Patients who use the electronic medical record MyChart should be aware of scam emails that have been circulating around the country.

Scammers are sending emails that use the MyChart name and logo. MyChart itself has not been hacked, and your medical records are not involved — but the emails are convincing, and clicking through can cost you money or infect your computer.

Warning signs

• An offer of a free “Medicare Kit,” a prize, or a pending delivery. MyChart does not give away or ship products.
• Any request for a credit card, including a small “shipping fee” for something advertised as free.
• Link text that reads mychart.org but points somewhere else when you hover over it. Look closely at the address for extra words or hyphens, such as my-chart or mychart-epic.
• A sign-in page that asks only for your password and never prompts for your usual second-factor verification.
• A page telling you to press Windows + R and paste a “verification code” to prove you are not a robot. This installs malware. Never do this — no legitimate website will ever ask you to.
• A downloaded file, for example Full_Analysis_Report.exe, with instructions to click “More info” and “Run anyway” past a Windows security warning.
• Countdown timers, “only 3 left in stock,” or other pressure to act immediately.

The screenshot below shows what the malware step may look like. If any web page ever shows you this, close it immediately.

What to do

• Do not click. Reach MyChart by typing the address yourself or using the MyChart app.
• Report the message as phishing in your email program and delete it.
• If you already entered a password, change it now — and anywhere else you used the same one.
• If you already entered card details, call your card issuer.
• If you downloaded or ran a file, stop using the computer for anything sensitive and get it checked.

To learn more from Epic about protecting yourself from MyChart email scams, visit mychart.org/staysafe.