Every year during Medicare's Annual Enrollment Period (October 15 through December 7), thousands of beneficiaries discover that their Medicare Advantage or Part D plan has been changed — and they never authorized it. They find out the hard way: a prescription is denied, a doctor visit is rejected, or a new insurance card arrives in the mail for a plan they never chose.

Unauthorized plan switching is one of the most common violations committed by Third-Party Marketing Organizations (TPMOs) and the agents who work for them. It happens when a broker obtains a Scope of Appointment under false pretenses — or skips it entirely — and enrolls a beneficiary in a new plan during the AEP window without the beneficiary's informed consent. By the time the switch is discovered, the enrollment period may have closed.

If this has happened to you or someone you represent, there is a narrow window to act — and specific steps that make a difference.

🛡 Protect your Medicare clients from unauthorized plan switches. Register your practice in under 2 minutes — free.
Register Free →

How Unauthorized Plan Switches Happen

The mechanics are straightforward, which is part of why it is so common. An agent — often working for a TPMO that deploys hundreds of agents during open enrollment — contacts a Medicare beneficiary by phone or in person. The agent obtains a Scope of Appointment (SOA), the CMS-required consent document, under misleading circumstances: telling the beneficiary the meeting is "just to review your current coverage" or "to make sure you're getting all your benefits."

During the interaction, the agent completes an enrollment form switching the beneficiary to a new plan. The agent earns a commission — typically $200 to $500 per switch. The beneficiary may not understand what happened, may have cognitive decline that limits their ability to evaluate what they signed, or may have been told the change was minor when it was not.

The beneficiary discovers the switch weeks or months later when they:

  • Try to fill a prescription and learn it is not on the new plan's formulary
  • Visit their primary care physician and discover the doctor is out of network
  • Receive a new insurance card for a plan they do not recognize
  • Get a bill for a procedure that was covered under their old plan but requires prior authorization under the new one
The 21-day window: CMS allows rapid disenrollment within 21 days of discovering an unauthorized plan switch. After 21 days, the process becomes significantly more difficult. Time matters — act immediately.

Immediate Steps to Take

If you or someone you represent has been switched to a Medicare plan without consent, these steps should be taken as quickly as possible — ideally within the first 21 days of discovering the change.

1. Call 1-800-MEDICARE (1-800-633-4227) Immediately

CMS has a rapid disenrollment process that allows beneficiaries to return to their previous plan within 21 days of the unauthorized enrollment. Call the Medicare helpline and explain that the plan switch was unauthorized. Request rapid disenrollment and ask for a case number. The helpline is staffed 24/7.

When you call, have this information ready:

  • The beneficiary's Medicare number
  • The name of the old plan (the one the beneficiary was switched from)
  • The name of the new plan (the one the beneficiary was switched to without consent)
  • The approximate date the switch was discovered
  • The agent's name and NPN (National Producer Number), if known

2. Document Everything

Before memories fade and details blur, document every fact you can:

  • Agent name and NPN — every licensed insurance producer has a National Producer Number; if you have the agent's business card, mailer, or voicemail, the NPN may be on it
  • Date of contact — when the agent first reached out and when the enrollment occurred
  • What was promised vs. what happened — did the agent say the meeting was informational? Did they claim the beneficiary's doctor was in-network when they were not? Specifics matter for enforcement
  • How the contact was initiated — unsolicited phone call, uninvited door-to-door visit, mailer response, or event
  • The Scope of Appointment — was one provided? Was it signed before or during the meeting? Was the beneficiary told what they were signing?

This documentation becomes the foundation for every subsequent step — the CMS complaint, the state insurance department complaint, and any legal action.

3. File a CMS Complaint

Unauthorized plan switches are serious CMS violations. File a complaint through 1-800-MEDICARE or the online portal at medicare.gov/about-us/how-can-i-report-fraud. Include all documentation gathered in step 2. For a detailed guide on the complaint process, see our article on how to file a CMS complaint against a Medicare agent.

