NHS scam: Fake text messages ask for bank details in exchange for Covid vaccine

The scam asks for bank details, something legitimate NHS texts do not do

Adam Smith
Thursday 07 January 2021 17:01 GMT
Comments
(Pixabay License Free for commercial use No attribution required)

Your support helps us to tell the story

This election is still a dead heat, according to most polls. In a fight with such wafer-thin margins, we need reporters on the ground talking to the people Trump and Harris are courting. Your support allows us to keep sending journalists to the story.

The Independent is trusted by 27 million Americans from across the entire political spectrum every month. Unlike many other quality news outlets, we choose not to lock you out of our reporting and analysis with paywalls. But quality journalism must still be paid for.

Help us keep bring these critical stories to light. Your support makes all the difference.

A viral scam purportedly from the NHS is being sent to people in the UK with the intention of collecting bank information.

The fraudulent text reads: “NHS: We have identified that your [sic] eligible to apple for your vaccine. For more information and to apply, follow here”.

It then sends receipients to a link that asks them for their sort code, account number, and the long card number in order to “prove ownership of address”, something that legitimate NHS texts would not do.

Despite not coming from the NHS, the text mimics official websites with the NHS logo at the top and similar menu and search icons on the right hand side.

However, the NHS web page has a lock icon next to its URL. This means that the website uses HTTPS, which requires a security certificate. These certificates are only issued once the site owner's identity has be validated.  

The fake NHS website, and many other scam websites, does not have this lock. Users, especially vulnerable older people, should look out for this clue as to whether a website is legitimate or not, and never hand over personal information unless they are absolutely sure the website is valid.

The BBC reports that the scam website in question has already been taken down, but that does not mean that similar websites may not exist.  

"If you receive a text or email that asks you to click on a link or for you to provide information, such as your name, credit card or bank details, it's a scam," Derbyshire Police advise.

Other scams have been rampant since the start of the coronavirus pandemic, including those targeted at people buying PPE and hand sanitiser, reducing their council tax, job retention schemes, Netflix scams, and others. 

The best advice is to remain suspicious and be wary of anything that arrives in your inbox or chat apps if you are not expecting it, or comes from source you do not recognise.  

Be aware of opening attachments and clicking links as scammers update their methods regularly to avoid detection.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in