information it contains remain secure, and there is no indication that any data have been accessed or affected. We are sharing this information to help you recognize and avoid fraudulent attempts to impersonate us. If you have questions or believe that you may have responded to a suspicious message, please call our MyChart team at 844-822-4748.