Scam Alert: New NHS Prescription Phishing Scam Sweeping Inboxes

 

It’s the start of the week, and scammers are already hard at work trying to exploit our trust in the NHS. We’ve seen a surge in a particular phishing email today that claims to offer a "simple" way to order NHS prescriptions online.

While the NHS does offer legitimate digital services, this specific email is a malicious scam designed to steal your personal information or financial details. Here is what you need to look out for.

---

The Anatomy of the Scam

The email, which often carries the subject line "TR: Save Time on NHS Medications IT," looks professional at a quick glance, but several red flags reveal its true nature:

• Suspicious Sender Address: The email claims to be from "UK Pharmacy Subscription Notice IT," but the actual email address is a random string of characters from a Hotmail account (avrom-158jerrold_145.carter@hotmail.com). Official NHS communications will always come from an @nhs.net or @nhs.uk domain.

• Vague Branding: While it mentions "NHS Prescriptions," the layout is generic. It lacks the official NHS logo, a registered pharmacy name, or a physical address—all of which are legal requirements for UK pharmacies.

• Urgency and Convenience: Phishing scams often use "Save Time" or "Register Now" buttons to rush you into clicking before you’ve had a chance to think.

• The "Unsubscribe" Trap: In many of these emails, even the "Unsubscribe" link is a trap used to verify that your email address is active, leading to even more spam.

---

Why is this dangerous?

If you click the "Register Now" button, you will likely be taken to a spoofed website that looks like an NHS login page. Scammers use these sites to harvest:

1. Your NHS login credentials.

2. Personal details (Name, DOB, Address).

3. Payment information for "delivery fees" or "pre-payment certificates."

---

How to Stay Safe

• Don’t Click: If you receive this email, do not click any links and do not download any attachments.

• Check the Sender: Always tap or click on the sender's name to see the full email address. If it’s a personal account (like Hotmail, Gmail, or Outlook), it is a scam.

• Use Official Channels: To order prescriptions online safely, always use the official NHS App or the website of a well-known, high-street pharmacy you trust.

• Report It: You can forward suspicious emails to the National Cyber Security Centre at report@phishing.gov.uk.

Stay vigilant and share this with friends or family members who might be less tech-savvy. Scammers rely on us being in a hurry—taking thirty seconds to check the sender's address can save a lot of heartache.

 

Scam Alert: Don’t Fall for the "Pharmac4U" Prescription Phishing Email

Scam alert: "Pharmac4U" Prescription Phishing Email

 

There is a new phishing email circulating in the UK targeting people who manage their NHS prescriptions online. Using the names of well-known services like Pharmacy2U, scammers are trying to trick patients into clicking a malicious "Register" button.

Here is what you need to look out for to keep your data safe.

The Red Flags: How to Spot the Fake

Looking at the screenshot provided, there are several immediate "tells" that this is a scam:

• The Sender Address: While the name says "Repeat Prescriptions UQ," the actual email address is a random Hotmail account (jecho_jed@hotmail.com). A legitimate NHS-affiliated service would use an official domain (e.g., @nhs.net or @pharmacy2u.co.uk).

• Inconsistent Branding: The header of the email says "Message from Pharmac4U," but the body text mentions "Pharmacy2U." This inconsistency is a major red flag; professional companies do not get their own names wrong.

• Generic Language: The email uses broad, generic phrases like "Skip the pharmacy queues." While Pharmacy2U is a real, registered service, scammers often "spoof" their name to gain your trust.

• The "Register" Button: This is the trap. Clicking this button likely leads to a fake website designed to harvest your name, address, date of birth, and potentially your GP details or payment information.

Why This Scam is Dangerous

Because many of us legitimately use online pharmacies to manage repeat prescriptions, an email like this can look "normal" at first glance. Scammers rely on us being in a hurry and clicking without checking the sender’s details.

How to Protect Yourself

1. Check the Sender: Always tap on the sender's name to see the full email address behind it. If it looks like a personal account or a string of random letters, delete it.

