Red-Team the Medical Tourism Trip: Try to Break It Before the Deposit

Before you pay, try to break your own plan. Assume the surgeon changes, the companion cancels, the card is declined and the flight moves, then see which of those the plan can absorb and which would turn into a crisis.

What red-teaming a trip means

In security work, a red team attacks a system on purpose to find its weak points before someone else does. You can do the same with a medical trip. Write the plan down, then spend an hour trying to break it: assume something goes wrong, and see whether the plan bends or snaps.

The aim isn't to scare yourself out of going. It's to find the one or two weak points that would turn an ordinary problem into a crisis, while fixing them is still cheap. Before the deposit, most fixes cost an email. Afterwards, many of them cost money.

How to run the exercise

1. Write the plan on one page. Include the clinician, facility, procedure, dates, lodging, flights, companion, payment method, insurance and home follow-up.
2. Bring a second person. Ideally the companion who'll travel with you, or someone sceptical. People rarely attack their own plans hard enough.
3. Go through the scenarios below. For each one, say out loud what would happen next, who you'd contact and what it would cost.
4. Grade each answer: robust (handled already), patchable (fixable now with a question or a booking change) or fragile (no good answer yet).
5. Fix the fragile ones before paying. Each fix gets an owner and a deadline.

The attack scenarios

Clinical attacks

• The in-person exam changes the plan. The surgeon recommends a different or additional procedure, or none at all. Do you have the price for the alternative, and can you say no without losing the deposit?
• Treatment is postponed after a test. You're in Colombia, but surgery is pushed back three days. Can your lodging, flights and time off absorb it?
• A complication needs extra care. You need an unplanned hospital night or a second procedure. The U.S. State Department's Colombia page (2025) notes that hospitals may require payment up front and may not accept credit cards. How would you pay, and who would arrange it?
• You need to see a doctor after you are home. Who sees you, and do they have your records?

People attacks

• The surgeon is replaced. A different clinician is scheduled to operate. Would you be told before the day, and could you postpone without penalty? See booking when the surgeon is different.
• Your companion drops out. They get sick or can't take the time off. Who collects you after sedation and stays with you the first nights? Our guide to companion planning helps split the tasks.
• Your coordinator stops answering. Do you have direct contact details for the clinic and the facility, or does everything go through one WhatsApp number?

Money attacks

• The final bill is higher than the quote. Which items were excluded, and what would trigger extra charges?
• Your card is declined or hits its limit. Have you told your bank you'll be abroad, and do you have a second way to pay?
• You're asked to pay in a hard-to-reverse way. The FTC (2026) notes that scammers steer people towards payment methods that are hard to reverse, such as wires, bank transfers, crypto, gift cards and payment apps, and suggests a credit card where you can. Would you notice if the payment instructions suddenly changed?
• You plan to carry cash. The State Department says amounts over USD 10,000 must be declared on entry and exit, with proof of where the money came from.

Insurance attacks

• Your health plan doesn't cover you abroad. The State Department's health abroad guidance says Medicare doesn't cover costs outside the United States. Have you asked your own insurer, in writing?
• Your travel insurance excludes the procedure. The NHS (reviewed 2022) notes that travel insurance normally doesn't cover problems arising from surgery. Have you read the exclusions?
• You need to be flown home. According to the State Department, most health plans won't pay for an air ambulance, which can cost USD 20,000 to 200,000. Is that a risk you are covering, accepting or reducing?

Logistics attacks

• The return flight is cancelled the day after you're cleared to fly. Can you extend lodging at short notice?
• The recovery lodging doesn't work. There are stairs you can't manage, no lift, or it's too far from the clinic. Check the address against your mobility on day one, not on day ten.
• Border/document check: verify onward-travel requirements and airline document rules. Migración Colombia’s current Check-MIG guidance calls the service free and optional, not an entry guarantee.

Paperwork attacks

• You leave without your records. The CDC Yellow Book (2026) advises getting complete records, in English, before heading home. Who will hand them to you, and when?
• The agreement exists only in chat. If the clinic disputes a term, can you show it in a document?
• Something goes badly wrong. The CDC notes that legal remedies abroad may be more limited than at home. Does your decision account for that?

Grading your answers

"Consciously accepted" is a legitimate outcome. You might decide not to buy evacuation cover, for instance. The point is that it's a decision you've made, not a gap you never noticed.

An illustrative pass

Here's a hypothetical example to show how a pass might go. Imagine a patient planning abdominal surgery, travelling with a sister, with lodging booked through the clinic's coordinator.

• "The surgeon postpones by three days." The lodging can be extended, but the return flight is a basic fare that can't be changed. Patchable: rebook on a changeable fare before paying the deposit.
• "The sister can't come." No backup. Fragile: ask the clinic what post-discharge support it can arrange and what it costs, and ask a second relative whether they could step in.
• "The coordinator goes quiet." The patient only has the coordinator's WhatsApp. Patchable: ask for the clinic's front desk number and the facility's address and phone in writing.
• "An extra hospital night." The patient has a credit card with enough room on it and has told the bank about the trip. Robust.
• "Medical evacuation." No cover. After reading the State Department figures, the patient decides to get a quote for a policy before deciding. Fragile for now, with a deadline.

Five scenarios, two quick fixes, two open items with owners and one strength. That's a typical, useful result.

What you should end up with

After an hour, you should have a short fix list. Each item has a question to send, a booking to change or a document to request, plus a name and a date. You should also have one sentence for each fragile item you've decided to accept. Attach both to the one-page plan.

If the fix list is long, or one of the fragile items is clinical (an unclear plan, an unverified surgeon, a doubtful facility), that's a signal to slow down. Our guide on when to walk away covers the red flags that justify stopping entirely. For a broader score of how ready the plan is, see the trip readiness score.

Run it again after the deposit

A plan changes once money is paid. Dates firm up, people are confirmed and documents arrive. Run a shorter version of the exercise a couple of weeks before you fly, focusing on anything that changed since the first pass. New weak points often appear in the last stretch, like a companion's job changing or a flight being retimed, and they're easier to fix before you're in the air.

Frequently asked questions

What does it mean to red-team a medical trip?

It means deliberately trying to break your own plan before you commit money. You run through realistic problems, such as a changed procedure, a cancelled flight or a declined card, and check whether the plan already has an answer.

How long does the exercise take?

About an hour for a first pass, if the plan is already written on one page. A shorter second pass a couple of weeks before travel catches anything that has changed.

Who should help me with it?

Ideally the person travelling with you, or someone willing to be sceptical. A second person asks the awkward questions you might skip.

What if I find a weak point I can't fix?

Decide whether to accept it consciously or to hold the deposit until it's resolved. Clinical weak points, such as an unclear plan or an unverified surgeon or facility, are usually worth pausing for.

Is this the same as a readiness checklist?

No. A checklist asks whether items are in place. A red-team exercise asks what happens when something goes wrong. The two work well together.

Related planning guides

Medical-travel network