Coronavirus Vaccine Phishing Campaigns

NHS Digital continues to respond to several ongoing spam email and SMS campaigns seeking to exploit the ongoing UK coronavirus vaccination efforts. These campaigns variously claim to be from the UK Government, the NHS, Test and Trace, GP surgeries, pharmacies, or from other health organisations like the WHO.

Typically, the content of these messages attempts to direct users to phishing sites or connect them to high-cost premium number services, although in some cases the messages contain false or misleading information about the coronavirus vaccines themselves. NHS email users should report suspicious messages by forwarding as an attachment to spamreports@nhs.net or by using the ‘Report Phishing’ button on the ribbon within Microsoft Outlook. Suspicious emails found outside the NHS can be forwarded to the NCSC’s Suspicious Email Reporting Service at report@phishing.gov.uk. Spam SMS messages should be forwarded free of charge to the 7726 SMS reporting service. For further guidance on how to identify malicious messages please see the following links.

• https://digital.nhs.uk/cyber-and-data-security/guidance-and-assurance/guidance-on-phishing-emails

• https://www.ofcom.org.uk/about-ofcom/latest/features-and-news/coronavirus-scam-calls-and-texts

• https://www.ncsc.gov.uk/guidance/suspicious-email-actions

• https://www.actionfraud.police.uk/report-phishing

Tips to avoid being scammed:

• Take your time; don’t be rushed.

• If someone claims to represent a charity, ask them for ID. Be suspicious of requests for money up front.

• Don’t assume everyone is genuine. It’s okay to reject, refuse or ignore any requests. Only criminals will try to rush or panic you. Check with family and friends before accepting offers of help if you are unsure.

• If you are online, be aware of fake news and use trusted sources such as www.gov.uk or www.NHS.uk websites. Make sure you type the addresses in and don’t click on links in emails or messages.

• Only purchase goods from legitimate retailers and take a moment to think before parting with money or personal information.

• Know who you’re dealing with - if you need help, talk to someone you trust or get in touch using the numbers at the end of this letter.

• Protect your financial information, especially from people you don’t know. Never give your bank card or PIN to a stranger.

• Be suspicious of requests for updating your account details. If someone pressures you, they are unlikely to be genuine.

• Be aware of the amount of personal information you share on social media; not all quizzes are harmless.