Public warned over Covid Pass text message scam

19 August 2021, 16:34

Scammers
Scammers. Picture: PA

Cybersecurity experts have flagged a new text message scam targeting people’s credit card details by claiming they need to pay for a Covid Pass.

A new text message scam is targeting people’s credit card details by posing as the NHS and asking for payment in order to create a Covid Pass, experts have warned.

Cybersecurity firm Malwarebytes has published details of the scam and urged the public to be wary of text messages containing links and asking for payment details.

It follows a spike in fraudulent messages from cybercriminals posing as parcel delivery firms during lockdown and coinciding with the rise in online shopping, with the alerts claiming a small processing fee is needed to be paid in order to release a package for delivery.

This latest scam involves a text message containing a link to a website mimicking the official NHS website, which asks users to input the exact name registered with their GP surgery, as well as their home address.

Screenshot of a webpage used as part of a scam targeting credit card details by posing as the NHS asking for payment to process a Covid Pass application
The fraudulent website has been designed to look identical to an official NHS page (Malwarebytes)

It then shows a screen asking for credit card details, falsely claiming a £4.99 payment is needed to “process your Covid Pass application”.

An NHS Covid Pass or vaccine certificate is used to show a person has had both doses of a coronavirus vaccination and are available to everyone in the UK through the official NHS app or website and does not require any payment.

They can be used to gain entry into domestic venues asking for proof of vaccination as well as for overseas travel.

“This attack is aimed at residents of the UK. It makes use of social engineering in a similar fashion to other pandemic-themed SMS texts, with a strong psychological aspect tied in for good measure,” Malwarebytes said in a blog post on the scam.

“It’s important to note that the UK does have an actual Covid Pass system in place. There’s a proper process in place, and it doesn’t involve handing money over to random websites. It’s also worth noting there’s been a number of other scams along these same lines.

“Should you receive one of these text messages, you can safely ignore it and report for spam while you’re at it.”

By Press Association

More Technology News

See more More Technology News

Instagram Take A Break feature

Instagram will now tell users when to take a break from the app

Molly Russell

Molly Russell coroner challenges social media firms to help make internet safer

WhatsApp Disappearing Messages

WhatsApp expands disappearing messages tool

A young girl uses TikTok on a smartphone

Euro 2020 and sea shanties among TikTok’s highlights of the year

The Duke of Cambridge

William records audio walking tour for Apple

Virgin Media sign

Virgin Media TV services restored after power outage

Child on laptop

Social media a ‘conveyor belt’ for child abuse images, says NSPCC

Astronaut Tom Marshburn replaces a broken antenna (Nasa/AP)

Spacewalking astronauts avoid debris as they repair antenna

Virgin Media headquarters in Reading

Virgin Media customers unable to access some channels 10 hours after outage

Virgin Media sign

Virgin Media hit by TV service outage

Person using laptop

Christmas shoppers warned over fake online reviews

NHS app

NHS App is most downloaded free iPhone app this year

Tesla

Tesla officially moves headquarters from California to Texas

Broadband research

Which street in the UK has the slowest broadband?

Laptop stock

Women’s safety campaigners launch petition to bolster Online Safety Bill

MI6 Chief Richard Moore speaks at the International Institute for Strategic Studies, London

Chinese spies are targeting the UK, warns MI6 chief