Dyfed Powys Police Economic Crime Team have become aware of a new Covid Vaccine scam:
DC Gareth Jordan from the Cyber Crime Unit says that in the latest variant of the scam, the victim receives an email that they are on the Covid vaccination list and they need to select whether they do or don’t want the injection.Either choice will take the victim to a site where they will be requested to enter personal / financial data such as bank account details, card numbers, Driving licence ID, on the pretext that the site is checking their validity. The site is doing exactly the opposite, it is taking their details so they can be used for in more direct ‘spear phishing’ or to utilise the details for ID Theft and also financial fraud.
A simple check of the URL will show that this is a scam – but too many people don’t check. In the example below, at first glance the email appears to come from [noreply@nhs.gov.uk]. If you hover over the reply email address – the real return address can be seen [Kanda@visceral.co.jp] in this example.
The NHS are not sending these emails out – it is a scam.
Stop: Take a moment to think before parting with your money or information – it could keep you safe.
Challenge: Could it be fake? It’s ok to reject, refuse or ignore any requests. Only criminals will try to rush or panic you.
Protect: Contact your bank immediately if you think you’ve fallen victim to a scam and report it to the Police.
Report suspicious emails to: report@phishing.gov.uk You can also report suspicious texts by forwarding the original message to 7726, which spells SPAM on your keypad.
The police, or your bank, will never ask you to withdraw money or transfer it to a different account. They will also never ask you to reveal your full banking password or PIN.
Do not click on links or attachments in unexpected or suspicious texts or emails. Confirm requests are genuine by using a known number or email address to contact organisations directly.
