Turning 65? Month-by-month plan to protect yourself

 

You have not turned 65 yet. But somewhere, your birthday may already be flagged in a database. That milestone is tied to Medicare eligibility, Social Security decisions and major financial choices. It can also put your name in front of insurance marketers, Medicare agents, lead generators and scammers around the same time.

Here is the part many people miss: turning 65 can become a targeting event. Your age, address, phone number, relatives’ names and other personal details may already be sitting on people-search sites and data broker lists. Once you get close to Medicare age, those details can become more valuable. That is why it helps to prepare before the calls, texts, letters and emails start piling up.

 

 

 

Why turning 65 can put you on marketing lists

Data brokers collect and package personal information. They build basic profiles, and they can also create age-based lists tied to major life events. Turning 65 is a valuable trigger because Medicare enrollment, supplemental insurance decisions and Social Security timing all happen in a narrow window.

That narrow window creates demand from insurers, agents, lead generators and criminals looking for people who may be making big decisions. Legal marketing drives part of this activity. Aggressive sales tactics drive another part. Fraud drives the most dangerous part. The same information that helps send Medicare mailers to your mailbox can also help scammers sound more convincing when they call, text or email.

 

How data brokers turn your birthday into a business

Data brokers don’t just collect static information. They build age-triggered profiles, records that are specifically flagged and resold when a person approaches a major life milestone. Turning 65 is one of the most commercially valuable triggers in their entire database.

Why? Because Medicare enrollment, supplemental insurance decisions, and Social Security timing all happen in a narrow window. That creates enormous demand, from legitimate insurers, from aggressive lead generators, and from outright criminals, for a list of people who are about to become eligible. These lists are legal to compile. They’re legal to sell. And the same data that sends a flood of Medicare mailers to your mailbox is the same data that lands your name and phone number on a scammer’s calling sheet.

In fact, in 2024, the Centers for Medicare and Medicaid Services (CMS) took action on more than 73,000 unauthorized Medicare plan switches, cases where agents or bad actors enrolled people in plans they never agreed to, often without their knowledge. CMS has directly linked this surge of unauthorized activity to the aggressive use of lead generation databases and third-party data brokers feeding agent networks with pre-qualified prospect lists. That’s more than 73,000 people who woke up to find their Medicare coverage had been changed, and they never made a single call. And that’s before counting the impersonators.

The Social Security Administration reports that SSA impersonation scams are among the most reported fraud types in the United States, with losses in the hundreds of millions each year. The FTC logged over $76 million in losses from government impersonation scams in 2023 alone, a number that consistently spikes around Medicare enrollment season. Turning 65 doesn’t just open a door for you. It opens one for them, too.

 

The month-by-month countdown and what to do at each milestone

The good news: there’s a window. You don’t have to wait until the scam calls, texts, or emails start arriving. Here’s exactly what to do, and when.

6 months out: Scrub your information before the targeting begins

This is your most important window, and most people miss it entirely. Six months before your 65th birthday, the data broker flags around your profile are already active. Marketing lists are being compiled. Lead generators are packaging your details. The calls haven’t started yet, but the infrastructure is being built.

Action 1: Search your own name right now

Go to Spokeo, Whitepages, or BeenVerified and look up what a stranger sees when they search for you. Your age, address history, relatives’ names, phone numbers, and property records are likely all there. That snapshot is what insurance agents and scammers are working from. If you’re interested in checking your exposure, Incogni provides a free report on where your data is exposed and gives results within an hour.

Action 2: Start removing your data from broker databases

Manually opting out of each data broker is possible, but there are hundreds of them, each with its own process, and they re-list your information regularly. This is where I recommend Incogni. Instead of you spending hours submitting individual opt-out requests, Incogni sends removal requests to 420+ data brokers on your behalf and keeps monitoring them and re-submitting requests when your data reappears. Because it will reappear.

Exclusive Deal for CyberGuy Readers (60% off): Incogni offers a 30-day, money-back guarantee and applies a special CyberGuy discount to all annual plans, for as low as $6.39/month for one person (billed annually) or $13.19/month for your family (up to 5 people) on their annual plan.

I strongly recommend the family plan. Here’s why: the scam that starts with a Google search of your name almost always ends with a call to your elderly parent or a text to your adult child. Protecting yourself without protecting the people around you is half a solution. At $2.64 per person per month, the family plan covers up to five people, and the people most likely to be the final target are often the ones who’d never think to protect themselves.

Get Incogni and remove your info

You can also run a free exposure scan to see where your personal information is appearing online. Results typically arrive by email within an hour.

 

 

Getting ahead of this six months out is the difference between a manageable trickle of calls and being overwhelmed at the worst possible moment.

Action 3: Tell your family what’s coming

Let your spouse, adult children, or close relatives know that your enrollment window is approaching and that scammers know it too. Establish a simple rule now: any unexpected call, text, or email about Medicare, Social Security, or benefits gets verified before any action is taken. No exceptions.

 

3 months out: Lock down your accounts before the volume spikes

By now, the calls have likely started. That’s normal and expected. What matters is what you do before the fraudulent ones arrive.

