Ameli scam email

Hum. This is interesting. I think my reaction is very French having followed this up.

Another call and voicemail (not bothered to hear) from a number showing as 3336nn, nn being departement number, same as yesterday.

Bearing in mind SMS’s have additionally been received displaying as from 38663 with message claiming to be from Assurance Maladie.

But as we all know these identifiers can be faked.

My policy anyway is never to pick up a number from a call I don’t recognise, and never to respond to or click on anything in any SMS from a sender if I don’t recognise the sender.

I’ve always quite deliberately set communications on my Ameli account to email only and never ticked the boxes to receive contact by SMS or phone.

So I called CPAM, got through to an agent, and said I wanted to complain as I am receiving harcèlement téléphonique and sms’s from someone presenting their identity as from CPAM. On the basis that assuming it’s not them, and it shouldn’t be given the settings on my account, my data has potentially been leaked from CPAM to whoever is doing this harassment.

The CPAM conseiller checked my account and said “Yes someone has been trying to contact you about prevention I’ll transfer you to them”.

You could have knocked me down with a feather. I said No, if you have anything to say to me you can say it by email. I have always since the beginning set my account in Ameli that you may communicate with me by email, and never by SMS or telephone. If it’s something confidential that you don’t want to put in an email, then you can send me an email asking me to call you”. The conseiller simply refused to comment on the fact that I had told them to contact me by email only and that they had disrespected that.

After being very firm about that and getting the same “broken record “ and “follow the script” conseiiler response again (and again), simply refusing to address the problem, I got really fed up. I said I want to make a complaint. The conseiller said if you want to tell us not to call you you must send a message At that point I raised my voice and ssid “Je vous ai déjß informé en paramétrant mon compte j’ai toujours été très claire que vous pouvez m’envoyer des mails et refusé par téléphone et sms. Veuillez respecter ce que je vous ai déjà dit.”

The conseiller gave me the “you must send a message” again and asked me not to m’énerver.. I repeated what I had said “Veuillez respecter ce que je vous ai déjà dit” and “Prenez cet appel comme message.”

Basically got nowhere and it really annoyed me that she simply refused, clearly under instruction, to explain, comment on or deal with the issue. So, since they want a message, I raised an official complaint in Messages in Ameli that my data had been used for a purpose I had specifically not agreed to. Ticked the box to say you haven’t dealt with a problem satisfactorily, which normally I would avoid. So I’ve decided to raise it as a breach of data rights / misuse of data complaint first, as it might go to a different team than the operstional one, thst is aware of GDPR, and will see what comes back before raising it as an opetstional issue if necessary.

Additionally, for the first time ever, on my phone I’ve blocked the telephone ID they’ve been using, and I’ve blocked the ID they used on their SMS’s. I am also considering removing my phone number from my Ameli account, since CPAM can’t be trusted with my data nor to respect what’s been clesrly communicated to them by explicit settings I made on the account.

I get prevention emails and I choose to avail only of some of what’s offered. But harcèlement téléphonique by CPAM is not acceptable. That was the last line of my complaint.

I’ve also noticed Ameli recently keeps trying to trap you into signing up for their new Espace thing when logging in. Most of the time clicking on the x to close the box that pops up puts you into the signup page fpr the Espace, instead of closing the popup (though that might be because I’m on a phone screen).

This, because of course the Espace is about sharing personal data, and the violation of the choice already made not to receive calls and SMS’s, makes me think someone at CPAM has made a deliberate decision to ride roughshod over personal data rights.

I should receive a reoly to my complaint by Monday but I suspect it will be some sort of anodyne acknowledgement at that point.

1 Like

Well done for finding out all of that and thank you for taking one for the team, Karen. That’s very useful information.

But it’s disappointing that Ameli are behaving like this, makes me even more determined not to sign up to anything else with them.

Exactly.

Though many of the more cautious (and cleverer) heads on SF may be horrified that I dared complain.

As this seems to be more than one département, and quite a few people here getting these calls and messages, i have a fair idea what might be going on.

I’ll be interested to see how CPAM handle it but from a GDPR point of view I think they ve put their foot in it given the settimgs on my account.

1 Like

Not Ameli, but Orange. This arrived today:

Nous tenons à vous remercier pour la fidélité dont vous nous faites preuve au fil des années.

Un prélèvement bancaire lié à votre abonnement n’a pas pu être traité par votre établissement, ce qui entraîne une interruption imminente de vos services.

Nous vous invitons à mettre à jour vos coordonnées bancaires dès maintenant en cliquant sur le bouton ci-dessous.

Fortunately I was suspicious so checked the bank account, it showed the regular payment going out as scheduled on the 9th of March. Then I hovered over the link, and it wasn’t Orange.

Obviously I did not click, but what’s best to do now. Delete and forget it or send it to Orange? If so, is there a special email address for spams there?

Its a very common thing, just delete and forget about it. Just a coincidence that you’re with Orange.

Thanks Mark just thought that it might be wise to inform them, but I’ll do as you say. I knew it was dodgy because I had my original email address hacked a year or so ago. Nothing was taken and I changed it straight away. Some people do innocently send me emails under that name and it doesn’t matter, I still get them, but if I send emails out using it it may well go into a spam filter. But in this case I thought it highly unlikely that Orange would make such a mistake. All gone now. :smiley:

To add to my state of health, I have just had another fright. My English bank does not allow transfers of more than £1000/day so the £10,000 worth of euros I am buying will be completed at the agreed rate on Monday.

Just had an email from Synergy Exchange to say that my money has been transferred, 3 days early and to an IBAN number in Belgium !!!
Fortunately my friend with them who I deal with has put my mind at rest, they send my payments to their European branch bit by bit and then send the total of euros to Bordeaux on settlement day, Monday. While he was checking it out I looked again at the email and realised that it is just today’s payment that has been sent, not the total. Phew. :joy:

I have precautionary annual blood tests at Cerballiance in town - its laboratories are wide spread across France.

They’ve just been hacked, revealing names, email addresses & passwords, medical test reports and social security numbers, including mine.

Cerballiance advised me to change my password having already invalidated my original password.

And “be extra vigilant regarding unsolicited phone calls, emails, and unusual postal mail, especially those from healthcare professionals, insurance companies, or social security organizations.”

They also say “there is no indication of any reuse of the data in question and that enhanced web monitoring has been implemented to track this and will remain active.”

I shall follow their advice - not more I can do than that. But I’m wondering about the social security number. That’s the one on the Carte Vitale isn’t it?

Yes, but it is not a number that can be changed.

Possibly susceptible then to phishing, identify theft, medical fraud, access to Ameli account, fraudulent emails? Keep me on my toes!

Will change Ameli password as well.

Another seeming scam doing the rounds. Its a text or email from Uber that gives you a ‘confirmation code’ to enter. The email address of the sender is uber.com but it could be spoofed.

Votre code de confirmation Uber

Bonjour Hairbear,

Pour finaliser la connexion à votre compte Uber, saisissez le code de confirmation suivant :

Ne partagez ce code avec personne. Les collaborateurs d’Uber ne vous demanderont jamais ce code.

4247
Si vous n’êtes pas à l’origine de cette demande ou si vous avez une question, accédez à notre Centre d’aide.

The ‘Centre d’aide’ above is a link. Haven’t looked at it. I’ve had two different emails and two texts this week giving me a code. I assume you’re supposed to be confused about getting a code out of the blue and click the link.

I do have the Uber app on my phone but only use it whilst in the UK.