The NHS (National Health Service) is the publicly funded healthcare entity of the United Kingdom.
About NHS scam texts, emails and phone calls
NHS scams are typically phishing scams designed to lure victims into visiting malicious websites. Since 2020, there has been a significant surge in NHS scams, nearly all of them related to the COVID-19 pandemic, COVID-19 vaccinations and COVID “passes” or “passports”.
Such scams are most frequently transmitted through SMS text, email and through social platforms such as WhatsApp. Most popularly, these scams will claim –
- The recipient can get a COVID pass or digital passport by clicking a link.
- The recipient has not yet applied for a COVID pass and may risk a fine for not doing so.
- The recipient is eligible for a COVID-19 vaccination or ‘booster’ vaccination.
- The recipient has been exposed to someone with COVID-19 and needs to order a testing kit.
- The recipient has broken lockdown restrictions and has been fined.
The scams are aimed at luring victims to malicious websites that will steal sensitive information and may attempt to trick a visitor into purchasing things such as testing kits, vaccinations and COVID-passes (all of which can be obtained for free.)
Some examples are below.
The below example claims the recipient is eligible for a COVID-19 pass, and may be fined for not applying.
NHS: You are now eligible to apply for your COVID-19 Pass. If you do not apply, you may be fined. To apply, please visit LINK
The below example claims the recipient is eligible for a vaccination.
NHS: We have identified that your are eligible to apply for your vaccine. For more information and to apply, follow here LINK
The below example claims the recipient has been in contact with someone with COVID-19 and urges them to order a testing kit.
NHS: You have been in contact with someone who has COVID-19. You must order a PCR Testing Kit here: LINK (Even if you’re vaccinated).
In all cases, these messages are designed to link to phishing websites such as the one below.
Such sites will steal any information entered into them, including payment information.
Report NHS phone, text and email scam.
If you believe any of your financial information may have been compromised as a result of a scam, you should report it to your financial institution (bank, card issuer) immediately using their security hotline number.
How to report a NHS scam text?
The NHS recommends reporting scam texts to your phone carrier (information below.)
How to report a NHS scam email?
The NHS recommends reporting phishing emails to the National Cyber Security Centre’s (NCSC) (information below.)
If you're in the UK, you can ALSO report scams...
- Scam emails can be forwarded to The National Cyber Security Centre (NCSC) at report@phishing.gov.uk
- Scam texts can be forwarded to your phone carrier on 7726
- All types of cybercrime and fraud can be reported to the police via ActionFraud by calling 0300 123 2040 (or 101 in Scotland) or by using ActionFraud's online reporting tool here.
If you're in the USA, you can ALSO report scams...
- Scam texts can be forwarded to your phone carrier on 7726
- All types of cybercrime and fraud can be reported to the Federal Trade Commission (FTC) by using their complaint assistant here or by calling 1-877-382-4357 (9am-8pm ET)
From a different country? Click here.
You can also forward SMS or email scams to us at scam@thatsfake.com
Avoiding NHS phone, text and email scams
Don’t click on any links in unexpected emails or text messages claiming to be from the NHS.
If a message asks you to pay for a COVID-19 pass or to book a vaccination or booster vaccination, this will be a scam.
The NHS will never ask anyone to purchase a vaccine or COVID pass.
If you click a link on a message, always check the web address to see if you’re either the NHS.uk website or the Gov.UK website.
Never open any attachments on an email you were not expecting, even if it appears to have come from the NHS.