Tell your patients to be wary of callers offering them prizes or cash for personal information or a down payment. A woman in Jacksonville, Fla., received a call last month from a caller posing as the Department of Health & Human Services and asking for $250 in return for a $9,000 federal grant, an HHS release says. Though the woman became suspicious and never went through with offering up the deposit, she did give the scammer her name, address, and other personal data before hanging up. The incident was not isolated due mainly to the number that showed up on caller ID, tricking thousands — “the OIG hotline phone number for reporting fraud — 1-800-HHS-TIPS (1-800-447-8477).” What happened is called spoofing, “a malicious practice of making a phone number appear on caller ID to be legitimate in order to obtain confidential information,” says the OIG’s Thomas O’Donnell. “Thousands of calls using the spoofed number were made to people across the nation, although only a handful of people have apparently sent money to the perpetrators.” The OCR recommends that providers update patients on their privacy rights under HIPAA, particularly in regard to medical identity theft. The release suggests patients review their social media sites and wearables often for ePHI exposure. People should not be fooled by a caller’s knowledge of their name and other personal information, O’Donnell advises. “Callers may use a variety of tactics to obtain some initial personal information, including by working for otherwise legitimate marketing centers ... the OIG will never initiate contact with the public through the hotline to request or confirm personal information.”