Every year, CMS takes enforcement action against Medicare insurance agents and brokers who violate marketing rules — but enforcement is almost entirely complaint-driven. Agents face sanctions, fines, and marketing bans only when violations are actually reported by beneficiaries, their families, or advocates. If no one files, violations go unpunished, and predatory behavior continues.
For elder law attorneys whose clients have been targeted, filing a CMS complaint is a concrete step that creates accountability. And for attorneys building protective practices for their client roster, understanding the complaint process — and documenting violations systematically — is a core part of the work.
When to File a CMS Complaint
Not every unsolicited call or aggressive sales pitch rises to the level of a CMS complaint — but several specific violations are worth reporting. CMS maintains a complaint system that accepts reports from beneficiaries, their authorized representatives, and attorneys.
TPMO Violations (Third Party Marketing Organizations)
Plans that use Third Party Marketing Organizations to reach beneficiaries are responsible for those organizations' conduct. If a TPMO contacted your client during AEP without consent, misrepresented plan benefits, or failed to provide accurate information — that is a reportable violation. Even if the plan claims the TPMO was an independent contractor, CMS holds the plan accountable for marketing activity in its name.
Unauthorized Plan Switching
If your client's Medicare Advantage plan was switched without their knowledge or consent — including situations where an enrollment was completed during an uninvited home visit or cold call — that is a serious violation. CMS has established special enrollment periods (SEPs) for beneficiaries enrolled without consent precisely because this happens frequently enough to require a remedy. The unauthorized switch is also the foundation for a CMS complaint.
Failure to Provide Scope of Appointment
Medicare agents are required to document a beneficiary's consent to a meeting before the meeting occurs — this is the Scope of Appointment requirement under 42 CFR § 422.2274. If an agent shows up at your client's door without having obtained prior consent, that is a direct violation worth documenting and reporting.
Misleading Plan Comparisons
CMS prohibits marketing that disparages competing plans without factual basis, uses government endorsement language, or presents information in a way designed to mislead rather than inform. If an agent told your client that a plan was "recommended by Medicare" or made claims about coverage that proved inaccurate, that is a reportable issue.
Unsolicited Contact During Protected Periods
CMS rules prohibit unsolicited phone calls and uninvited door-to-door contact by Medicare agents and brokers. If your client was called repeatedly during AEP, or visited at home by an agent they did not invite, that contact is a violation — and documentation of it strengthens the complaint significantly.
How to File a Complaint with CMS
CMS accepts complaints through multiple channels. Here is how to use each one.
1-800-Medicare (1-800-633-4227)
The Medicare helpline is staffed 24/7 and can accept complaints about agent or broker conduct. When calling, have the following ready:
- Agent's name and NPN (National Producer Number — every licensed insurance producer has one; ask for it if not volunteered)
- Carrier or plan name the agent represents
- Date of contact (approximate if exact unknown)
- What was said or promised — be specific: "told my client their doctor was in-network when she checked afterward and was not" is more actionable than "made misleading claims"
- Whether the beneficiary has cognitive impairment — this affects the severity assessment
CMS uses complaint data to identify patterns. A single complaint may not result in immediate action, but patterns trigger investigations. Document what you file and when.
Online at Medicare.gov
The CMS complaint portal at medicare.gov/about-us/how-can-i-report-fraud allows written submissions with more detail than a phone call. Written complaints create a documented record with a submission timestamp — useful if the complaint escalates to enforcement. Attach any supporting documentation (written notices sent to the broker, copies of misleading mailers, notes from the beneficiary about what was said).
Written Complaint to the CMS Regional Office
For pattern violations or situations involving serious harm, a formal written complaint to the appropriate CMS regional office carries more weight. The regional office that handles complaints depends on the beneficiary's state. Written complaints should include:
- Beneficiary name and last four digits of their Medicare number (not the full number)
- Agent name and NPN
- Carrier name and contract number
- Factual narrative of the violation
- Citations to the specific CFR provisions violated
- Any prior documentation (do-not-contact notices, Scope of Appointment records, etc.)
- The attorney's contact information as the authorized representative
State-Level Complaints: The Parallel Track
CMS enforcement and state insurance department enforcement operate independently. Filing with CMS does not preclude — and does not replace — a complaint to the state Department of Insurance (DOI). State insurance regulators have authority over licensed agents and can impose sanctions including license suspension and revocation.
Every state has an online complaint portal through its DOI. The complaint process varies by state, but most accept online submission with similar information requirements to the CMS process: agent name and license number, carrier name, description of the conduct, and supporting documentation.
The National Association of Insurance Commissioners (NAIC) maintains a complaint database that allows consumers and attorneys to search for agents with prior complaint history — useful when assessing whether an agent has a pattern of violations or is a first-time offender.
How PlanShield Helps Attorneys Document Violations
Effective complaints require documentation. A complaint that says "my client was called inappropriately" is weaker than one that says "my client was registered in PlanShield's do-not-contact database on March 3, 2026, at 2:14 PM Eastern — a formal notice was sent to the agent's carrier on March 5 — and the agent called again on March 8, 2026, which is documented in the audit log."
That second complaint is what PlanShield enables. Elder law attorneys who register clients in PlanShield are building a contemporaneous record — timestamped, consistent, legally defensible — that doesn't depend on a beneficiary's memory of events that happened months ago. When a violation occurs, the attorney has everything needed to file a strong complaint:
- Registration timestamp — proves the client was protected before the violation occurred
- Do-not-contact notice log — shows the broker was formally notified
- Documented contact attempts — timestamps on any broker outreach that occurs after the notice
- CFR citations in every notice — establishes the broker's knowledge that the contact was prohibited
PlanShield does not file complaints for attorneys. It provides the documentation foundation that makes complaints credible and actionable. The attorney files; PlanShield ensures the file is strong.
The difference between a complaint that gets logged and a complaint that triggers action is documentation. A well-documented complaint with timestamps, notice records, and CFR citations is what moves an enforcement process forward.
For Attorneys: Register Clients Before They Need Protection
The attorneys who get the most value from PlanShield are those who register clients proactively — before a violation occurs. The registration itself creates the documentation baseline. If a broker then violates the do-not-contact notice, the attorney has everything needed to file: registration timestamp, notice, and post-notice contact documentation.
If you're an elder law attorney with Medicare beneficiary clients — especially those with cognitive decline, complex plan situations, or a history of being targeted by brokers — this documentation system is the infrastructure your practice needs.
Register free at planshield.polsia.app/register. Add clients, issue do-not-contact notices, and maintain the audit trail that protects your clients and supports enforcement action when it becomes necessary.
For Beneficiaries and Families
If you or a family member have been contacted inappropriately by a Medicare agent — called repeatedly, visited without invitation, enrolled in a plan without consent, or given misleading information — your report matters. CMS enforcement is driven by complaints. The complaint process is accessible to anyone, and the Medicare helpline (1-800-633-4227) can take your report.
If you have an elder law attorney, bring them the details — the agent's name, the carrier, what was said, when it happened. A formal complaint from an attorney carries more weight and creates documentation that protects others going forward. If you don't have an elder law attorney, ask about PlanShield protection when you seek one.