Coronavirus vaccine phishing campaigns

These campaigns variously claim to be from the UK Government, the NHS, Test and Trace, GP surgeries, pharmacies, or from other health organisations like the WHO. Typically, the content of these messages attempts to direct users to phishing sites or connect them to high-cost premium number services, although in some cases the messages contain false or misleading information about the coronavirus vaccines themselves.

NHS email users should report suspicious messages by forwarding as an attachment to or by using the ‘Report Phishing’ button on the ribbon within Microsoft Outlook. Suspicious emails found outside the NHS can be forwarded to the NCSC’s Suspicious Email Reporting Service at

Spam SMS messages should be forwarded free of charge to the 7726 SMS reporting service.