"Your new test results are available."

That is the whole message. It looks just like the real one..

Most scam texts fail on timing. They reference a package you did not order. a bank you do not use, or a refund for something you never bought. You read it, nothing fits, you delete it.

This one fits. You had bloodwork last week. You are waiting to hear. The message arrives right on schedule.

Epic, the company that makes MyChart, warned about this on August 24. It is still ongoing.

Four versions, one destination

New test results are ready.

Your appointment has been changed.

You have an unpaid balance.

You have a new secure message.

All four end at the same fake login page.

The Medicare kit version

This one goes after older readers, so it gets its own paragraph.

You have been selected for a free 2026 Medicare Health Kit. Fill out a short survey. The kit is free, you just pay shipping. Then a checkout page asks for your card.

There is no MyChart Medicare kit. It does not exist. MyChart does not give away products.

Some versions push a file to download instead of a form. That version installs something.

The tell

Do not squint at the sender address. Do not hover over the link. Do not try to work out whether the message is real.

You will not win that. They are good at it now.

Close the message.

Open the MyChart app yourself, or type the address in yourself. MaineHealth's real portal is mychart.mainehealth.org. If there is a real message waiting, it is in there. If there is not, there was not one.

That works on every version of this scam, including the ones nobody has invented yet.

One more thing worth knowing. MaineHealth now requires two-step verification on MyChart, and you cannot turn it off. Log in the real way and you get a code. A page that lets you straight in without requesting a second code is fake.

What the fake page is after

Your portal login. That is your medical record, your date of birth, your address, your insurance.

Some of them ask for the card too, on the billing screen.

Your medical record is worth more to these people than your card is. A card gets canceled in ten minutes. Your date of birth does not.

If you already entered it

Change your MyChart password now.

Then call your practice on the number you already have, not one from the message.

Then watch the account for a few days.

It is not a disaster. Same day matters, though. Here is what to do if you already fell for one.

The pattern

This one works because it borrows your doctor.

Nobody hacked MaineHealth. Nobody broke anything. Somebody wrote a message that sounds like the ones you already trust, sent it to a few hundred thousand people, and waited for the handful who had bloodwork last week.

It is the same scam as the account problem email that has been going around for years, dressed up differently. If you want the general version of the check, it is the three second test.

If one shows up, and you are not sure, forward it to us before you click it. That is free, and it is faster than fixing what happens after.