NHS COVID Scam Messages: How to Spot and Report Them
Fraudsters impersonate the NHS with fake COVID messages to steal personal data and money.
Quick answer
Scammers send fake SMS, email, and social media messages claiming to be from the NHS about COVID-19 vaccines, test results, or health updates. These messages often contain malicious links or request personal information. The real NHS will never ask for passwords, bank details, or payment via unsolicited messages. Always verify communications by contacting the NHS directly through official channels.
Warning signs
- Pressure to act immediately
- Requests for payment, login details, or one-time codes
- Suspicious links or domains
- Requests for upfront payment
- Messages that create urgency or fear
How this scam usually works
Scammers impersonate trusted names such as NHS to extract money, account access, or personal information. The usual pattern is urgency, impersonation, and a push to click a link or send payment.
How to verify safely
Go to the official website manually, verify the domain carefully, and use independently verified contact details before taking any action.
What to do if you already interacted
Change passwords immediately, contact your bank if payment details were involved, keep evidence, and report the incident through the relevant UK channel such as Action Fraud.
Frequently asked questions
Is NHS a scam?
NHS itself may be legitimate, but scammers often impersonate it. Always verify the source independently before acting.
How can I verify NHS safely?
Use the official website directly, avoid message links, and confirm contact details through trusted public sources.
What should I do if I already interacted?
Change passwords, contact your bank if needed, keep evidence, and report the incident through the relevant UK reporting route.