NHS scam: Fake text messages ask for bank details in exchange for Covid vaccine

The scam asks for bank details, something legitimate NHS texts do not do

Adam Smith
Thursday 07 January 2021 12:01 EST
Comments
(Pixabay License Free for commercial use No attribution required)

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

A viral scam purportedly from the NHS is being sent to people in the UK with the intention of collecting bank information.

The fraudulent text reads: “NHS: We have identified that your [sic] eligible to apple for your vaccine. For more information and to apply, follow here”.

It then sends receipients to a link that asks them for their sort code, account number, and the long card number in order to “prove ownership of address”, something that legitimate NHS texts would not do.

Despite not coming from the NHS, the text mimics official websites with the NHS logo at the top and similar menu and search icons on the right hand side.

However, the NHS web page has a lock icon next to its URL. This means that the website uses HTTPS, which requires a security certificate. These certificates are only issued once the site owner's identity has be validated.  

The fake NHS website, and many other scam websites, does not have this lock. Users, especially vulnerable older people, should look out for this clue as to whether a website is legitimate or not, and never hand over personal information unless they are absolutely sure the website is valid.

The BBC reports that the scam website in question has already been taken down, but that does not mean that similar websites may not exist.  

"If you receive a text or email that asks you to click on a link or for you to provide information, such as your name, credit card or bank details, it's a scam," Derbyshire Police advise.

Other scams have been rampant since the start of the coronavirus pandemic, including those targeted at people buying PPE and hand sanitiser, reducing their council tax, job retention schemes, Netflix scams, and others. 

The best advice is to remain suspicious and be wary of anything that arrives in your inbox or chat apps if you are not expecting it, or comes from source you do not recognise.  

Be aware of opening attachments and clicking links as scammers update their methods regularly to avoid detection.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in