Protect Your Tech

‘Covid Pass’ application scam

What’s the threat?

Scammers are trying to trick you into paying £4.99 for a ‘Covid Pass’ that shows your Covid-19 status.

They’re sending text messages that contain links to what appears to be an NHS website. The URL begins with HTTPS, suggesting it’s secure, but tapping it takes you to a scam site where you’re prompted to “enter the exact name you used when you registered with your GP surgery”.

On following pages you’re asked for your date of birth, postcode, and an email address where they can deliver “your Covid pass credentials to be registered on our NHS app”.

Once you’ve done that, you arrive on a page that asks you for “a payment of £4.99 to process your Covid Pass application”. Below that request there are boxes for your card number, expiry date and card security code (CSC) – see screenshot.

How can you stay safe?

Never respond to a text or email that claims to be from the NHS and asks for money. The Covid Pass does exist and you can get it for free, though it’s devolved across the four nations: England ( www.snipca.com/38730); Northern Ireland ( www. snipca.com/39319); Scotland ( www.snipca.com/38731) and Wales ( www.snipca. com/38733).

Remember that scammers will continue to exploit every twist in the Covid-19 story. We’ve previously reported on scams that urged you to sign up for a ‘Coronavirus Digital Passport’ (see Issue 610), and we expect these to intensify if the Government pushes ahead with plans to introduce so-called ‘vaccine passports’ for nightclubs and other crowded indoor areas. Make a mental note to ignore any that are sent to you.