Forum Topic

Is it a scam?

So it's Sunday, I get a text from my GP practice inviting me to book a Covid vaccination appointment. Initial reaction, great! Then, I  look at the URL and - ah - the domain is " -.NHS.me": Montenegro's a bit far to go? Otherwise, the text looks fine, from the correct number but that's easily spoofed; however, it's addressed to me personally - so does that mean my data's been leaked? Decide to investigate; I do a "who is" on the domain; it's registered to a GB company: "accuRx Ltd"; a bit of assistance from Mr Google and Bloombegh tells me they're a software development company providing messaging services for medical teams and their patients, and they have a website indicating NHS approval - of course fake websites do exist but it does all seem to stack up ...OK, so the link goes to as booking page that suggests the Scout Hut in Oxford Road, it does want to confirm my DOB but doesn't ask for my bank account, and I'm now booked in for my first shot tomorrow.It does make me question after all the warnings about scams and fake links and fake websites in emails and texts why the NHS and one of its agents is using a Montenegro domain name. My initial inclination was to delete the text and put it down as a smishing attempt but it would appear " book.NHS.me" is valid! I'll confirm after my jab tomorrow 🙂

Michael Ixer ● 1913d8 Comments

As a friend of mine, who had his jab today and was also puzzled by the domain, said: ".me" domains are probably cheap ☺

Michael Ixer ● 1912d

Ah yes, that's all very well in practice, but, tell me, how does it work out in theory, eh?

David Ainsworth ● 1912d

Had same message Friday  thankfully I had no idea how to look up the domain etc. So gave my date of birth got a slot and had the jab today.

Andy Pike ● 1912d

Thanks, Ivonne. I'm booked in tomorrow afternoon at the Scout Hut. I do have a confirmation and a reminder text now. If its a scam it's an elaborate one just to get my date of birth! I hope they've got some vaccine when I arrive ☺(Although some colleagues and I were once puzzling how can hack of one of our client's PC had made any money for the hackers (while losing money for the client). It was only when ActionFraud indicated that clients at a number online brokers had been similarly breached it became apparent that the money making part of the fraud was to increase the price of some junk stocks then sell them ... a good example of the other thread: go for the weakest security - the home user, possibly with out of date antivirus and patches, rather than a corporate system with heavy security monitoring ... )

Michael Ixer ● 1912d

I'm fairly certain this is legitimate. This is just one piece of information I checked:https://support.accurx.com/en/articles/4794856-i-have-been-invited-to-book-my-covid-19-vaccination-through-a-book-nhs-me-link-is-this-legitimateThere's was no attempt to elicit any financial or other information. In did check my date of birth but that's standard NHS practice. My GP's practice also regularly uses texts as a communication channel. The only anomaly here is the rather anomalous url being used.I'm just concerned as someone connected with IT/Infosec that a lot of time and effort is spent to try and stop people clicking on fraudulent links; this eithgerf negates some of that awareness education opening people up to scams or means others will avoid this link because they didn't think its valid and miss out on ther vaccination. Only this week I've seen an very realistic NHS website scam on a Zoom presentation, the only giveaway being in  the url!Barbara, I was given a choice of time but not day, or I could defer booking until later.

Michael Ixer ● 1912d

I do not know if it is a scam or not.My husband got a text from our GP practice and he phoned them al most immediately.There was no request for date of birth.  Just the surgery's phone number to ring if he wanted to take it up.We did not investigate the message any further though.My husband just rang the surgery and they confirmed it was sent but they could not give him an appointment because there was a shortage of vaccines.....

Ivonne Holliday ● 1912d

Michael, did they just give you a date, or ask if it was convenient. Only the surgery usually rings you with a date. They also have little squares of paper on a table with our name on at the Scout Hall. You receive a card when you have had the vaccine, with what vaccine you were given and when you should here for the second dose.

Barbara Stevens ● 1913d

I would contact your GP, they should known one would persume.

Ben Rainbow ● 1913d