NHS Appointment Scam Text Messages: UK Warning Signs & How to Report
Criminals are sending fake NHS text messages claiming your appointment is cancelled or needs confirmation—here's how to spot and avoid them.
What is this scam?
The NHS appointment scam text is a phishing attempt where criminals send SMS messages pretending to be the NHS. The message typically claims your hospital or GP appointment has been cancelled, rescheduled, or needs urgent confirmation. It asks you to click a link, call a number, or reply with personal information. The scammers use official-sounding language and may even reference real NHS services to seem legitimate. Some variants mention COVID-19 vaccination appointments, blood test results, or prescription refills to increase urgency. Once you click the link, you're taken to a fake website designed to steal your NHS login details, bank information, or other sensitive data. In other cases, calling the fake number connects you to someone who convinces you to transfer money for a 'processing fee' or 'verification deposit.' This scam is widespread across the UK and is reported regularly to Action Fraud and the NCSC.
Warning signs to look for
["- The message asks you to click a link to 'confirm your appointment' or 'reschedule urgently'—the NHS rarely asks you to do this via text.", "- It includes a suspicious URL that doesn't match NHS.uk—scammers use similar-looking domains like 'nhs-appointment.co.uk' or shortened links that hide the real address.", '- The message creates false urgency, saying your appointment will be cancelled unless you act immediately within the next few hours.', '- It requests sensitive information like your NHS number, date of birth, or bank details—the NHS never asks for this information by text.', "- The sender's name appears as a generic term like 'NHS' or 'NHS Appointments' rather than a specific hospital or GP surgery name you recognise.", '- Grammar or spelling mistakes are present, or the tone feels slightly off compared to official NHS communications.', '- It asks you to call a phone number to confirm details—real NHS appointments are confirmed through official NHS systems, not phone calls prompted by random texts.', '- The message offers to reschedule or cancel for a small fee, which the NHS never does.']
How this scam works step by step
The scam usually begins with you receiving an unsolicited text message that appears to come from the NHS. It claims your appointment has been cancelled due to high demand, a staff shortage, or a missed confirmation deadline. The message creates pressure by stating you must act within a few hours. When you click the link, you're taken to a fake website that mimics the NHS login page or an appointment booking system. The site looks professional with NHS logos and colours, making it seem authentic. You're prompted to enter your NHS login credentials, personal details, or bank information to 'verify your identity' or 'reschedule.' Criminals capture this data in real time. Alternatively, some scams direct you to call a number instead. When you ring, a person claiming to be from the NHS asks you to confirm your details and may convince you to pay a 'booking fee' or 'processing charge' via bank transfer, gift card, or cryptocurrency. Once you've transferred money or entered your details, the scammers disappear. Your information is then used for identity theft, sold to other criminals, or your bank account is emptied.
How to verify if it is genuine
If you receive an NHS appointment text, do not click any links or call any numbers in the message. Instead, independently contact your GP surgery or hospital using the phone number from your appointment letter or the official NHS website (NHS.uk). Ask them directly whether they sent the text—they will confirm if it's genuine or fraudulent. Genuine NHS services never ask you to confirm sensitive data via text, and they don't send clickable links for appointment confirmation. Check the sender's phone number: real NHS texts typically come from specific numbers your surgery uses, not generic short codes. If you're unsure, visit your NHS app or online patient portal directly (don't use links from the text) and check your appointments there. You can also search for the sender's number online to see if other people have reported it as a scam. Visit our guide on [verifying suspicious websites](/guides/is-this-website-a-scam/) if you're unsure about any links. Remember: when in doubt, always contact your NHS provider directly using a number you know is correct.
What to do if you have already interacted
If you've clicked a link and entered your NHS login details, change your NHS app password immediately and check your email for any suspicious account activity. Log into your GP online portal and review recent appointments and requests—contact your surgery if anything looks wrong. If you entered your bank details or a payment card number, contact your bank immediately and tell them you've been scammed. Ask them to monitor your account for fraudulent transactions and consider requesting a new card. If money has been taken from your account, ask your bank to attempt a recall of the funds—they sometimes succeed within 48 hours. Report the scam to Action Fraud on 0300 123 2040 or online at reportfraud.org.uk; keep screenshots of the message and any receipts. Forward the original SMS to 7726 (Spam reporting shortcode). If you've shared your NHS number, date of birth, and address, contact the NHS directly to check for any unauthorised access to your medical records. Monitor your credit file with Experian, Equifax, or Clearscore for signs of identity fraud. Consider registering with the National Fraud Database on cifas.org.uk to protect yourself against further fraud.
Reporting this scam in the UK
Report the scam to Action Fraud, the UK's official fraud reporting service, by calling 0300 123 2040 (free from UK landlines and mobiles) or visiting reportfraud.org.uk. You'll receive a crime reference number, which is essential if you've lost money. Forward the scam text message to 7726 (the free national spam reporting shortcode) to alert your mobile provider and help block similar messages. Report the phishing text to the NCSC's Suspicious Email Reporting Service at report@phishing.gov.uk—include screenshots and the sender's details. If the text included a malicious link, also report it to the NCSC so they can take action against the website. Contact Citizens Advice's consumer helpline on 0808 223 1133 (free and confidential) if you need guidance on whether you're eligible for a refund from your bank. Your mobile network provider may also help—contact them directly to report the number and request it be blocked. Report the scam on social media if other people are reporting it in your local area, as this helps raise awareness. Keep all documentation including screenshots, the crime reference number, and bank statements, as these are needed if you pursue a refund claim.
Frequently asked questions
Is the NHS a legitimate organisation, or are all NHS texts scams?
The NHS is a legitimate organisation, but not all NHS texts are genuine. The NHS does send legitimate appointment reminders and confirmations, but typically through official NHS channels you've already signed up to—like your GP surgery's app or the NHS app. Scammers impersonate the NHS by copying their appearance and tone. If you're unsure whether a text is real, independently contact your GP surgery using a phone number you know is correct, never using contact details from the text itself.
I've already sent money to the scammers—can I get it back?
Contact your bank immediately and report the fraud. If you sent money via bank transfer, your bank can attempt a recall within 48 hours, which sometimes succeeds. If you paid via gift card or cryptocurrency, recovery is much harder—contact the gift card company or cryptocurrency exchange, though they rarely reverse transactions. Report the scam to Action Fraud on 0300 123 2040 to get a crime reference number, which you'll need if you make a refund claim. Your bank may refund you under the Contingent Reimbursement Model Code, which requires you to act quickly and report to Action Fraud.
Can the NHS really cancel my appointment via text without warning?
No. If the NHS needs to cancel your appointment, they contact you through the same channel you were originally booked via—usually your GP surgery, a hospital, or via the NHS app. They would never send an unexpected text demanding urgent action or threatening to cancel your appointment within hours. Legitimate cancellations come with advance notice and clear instructions on how to rebook. Any text claiming your appointment is cancelled and asking you to click a link or call a number is almost certainly a scam.
How do I report an NHS scam text in the UK?
Forward the scam text to 7726 (the national spam reporting shortcode), which is free. Report it to Action Fraud by calling 0300 123 2040 or visiting reportfraud.org.uk—you'll receive a crime reference number. Report the phishing message to the NCSC at report@phishing.gov.uk with screenshots. If money was taken, also contact your bank immediately. For additional support, call Citizens Advice's consumer helpline on 0808 223 1133.