Action 1: Contact Medicare directly to initiate enrollment and only Medicare directly

You can enroll online at Medicare.gov or by calling 1-800-MEDICARE (1-800-633-4227).

This sounds obvious. But this is exactly the moment when impersonators pose as Medicare representatives offering to “help you enroll.” The real Medicare program will never call you unsolicited, ask for payment over the phone, or pressure you to decide immediately. If anyone does, hang up.

Action 2: Change your security questions at your bank and financial institutions

This is urgent and almost always overlooked.

Data broker profiles routinely include your mother’s maiden name, previous addresses, city of birth, and other details that financial institutions still use as identity verification. A scammer with your broker profile can often answer these questions cold, without ever hacking a single account.

Call your bank, brokerage, and insurance providers. Switch to nonsense answers that only you know (“What was your childhood pet’s name?” “RedTruckSeven”). Store them in a password manager. This one step can prevent account takeovers that your password alone can’t stop.

Action 3: Place a credit freeze with all three bureaus

Equifax, Experian, and TransUnion all allow free credit freezes. A freeze doesn’t affect your score or any existing accounts; it simply prevents new lines of credit from being opened in your name without your direct authorization.

Medicare enrollment season is prime time for identity theft tied to new account fraud. Freeze first. Unfreeze only when you need to.

 

1 month out: Get your Medicare card and protect it like a Social Security number

This is crunch time. Decisions are being made, paperwork is arriving, and the volume of contact, both legitimate and fraudulent, is at its peak.

Action 1: Confirm your Medicare card arrival and treat it like classified information

Your Medicare card arrives by mail and carries your Medicare Beneficiary Identifier (MBI), a unique number that functions, for medical purposes, like a Social Security number. In the wrong hands, it can be used to bill Medicare for services you never received. Do not carry the physical card in your wallet. Take a photo of it, store it securely, and give the number only to verified providers. Medicare fraud through stolen or misused MBI numbers costs the program an estimated $60 billion per year.

Action 2: Verify every agent before sharing any information

If someone contacts you claiming to be a Medicare advisor, insurance broker, or benefits specialist, verify them independently before saying anything. Ask for their National Producer Number (NPN). Every licensed insurance agent in the United States is required to have one. Look it up yourself at nipr.com before continuing the conversation. Agents involved in the 73,000+ unauthorized plan switches often relied on people not knowing this check existed.

Action 3: Confirm your Social Security status directly with the SSA

Log in or create an account at ssa.gov. Confirm your benefit amounts, confirm your contact information on file, and make sure no changes have been made without your knowledge. SSA impersonators frequently call during this window, claiming there’s a problem with your record, creating false urgency to get your Social Security number or bank account information. If you receive one of these calls, hang up. Call SSA directly at 1-800-772-1213. The real SSA will never threaten arrest, demand gift cards, or require immediate payment.

 

The week of: One final sweep before your coverage goes live

Your birthday week is the finish line, but it’s also when the most aggressive targeting happens, because time pressure creates vulnerability.

Action 1: Confirm your plan enrollment directly through Medicare.gov

Log in to your Medicare account and verify exactly what you’re enrolled in. Check that your plan name, coverage type, and effective date are what you chose. If anything looks wrong, an unfamiliar plan name, a plan you don’t recognize, call 1-800-MEDICARE immediately and report it. This is how you catch an unauthorized switch before it affects your coverage.

Action 2: Run one final data broker check

A lot can change in six months. Search your name again on people-search sites and verify what’s still publicly visible. If Incogni has been running in the background, you should see a meaningful reduction in what appears. If new information has surfaced, a recent address, a new phone number, flag it for removal.

Action 3: Set up a call-screening system going forward

The targeting doesn’t stop after your birthday. Medicare open enrollment runs from October 15 through December 7 every year, and scam activity spikes again each fall. Turn on your phone’s built-in spam call filtering, register your number with the National Do Not Call Registry at donotcall.gov, and consider using your carrier’s call protection service (most offer one for free). These won’t stop every call, but they’ll reduce the noise significantly.

 

 

Related Links: 

• Remove your data to protect your retirement from scammers
• Why widows and divorced women are targets for retirement scams
• Scams that aren’t illegal (but should be)

 

 

Kurt’s key takeaways

Your 65th birthday can put your name on lists used by marketers, agents, lead generators and scammers. Medicare scams can become especially dangerous because the timing feels real. You are already expecting mail, calls and decisions, which gives criminals an opening. Start early. Six months out, look for your personal information online and begin removing it. Three months out, lock down your financial accounts and freeze your credit. One month out, protect your Medicare card and verify any agent before sharing information. During your birthday week, check your Medicare enrollment directly and set up call screening for the months ahead. The people targeting you are counting on confusion. A clear month-by-month plan gives you control before someone tries to take it from you.

If companies can profit from knowing when you turn 65, should they also be responsible when that data helps scammers target you? Let us know in the comments below.

FOR MORE OF MY TECH TIPS & SECURITY ALERTS, SUBSCRIBE TO MY FREE CYBERGUY REPORT NEWSLETTER HERE

 

 

We created this article in partnership with Incogni

Copyright 2026 CyberGuy.com.  All rights reserved.  CyberGuy.com articles and content may contain affiliate links that earn a commission when purchases are made.