Don't let cyber criminals take flight with your COVID passport

Over the last few days, Action Fraud have issued a warning regarding COVID passport scams. This is similar to the scam that was reported in relation to booking your COVID-19 jab.

Criminals are using the NHS COVID Pass as a way to target the public by convincing them to hand over money, financial details and personal information.


They are sending imitation text messages, emails and making phone calls pretending to be from the NHS, and offering fake vaccine certificates for sale online and through social media.


If you are contacted about your NHS COVID Pass:

  1. Be alert to links and attachments in unexpected text messages or emails

  2. Do not respond to requests for money, passwords or financial details

  3. Challenge: Could it be fake?

  4. Use the official NHS COVID Pass website (see below)

The NHS COVID Pass is available to demonstrate your COVID-19 status either in a digital or paper format via the NHS App, the NHS website or by calling 119.


For information on how to get your free NHS COVID Pass, visit www.nhs.uk/nhscovidpass.


What to do if you suspect you have been a victim of an NHS COVID Pass scam

If you receive a call and suspect it to be fraudulent, hang up. If you are suspicious about an email, forward it to report@phishing.gov.uk. If you are suspicious about a text message, forward it to the number 7726, which is free-of-charge.


If you believe you are the victim of a fraud, please report this to Action Fraud as soon as possible by visiting actionfraud.police.uk or calling 0300 123 2040.


If you have any information relating to NHS COVID Pass or vaccine certificate fraud you can stay 100% anonymous by contacting Crimestoppers online at covidfraudhotline.org or phone on 0800 587 5030.

The contents of this website are provided for general information only and are not intended to replace specific professional advice relevant to your situation. The intention of The Cyber Resilience Centre for the South East is to encourage cyber resilience by raising issues and disseminating information on the experiences and initiatives of others. Articles on the website cannot by their nature be comprehensive and may not reflect most recent legislation, practice, or application to your circumstances. The Cyber Resilience Centre for the South East provides affordable services and Trusted Partners if you need specific support. For specific questions please contact us.

The Cyber Resilience Centre for the South East does not accept any responsibility for any loss which may arise from reliance on information or materials published on this document. The Cyber Resilience Centre for the South East is not responsible for the content of external internet sites that link to this site or which are linked from it.