An email calling itself “FHI Health Check” is not a reason to share your health details, password, Medicare number, bank details, or payment information. Treat an unexpected message as suspicious until you confirm it through contact details you find yourself, and do not use a link, phone number, or attachment in the email to do that.
FHI 360 is a real organization with a published privacy notice. That notice covers its websites, programs, and communications, but it does not show an “FHI Health Check” sales offer, checkout, price, rebilling plan, or refund process. If the message asks you to buy something, ask the sender for the seller name, full terms, and support contact before you pay.
Is the FHI Health Check email a scam?
The name alone does not settle that question. What matters is what the message asks you to do.
The U.S. Department of Health and Human Services Office of Inspector General warns that unsolicited health-related requests for personal, medical, or financial information deserve caution. It also warns that personal details collected through health-related schemes can be used for fraudulent billing and medical identity theft. Read the agency’s HHS fraud alert before you share any information.
Pause if the email asks you to:
- click a link, scan a QR code, or open an attachment;
- confirm a password, account number, Medicare number, date of birth, or payment card;
- act right away because an account, benefit, test, or payment will expire;
- pay a fee to receive a check, refund, health service, prize, or benefit; or
Use a browser to find the organization’s real website or a statement from an account you already use. Then contact it through those details. That is a small step that keeps you in control.
What is FHI 360, and what is actually being offered?
FHI 360’s privacy notice says the organization collects information when people use its websites, communicate by email or phone, join programs, apply for work, or take part in certain clinical-trial or health-related programs. It also says it uses administrative, organizational, technical, and physical safeguards to protect personal information.
That background is useful, but it is not a reason to trust an unexpected email. If an email names FHI 360, compare the sender address with the organization’s public contact information. Do not assume a familiar display name means the address behind it is genuine.
If the email offers a test, check, payment, refund, job, benefit, or product, ask for the exact seller or program name before you respond. Ask for the full price, any recurring charge, cancellation method, refund deadline, and the name that will appear on your statement. Do this before entering card details.
Can I get phished just by opening an email?
If you opened the email and did not click, download, reply, or enter information, close it and do not engage further. The actions health organizations flag as dangerous are clicking links, opening attachments, replying, and giving away personal or financial details.
UnitedHealthcare’s phishing guidance explains that phishing messages may use an email, website, or text to trick you into giving up information. It says a link may lead to malware or viruses. The NHS also advises people not to reply, click links, or open attachments in a suspicious message and to confirm a request through trusted contact details.
Opening an unsolicited email can also signal to a spammer that an address is active, according to the CFTC’s fraud recovery guidance. That is another reason not to reply or interact with the message.
How do I spot a suspicious health email?
| What you see | What to do |
|---|---|
| A sender address that slightly changes the organization’s name | Do not reply. Find the organization’s contact details yourself and ask whether it sent the message. |
| An urgent threat, unexpected refund, prize, or health-service offer | Pause. The NHS and UnitedHealthcare both identify urgency and unusual requests as warning signs. |
| A link or QR code asking you to sign in or give details | Do not use it. Open your usual account site yourself instead. |
| An attachment you were not expecting | Leave it unopened. Suspicious attachments can contain harmful software. |
| A request for payment or sensitive details | Do not provide them through the email. Confirm the request using trusted contact details. |
For another practical checklist on messages that use a health claim to get your attention, see Neuro Recall Scam Check.
I received a random check in the mail. Is that a scam?
A check or overpayment becomes a serious warning sign when someone asks you to send part of the money back by wire, gift card, cryptocurrency, or another payment method. The Georgia Consumer Protection Division lists that pattern as a common fraud red flag. Do not send money back using instructions that arrived with the check. Contact your bank using its normal customer-service number before taking action.
The same principle applies to an email that promises a check, grant, refund, or payment in exchange for a fee or personal details. HHS warns that health-related offers can be used to collect Medicare and other sensitive information.
What should I do if I replied, clicked, or already paid?
Start with the action that matches what happened:
- You only opened it: Close it. Do not reply, click, download, or forward it to friends.
- You clicked a link or downloaded a file: Change the password for the affected health-plan account if you entered it. Select Health gives that same direction after a suspicious link or attachment.
- You gave card or bank information: Contact your card issuer or payment provider right away and explain the charge or information you shared. Keep the email, receipt, and statement entry for your report.
- You paid for goods or a service you did not receive: Allure, citing BBB guidance, notes that credit-card users may dispute certain charges for items or services not received, damaged, or defective under the Fair Credit Billing Act.
- You gave health, identity, or Medicare information: Report the contact promptly and watch your account records for activity you do not recognize.
File a report at ReportFraud.ftc.gov. The FTC says reports are shared with law-enforcement partners and help identify patterns, though it does not resolve each individual report. You can also report a suspicious message to the organization it claims to represent using contact information from that organization’s real website.
If the message used a health product or celebrity claim to move you toward a payment page, the steps in Mirella BerbaDrops scam check can help you slow down and document the offer before any further charge goes through.
Before you reply or pay
- Check the full sender address, not just the name shown in your inbox.
- Do not use the email’s link, attachment, QR code, phone number, or reply button to confirm it.
- Get the seller or program name, full price, recurring-billing terms, cancellation steps, and refund deadline in writing.
- Do not pay a fee to receive an unexpected check, refund, grant, or benefit.
- If you already paid or shared information, contact your payment provider and submit an FTC report today.
By NHINWatch.com Investigations Desk