All Posts
COMPLIANCE CORNERJuly 26, 2026·Florida Healthcare Collective

Stop Telling Nurses to "Just Be Vigilant." The Scam Works Because the Real System Looks Just Like It.

Florida just warned that scammers are impersonating the state licensing board to threaten and rob health professionals. The advice is always the same — stay alert. But vigilance is a heavy tax to put on the victim when the fake and the real are nearly identical.

The Florida Department of Health issued a fraud alert: scammers are impersonating the Division of Medical Quality Assurance (MQA) to steal money and personal information from licensed health professionals. They send emails posing as "MQA Online Services." They call pretending to be investigators, complete with invented badge numbers and case IDs. They threaten immediate license suspension to create panic, and they use look-alike web addresses like flheallth.gov and fl-health.org (FL HealthSource, Fraud Alert: Protect Your License).

The state's guidance is correct and worth following: the Department will never contact you unsolicited to demand payment, request personal data, or threaten your license. Learn it, share it, live by it. But let's also say the quieter thing out loud.

The thesis

We keep treating this as a vigilance problem — a failure of the individual to be careful enough — when it's really a design problem. A scam that threatens your license, cites a case number, and links to a page that looks official succeeds precisely because the legitimate version of that interaction is opaque, intimidating, and unfamiliar to most practitioners. If real regulatory contact felt calm, predictable, and easy to verify, the fake version would stick out. Instead, the fake blends in — because the real thing is stressful and confusing too.

You can't spot the counterfeit if you've never gotten a good look at the original. Most nurses have never had a normal, low-stakes interaction with their licensing board.

Why "be vigilant" is an incomplete answer

Vigilance asks a person at the end of a 12-hour shift to out-think a professional operation that does this all day. It works right up until the one moment it doesn't — the call that catches you tired, distracted, and afraid for the license you spent years earning. Fear is the actual product these scammers sell, and fear is hardest to resist when the threat lands on the thing you can least afford to lose. Telling someone to simply feel less afraid is not a security control. It's a hope.

The honest counterpoint

Two things are true and need saying. First, individual awareness genuinely does prevent fraud — the majority of these attempts fail exactly because someone recognized the red flags and hung up. Education is not useless; it's the cheapest and fastest defense we have, and the Department is right to push it hard. Second, no licensing board can eliminate impersonation; scammers will spoof any institution people trust, and blaming the DOH for the existence of criminals would be unfair and wrong. The agency issuing a clear, specific alert is exactly what a responsible regulator should do. So this isn't a call to stop teaching vigilance. It's a call to stop pretending vigilance is the whole answer — and to build the boring infrastructure that makes vigilance easier.

What actually makes the fake stand out

  • A single, known channel. If practitioners knew the one official way the board communicates, anything outside it would be suspicious by default.

  • A verify-first reflex, taught like hand hygiene. Never act on the message in front of you. Independently open the official site and confirm. Make it muscle memory, not a judgment call.

  • Kill urgency as a tell. Real regulatory processes have timelines and paperwork. "Today or your license is gone" is not how due process works — and teaching that one fact disarms the scam's main weapon.

  • Practice-level protocols, not lone heroics. One trained person hanging up isn't enough; the whole team needs a shared rule, because the scammers will keep dialing until they reach the tired one.

IF YOU GET ONE OF THESE

Hang up. Don't pay. Don't share anything. Verify by going to the official Florida DOH site yourself — never through a link or number they gave you. Report the attempt to the Department of Health. And tell your team: if it reached one of you, it will reach all of you.

Where FHC stands

Risk management and compliance is one of the four things we actually do. A practice shouldn't rely on each individual out-thinking a scammer in a scary moment — it should have a simple, shared anti-fraud protocol that removes the guesswork. If you want help building one for your team, message us.

This is an opinion piece reflecting FHC's perspective. It is general information, not legal advice. For official guidance and to report fraud, consult the Florida Department of Health directly.

Sources

  1. Important Information on Fraudulent Emails to Practitioners — FL HealthSource (Florida Department of Health)

  2. Fraud Alert: Protect Your License — FL HealthSource

F

Written by

Florida Healthcare Collective

Healthcare insights and industry updates from our team

Get in Touch

Next Steps

Ready to connect with our team?

Have questions about this post or want to learn more about our services? We're here to help and would love to hear from you.