4. File a State Insurance Department Complaint

CMS enforcement and state Department of Insurance (DOI) enforcement are independent tracks. The state DOI has authority over licensed agents and can impose sanctions including license suspension and revocation. File with both — the two processes are complementary and increase the chances of accountability.

How Attorneys Can Help Clients

Elder law attorneys are uniquely positioned to act on behalf of beneficiaries who have been subjected to unauthorized plan switches — particularly clients with cognitive decline who cannot advocate for themselves.

Acting as Authorized Representative

An attorney can serve as the beneficiary's authorized representative in communications with CMS, the plan, and the state insurance department. For clients in assisted living or memory care, this representation is often the only way the violation gets addressed at all — the beneficiary cannot navigate the complaint process alone.

Filing Formal Complaints with Legal Weight

A CMS complaint filed by an elder law attorney — with documented Scope of Appointment violations, specific CFR citations (42 CFR § 422.2274 for SOA requirements, 42 CFR § 422.2268 for marketing rules), and a complete timeline — carries more weight than an unrepresented beneficiary's phone call. Attorneys can also demand reinstatement of the original plan and pursue state insurance department action against the agent's license.

Building Pattern-Based Cases

Attorneys who represent multiple Medicare beneficiaries may discover that the same agent or TPMO is responsible for multiple unauthorized switches. Pattern-based complaints are significantly more likely to result in CMS enforcement action — including marketing bans and contract terminations — than individual complaints. An attorney who documents multiple violations systematically can build a case that moves the enforcement needle.

Prevention with PlanShield

The strongest defense against unauthorized plan switches is documentation that exists before the violation occurs. PlanShield is built for exactly this scenario.

When an attorney registers a client in PlanShield, the system creates a timestamped do-not-contact record — a formal, dated declaration that this beneficiary does not consent to solicitation from Medicare agents or brokers. The attorney can then generate formal do-not-contact notices, citing the specific CMS regulations (42 CFR § 422.2264 and § 423.2264), and send them to known brokers or carriers.

When an unauthorized plan switch happens anyway — and it does, because TPMOs operate at scale and compliance lapses are common — the pre-existing PlanShield documentation proves three critical things:

  • The contact was unauthorized — the beneficiary was registered in a do-not-contact system before the agent reached out
  • The broker was on notice — a formal notice was sent citing the applicable CFR provisions
  • The timeline is documented — registration timestamp, notice delivery, and subsequent unauthorized contact are all recorded in PlanShield's audit log

This is the evidence CMS needs for enforcement. Without it, the complaint is the beneficiary's word against the agent's. With it, there is a contemporaneous paper trail that establishes the violation beyond dispute.

The difference between an unauthorized plan switch that gets reversed and one that doesn't is documentation. A beneficiary registered in PlanShield before the violation has the evidence that makes enforcement possible.

Protect Yourself — Take Action Now

For attorneys: If you represent Medicare beneficiaries — especially those with cognitive decline, complex health situations, or a history of being targeted — register them in PlanShield before the next enrollment period. The documentation system is free during early access. Register at planshield.polsia.app/register and start building the protective record your clients need.

For beneficiaries and families: If your Medicare plan was switched without your consent, call 1-800-MEDICARE immediately and request rapid disenrollment. Document everything — the agent's name, what was promised, when the contact happened. Then consult an elder law attorney who can file complaints on your behalf and ensure the violation is properly recorded.

Unauthorized plan switches are not inevitable. They are preventable with the right documentation, and they are enforceable with the right legal representation. The system works — but only when violations are reported and documented.

For more on building proactive protection, see our guide on Medicare do-not-contact registries. For the regulatory framework governing what agents can and cannot do, read about Medicare open enrollment solicitation rules. For how to file complaints, see our guide on filing a CMS complaint against a Medicare agent. And for a deeper look at how third-party marketing organizations drive these violations, see our explainer on TPMO fraud during Medicare open enrollment.