2. Go Direct: If you want to register for an online pharmacy, never click a link in an unexpected email. Instead, type the address directly into your browser (e.g., www.pharmacy2u.co.uk) or use the official NHS App.

3. Look for Typos: Misspellings like "Pharmac4U" are deliberate or careless mistakes that legitimate companies rarely make.

What to Do if You Receive This

• Do Not Click: Don’t click the "Register" button or any links within the email.

• Report It: You can forward suspicious emails to the Suspicious Email Reporting Service (SERS) at report@phishing.gov.uk.

• Delete: Once reported, delete the email and empty your trash folder.

Stay vigilant and share this with friends or family members who might be expecting a prescription notification!

Get Involved in Shaping South East London's Health Future - April 2025 Newsletter Highlights

This April 2025 "Get Involved" newsletter from health organisations in Bexley, Bromley, Greenwich, Lambeth, Lewisham, and Southwark highlights numerous opportunities for local residents to share their experiences and shape future healthcare services. Key initiatives include:

• Improving Surgical Waiting Times: Patients and carers are collaborating with hospitals to develop online information and support resources for those awaiting surgery. Share your experiences in upcoming quarterly meetings.
• Art in Maternity Care: Discover the powerful impact of the "Count Yourself Lucky" project, using art to highlight the challenges faced by migrant women accessing maternity services. A new film amplifies this important message.
• Improving Diabetes Services: Feedback gathered from diverse communities is being used to co-develop solutions for better type 2 diabetes and pre-diabetes care, focusing on food, communication, self-management, education, and trust.
• Trust and Health Creation Partnership: A new partnership is empowering grassroots organisations to build trust in health services and promote community-led wellbeing initiatives in areas facing health inequalities.
• Preconception Health Webinar: Learn why preconception health matters and how community groups can support families in this area during a free online session on May 23rd.
• Shaping Children's Cancer Services: Contribute your experiences to help Evelina London Children’s Hospital develop the best possible specialist cancer services for families in south London and the South East.
• Know Your Kidneys Event: Free online sessions in July and October offer information and support for individuals in London and Surrey Heartlands living with early-stage chronic kidney disease.
• Dementia Community Research Network Conference: Join a free event on May 19th to learn about the latest dementia research and connect with others passionate about improving care.
• ARC South London Knowledge Exchange Event: Attend a free event on June 12th to explore collaborative research tackling health inequalities and engaging lived experience.
• Foreign-Language Parent Education Classes: Expectant parents in South East London can access free online classes in Spanish, Portuguese, French, Arabic, Romanian, and Somali, led by native-speaking healthcare professionals.
• Change NHS Next Steps: While surveys are now closed, the insights gathered will inform the development of the 10-Year Health Plan, with a national summit having taken place to discuss key themes.

In this update you will find out more about:

• Improving information and support for patients and carers, while waiting for surgery
• Showing the power of art helping to improve maternity and neonatal care in south east London - ‘Count yourself lucky’
• Working with local communities to improve diabetes services in south east London
• Developing the Trust and Health Creation Partnership
• Joining an online - Why preconception health matters?
• Helping shape future children’s cancer services
• Know your kidneys - patient information event
• Signing up to the Applied Research Collaboration (ARC) South London Knowledge exchange event
• Registering to attend the Dementia Community Research Network Conference
• Joining foreign-language parent education classes
• Next steps for Change NHS: Help build a health service fit for the future

This newsletter encourages residents to actively participate in shaping local health services through various engagement opportunities. Share this information with your networks to ensure diverse voices are heard.

Read more here and at SEL.

The biggest scams of the past five years

From fake NHS Covid tests to QR-code parking scams, we've exposed hundreds of scams to help you stay one step ahead of the scammers.

Take a look at the biggest, nastiest and most convincing scams we've seen since we launched the Which? Scam Alert newsletter five years ago.

Some of these are still active today

Source: Which? (24 Apr 2025)

NHS scam cost victim £5,000

After losing £5,000 to a convincing NHS scam, the victim was only reimbursed 50% by Santander. But after following Which? advice, they were able to reclaim the full amount.

