 |
| Scam alert: "Pharmac4U" Prescription Phishing Email |
There is a new phishing email circulating in the UK targeting people who manage their NHS prescriptions online. Using the names of well-known services like Pharmacy2U, scammers are trying to trick patients into clicking a malicious "Register" button.
Here is what you need to look out for to keep your data safe.
The Red Flags: How to Spot the Fake
Looking at the screenshot provided, there are several immediate "tells" that this is a scam:
The Sender Address: While the name says "Repeat Prescriptions UQ," the actual email address is a random Hotmail account (
jecho_jed@hotmail.com). A legitimate NHS-affiliated service would use an official domain (e.g.,@nhs.netor@pharmacy2u.co.uk).Inconsistent Branding: The header of the email says "Message from Pharmac4U," but the body text mentions "Pharmacy2U." This inconsistency is a major red flag; professional companies do not get their own names wrong.
Generic Language: The email uses broad, generic phrases like "Skip the pharmacy queues." While Pharmacy2U is a real, registered service, scammers often "spoof" their name to gain your trust.
The "Register" Button: This is the trap. Clicking this button likely leads to a fake website designed to harvest your name, address, date of birth, and potentially your GP details or payment information.
Why This Scam is Dangerous
Because many of us legitimately use online pharmacies to manage repeat prescriptions, an email like this can look "normal" at first glance. Scammers rely on us being in a hurry and clicking without checking the sender’s details.
How to Protect Yourself
Check the Sender: Always tap on the sender's name to see the full email address behind it. If it looks like a personal account or a string of random letters, delete it.
Go Direct: If you want to register for an online pharmacy, never click a link in an unexpected email. Instead, type the address directly into your browser (e.g.,
www.pharmacy2u.co.uk) or use the official NHS App.Look for Typos: Misspellings like "Pharmac4U" are deliberate or careless mistakes that legitimate companies rarely make.
What to Do if You Receive This
Do Not Click: Don’t click the "Register" button or any links within the email.
Report It: You can forward suspicious emails to the Suspicious Email Reporting Service (SERS) at
report@phishing.gov.uk.Delete: Once reported, delete the email and empty your trash folder.
Stay vigilant and share this with friends or family members who might be expecting a prescription notification!
