The NHS has been made aware of fraudsters contacting individuals purportedly on behalf of the NHS test and trace service in order to obtain personal and financial information.
The fraudsters use social engineering techniques to convince the victim that they have either been identified as having been in contact with a person who has coronavirus, or that they personally have tested positive, to divulge personal information and to encourage them to purchase a further testing kit online.
NHS organisations should provide staff with the following guidance:
- If NHS test and trace service contacts you it will be by text message, email or telephone call. Texts will originate from ‘NHStracing’ and calls from 0300 013 5000.
- Where you are contacted by text message or email, they will ask you to access the NHS test and trace contact-tracing website.
- Contact tracers will:
- ask for your full name and date of birth to confirm your identity, and postcode to offer support while self-isolating
- ask about the coronavirus symptoms you have been experiencing
- ask you to provide the name, telephone number and/or email address of anyone you have had close contact with in the 2 days prior to your symptoms starting
- ask if anyone you have been in contact with is under 18 or lives outside of England
- Testing and isolation advice supplied by the service will be in accordance with the following guidance
- Contact will also be made with the (Trust/CCG) to allow for organisational contact tracing to take place.