Fake MHS GENESIS patient portal site steals TRICARE login and Social Security number
Scammers create sites mimicking the MHS GENESIS patient portal and send links via email or text to TRICARE beneficiaries. Victims enter their login, Social Security number, or card details — handing scammers access to military health accounts.
Also known as: MHS GENESIS phishing scam, fake TRICARE patient portal, military health portal phishing, TRICARE login credential theft
Already happened to you? Do this in the next few minutes
- 1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
- 2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
- 3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.
What to do right now
- 1 Only access MHS GENESIS through the official .mil URLs: my.mhsgenesis.health.mil or patientportal.mhsgenesis.health.mil — type them directly into your browser
- 2 If you entered your credentials on a site that was not .mil, change your MHS GENESIS password immediately from the real portal
- 3 Contact your TRICARE regional contractor (TriWest or Humana Military) to report compromised account access
- 4 If you provided your Social Security number or credit card, place a fraud alert with the three credit bureaus and monitor your accounts
- 5 Report to the FTC at https://reportfraud.ftc.gov and the FBI's IC3 at https://www.ic3.gov.
Red flags
- ⚠ The site URL does not end in .mil — every legitimate MHS GENESIS portal page ends in mhsgenesis.health.mil or osd.mil
- ⚠ The email or text was unsolicited — TRICARE does not send unexpected links asking you to log in or verify your account
- ⚠ The site promotes a mobile app for MHS GENESIS on iPhone or Android — no such standalone app exists
- ⚠ The page creates urgency: 'account suspended,' 'verify now,' or 'access expires in 24 hours'
- ⚠ The fake portal asks for your Social Security number or credit card number before authenticating you
Sources
- DHA — Beware of MHS GENESIS scam sites (Feb 2026)
- TRICARE Newsroom — Beware of MHS GENESIS scam sites (Feb 2026)
- MOAA — TRICARE Users: This Scam Could Put Your Personal Health Information at Risk (Jul 2026)
- TriWest — Military Treatment Facility Patients: Beware of MHS GENESIS Health Scams (2026)
- JBSA — Beware of MHS GENESIS scam sites (Feb 2026)