Discover how it worked, what to look out for and what you should do if you fall victim to a similar scam.

How to recover your money

Source: Which? (13 Aug 2024)

Get an NHS COVID Pass from the official source

Get an NHS COVID Pass, find out who can get one, how to get one, and what to do if yours has expired from the official links below:-

NHS COVID Pass. 

Get an NHS COVID Pass >. Get an NHS COVID Pass online

More at GOV COVID-19

Beware of NHS COVID pass fraud

12 emerging fraud threats to watch out for

A recent Office for National Statistics report shows that fraud now accounts for 40% of all crimes recorded.

Scammers have exploited our fear and confusion, whether by impersonating the government to offer fake Covid-19 grants, setting up fake NHS websites to steal card details, or posing as delivery companies to target online shoppers.

We reveal what the latest data from Action Fraud tells us about fraudsters' tactics and the 12 emerging threats we all need to watch out for.

Fraudsters' latest tactics

New Scams to Watch Out For in 2022

Mostly related to the US but the UK scam that is highlighted in this useful video is the Fake NHS Omicron PCR test scam and how it works and what to look out for to not fall for it.

Also to be aware of bold new scams to watch out for in 2022.

Needless to say do no click on links that turn out of the blue. Take time to research and check this blog for advice and further information on similar scams.

If you receive a call you believe to be fraudulent, hang up. If you are suspicious about an email you have received, forward it to report@phishing.gov.uk. Suspicious text messages should be forwarded to the number 7726 which is free of charge.

If you believe you are the victim of a fraud, please report this to Action Fraud as soon as possible by calling 0300 123 2040 or visiting www.actionfraud.police.uk.

Beware of NHS COVID pass fraud - new text scam

 

Click to view enlarged - Fake COVID pass fraud text

See new scam text message in the above screenshot above received by a local Borough resident. Notice the spelling mistake and the fake url.

Visit the post here for further tips and advice.

Beware of NHS COVID pass fraud

 

Criminals are using the NHS COVID Pass as a way to target the public by convincing them to hand over money, financial details and personal information.

They are sending imitation text messages, emails and making phone calls pretending to be from the NHS, and offering fake vaccine certificates for sale online and through social media.

If you are contacted about your NHS COVID Pass:

1. Be alert to links and attachments in unexpected text messages or emails
2. Do not respond to requests for money, passwords or financial details
3. Challenge: Could it be fake?
4. Use the official NHS COVID Pass website (see below)

The NHS COVID Pass is available to demonstrate your COVID-19 status either in a digital or paper format via the NHS App, the NHS website or by calling 119.

For information on how to get your free NHS COVID Pass, visit www.nhs.uk/nhscovidpass.

What to do if you suspect you have been a victim of an NHS COVID Pass scam

If you receive a call and suspect it to be fraudulent, hang up. If you are suspicious about an email, forward it to report@phishing.gov.uk. If you are suspicious about a text message, forward it to the number 7726, which is free-of-charge.

If you believe you are the victim of a fraud, please report this to Action Fraud as soon as possible by visiting actionfraud.police.uk or calling 0300 123 2040.

If you have any information relating to NHS COVID Pass or vaccine certificate fraud you can stay 100% anonymous by contacting Crimestoppers online at covidfraudhotline.org or phone on 0800 587 5030.

Poster: Beware of COVID Pass FRAUD (pdf)

Source: Action Fraud [17-09-2021]

Locked out: Digitally excluded people’s experiences of remote GP appointments

Healthwatch England has launched a new report Locked Out: Digitally excluded people’s experience of remote GP appointments. 

They are working with NHS England to improve patient’s experience of and access to digital care. 

The move to more digitally-led healthcare has worked well for some but excluded others over the past year. Our report explores how people have been excluded and what needs to happen to get the care they need.

Background

The move to remote GP appointments as a result of the COVID-19 pandemic happened very quickly. NHS England advised GP practices to triage patients by a telephone or online consultation system before providing them with an appointment and only providing face-to-face appointments where clinically necessary. 

