Fake health insurance SMS scam: spot phishing before you pay
Last updated:
SMS phishing campaigns claiming that “your new health insurance card is ready” or that your card “has expired” are among the most widespread cyber scams in France and the EU. Scammers push victims to pay urgent delivery fees within 48 hours.
Key facts about health insurance cards
Official health insurance cards (such as the French Carte Vitale) do not expire. Card updates are always free and carried out at pharmacies or official agency terminals. There is never a fee for card renewals.
What the fake SMS looks like
- Urgent message: “Health Insurance: your new card is ready. Please confirm your delivery address before [Date] to avoid service suspension”.
- Spoofed sender: standard mobile phone numbers or deceptive sender tags.
- Deceptive link: shortened URLs or fake domains (e.g. ameli-renouvellement-vital.info, dossier-assure-ameli.com).
- Small requested fee: usually between €1.90 and €3.90 for shipping.
Official domains vs fake healthcare portals
| Service | Official URL | Examples of deceptive fake domains |
|---|---|---|
| Health Insurance (Ameli) | ameli.fr | ameli-portail-vital.com, espace-ameli-fr.info |
| Digital Health Space | monespacesante.fr | monespace-sante-info.top, activation-sante.net |
| Complementary Insurance | Verified insurer websites | renouvellement-mutuelle-dossier.org |
Warning signs on cloned websites
- Sequential forms requesting your full personal address, social security number, and payment card details.
- Valid HTTPS padlock: SSL certificates are free and do not prove governmental legitimacy.
- Copied logos and official healthcare color schemes.
- Requests for SMS one-time verification codes (3D-Secure) that actually authorize fraudulent online charges.
What to do if you receive this message
- Do not click the link and delete the text message.
- Access your personal space by typing ameli.fr directly into your browser address bar.
- In France, forward suspicious SMS messages to 33700.
- If you paid: contact your bank immediately to freeze your card and dispute unauthorized charges.
How Resku protects you
Resku inspects domain registration age, server reputation, and malicious form behavior in ~200 ms. The extension displays an explicit warning before you can type sensitive credentials.
Sources and reporting
- Ameli.fr : official guidance on fraudulent communications.
- Cybermalveillance.gouv.fr : healthcare smishing guides.
- 33700 : fraudulent message reporting in France.
- Pharos (internet-signalement.gouv.fr) : online cybercrime reporting.
Frequently asked questions
Do health insurance agencies ask for card renewal via SMS?
No. Official health insurance cards such as France's Carte Vitale or European health insurance cards do not expire and never require paying shipping fees via SMS links.
What is the only official portal for French health insurance?
The only legitimate portal is ameli.fr (and the official Compte ameli mobile application). Any other domain (.com, .info, .net, or containing extra hyphens) is a fraudulent clone.
Why do scammers request small shipping fees of 2.90 euros?
A small fee is used as a psychological hook to lower your guard. Once your credit card details are submitted, scammers charge significantly larger sums or enroll your card in unauthorized recurring subscriptions.
What should I do if I already entered my banking details?
Contact your bank immediately to freeze your card and dispute unauthorized charges. Change your login credentials on the official ameli.fr website and report the incident to authorities.
Fake health insurance portals copy official branding down to the pixel. Resku checks domain legitimacy and traps in real time before you enter personal details.
Join the waitlist