Source
r/sysadmin•
79ford

Has anyone heard of patientops.com? Seems like a scam.

General Discussion

A few customers have reportedly received emails stating they had an outstanding balance with a link to pay said balance which goes to patientops.com. If you go to the site directly it is a generic landing page. In the email link it's a crafted payment submission page.

On the IT side of things I've never heard of them. I'm still waiting to hear back from a couple other business managers but from my initial look this seems like a scam similar to that doxo junk - https://paracogas.com/blog/spot-and-stop-payment-scams-doxo-com

Anyone here have any experience with patientops.com by chance?

Posted Nov 4, 2022, 3:18 PM UTC

010
kaviwokcycom•

A random email comes to multiple random users with a link to pay an outstanding balance? And your asking if it's a scam ? Absolutely !

3
79fordOP•

It certainly seems that way, just like doxo. what has be perplexed is how they would have gotten their hands on customer email addresses.

0
kaviwokcycom•

A couple customers, it's probably just a coincidence. These tend to go out in bulk.

If customers reporting it are related industries, it's possible someone in the business community got compromised and their emails scraped.

If it was like ALL your customers, then it means someone probably got compromised in your organization.

1
DarthPneumonoSecurity Admin but with more hats•

The site is down from here, and what you've said raises a whole field of red flags.

1
79fordOP•

looks like they don't like having the www. missing - https://www.patientops.com/

1
RockyColo•

A doctor’s office used patientops as their payment app. Immediately after making a payment, my credit card wa charged for an Amzn Prime membership. Patientops is an Amzn owned company, and clearly not a secure app. Recommend calling patient billing office to make any payment, bypassing this app in the future.

1
PatientOps•

Hi r/sysadmin! This post was pointed out to me by one of our marketing associates in a meeting today.

I'm one of the developers working on the PatientOps application.

We're definitely not a scam, sorry it may have come off that way. We process millions of legitimate payments for our clients.

We are not owned by Amazon, but we do use some AWS services in our infrastructure. Some of our clients may have other affiliations with Amazon.

We sell our application as a supplemental service to our larger medical practice management platform, allowing our clients to integrate a patient portal for billing and other functions into their existing solution.

The way this should work is:

  1. You received service from one of our clients and they are attempting to bill you for your balance for said services.
  2. Depending on how our client set their system up, you've either received an email, text, or paper statement with a link that should log you in to the PatientOps application with your provider's branding where you'd be able to see a balance, what service(s) you received and a way to pay said balance.
  3. -OR- Your client has integrated our application via API into their existing solution and they directed you to sign-in to their system which communicates with our application to complete payment.

The landing page at the site's root is kept very generic as we aren't able to gather which of our clients you are working with. The links generated as part of the statementing process contain some meta data that helps us provide the application you should be experiencing. That said, the generic landing page isn't really part of the intended experience. It's just a placeholder for folks who find the website through unprompted means.

Just wanted to try to clear up any confusion we may have caused and we'd love to hear any feedback you have so we can avoid appearing disingenuous in the future.

1
RockyColo•

NOT TRUE! The Patientops link did not take me to a branded page. Absolutely nothing on the page. No DOS, nothing. No confirmation after payment. When I tried to log back in with the link, it comes up with a very annoying “NO WORRIES” statement blocking further info. I trusted the https:// address and the lock signal on the page. Big mistake, lesson learned as I go through the hellish business of dealing with a hacked credit card. Will never, ever deal with any provider whose billing uses Patientops again. A low budget, non-secure service for a low budget medical provider.

1
PatientOps•

I'm sorry you are having a bad experience with the product. Your feedback is appreciated.

We have an update on it's way to address the "No Worries" messaging. It is annoying, so it's being changed to be more descriptive regarding whatever situation the user is in. That message does mean that you do not have a balance and no payment is necessary. We are updating it to state that specifically.

This update will allow you back in to see more account details such as dates of service and payment history.

The application is secure, and none of your data was compromised as a result of your usage.

I apologize your credit card was "hacked." I can assure you it wasn't a result of using it with our product.

I hope you're able to find a provider you are happy with.

1
RockyColo•

My cc was hacked immediately following my use of it on patientops. Too close to be a coincidence. Both the bank and Amazon have identified the user. I won’t be provided that info, but I hope the repercussions will motivate the Dr’s office to drop your service. It’s a junk, low budget service.

1