We know that while this has worked well for some, it has created barriers for others. We spoke to people traditionally more likely to experience digital exclusion to understand why and how this can impact their healthcare experiences, especially during the pandemic. These groups included older people, people with disabilities, and people with limited English.

Key findings

Our new report investigates why people have been excluded, including lack of digital skills, language barriers and lack of interest in using technology to go online. 

We identified five principles for post-COVID-19 care to ensure everyone has access to the appointments they need.

Five principles for post-COVID digital healthcare

1. Maintain traditional models of care alongside remote methods and support people to choose the most appropriate appointment type to meet their needs. 
2. Invest in support programmes to give as many people as possible the skills to access remote care.
3. Clarify patients' rights regarding remote care, ensuring people with support or access needs are not disadvantaged when accessing care remotely. 
4. Enable practices to be proactive about inclusion by recording people's support needs.
5. Commit to digital inclusion by treating the internet as a universal right.

Source: HealthWatch

Watch out for scams related to NHS Test and Trace

 

The Government carries out public health quarantine compliance checks on individuals who have a legal duty to quarantine at home for 10 days following international travel.

This means that if you are required to quarantine, you may receive a visit from someone working on behalf of NHS Test and Trace to make sure you are complying with your legal duty.

What will happen when I get visited?

Staff employed on behalf of the NHS Test and Trace service will come to the address listed on your passenger locator form.

• The staff will be wearing NHS Test and Trace branded clothing.
• They will identify themselves verbally and present an ID card with information including their name, role and employer.
• The staff will follow social distancing guidelines where possible.
• The staff will state your name and ask you to confirm it. They will also ask to see your driving licence or passport to confirm your identity.
• They will then ask you a few questions. This will help establish whether you are following your duty to quarantine and enable them to provide additional information, support or guidance where necessary.

You may receive follow-up visits within the 10-day quarantine period.

What NHS Test and Trace staff will not do

NHS Test and Trace staff will follow coronavirus (COVID-19) guidelines when carrying out compliance checks and will only ask you questions relating to your duty to quarantine.

NHS Test and Trace staff should not:

• enter your home
• ask you to provide your name - staff will already have your name and will ask ‘Am I speaking to —–?’ for you to confirm
• ask for your National Insurance number, telephone number or any other identifying information, other than your passport or driver’s licence
• photograph your identification document
• ask for your financial details, such as your bank or credit card information
• ask you for money or issue a fine. NHS Test and Trace staff have no legal power to issue a fixed penalty notice or a fine. Only the police can issue fixed penalty notices for breaching quarantine rules

If someone visits you claiming to be from NHS Test and Trace and you do not believe they are legitimate, call 999 and ask for the police.

By whom are NHS Test and Trace team members employed?

• The Government have hired a private contractor to undertake these checks. This contractor (or their approved sub-contractors) will have ID relating to their company and a Home Office letter of authority relating to the checks

I’ve received an email/text suggesting that I will be visited, is this legitimate?

• No – the NHS Test and Trace team will not provide prior notification of a visit

Will NHS Test and Trace staff contact me to tell me that they will visit?  

• No – you will not receive prior notification of a visit by the NHS Test and Trace team

What if I receive a visit from the NHS Test and Trace team and I am not meant to be quarantining?

• If you receive a visit from the NHS Test and Trace team that you were not expecting – because you do not need to quarantine or because you have not travelled abroad – there is no action you need to take.
• If you have not travelled abroad during this time, or there is no reason for you to receive a visit from NHS Test and Trace, you can contact NHS Test and Trace online or telephone 119 to confirm that you should not be quarantining, or telephone 999 if a suspected crime is in progress.

If there is reason to believe you may be breaching quarantine rules, staff may refer your case to the police and may receive a visit from them.

If the police have reasonable grounds to believe that you have committed a criminal offence in breach of your duty to quarantine, they may issue you with a fine (fixed penalty notice). Fines start at £1,000 for a first offence and can increase up to £10,000 for repeat offences.

If you are not happy with the service, you can contact NHS Test and Trace online or telephone 119.

Source: Action Fraud (21-07-2021)