NHS Appointment Scam Texts: Warning Signs & How to Report
Criminals are sending fake NHS text messages claiming your appointment is cancelled or needs confirmation—here's how to spot and avoid them.
What a fake NHS text looks like
An NHS scam text is a smishing message that pretends to come from the NHS so you tap a link and hand over personal, bank, or card details. An example of the style is: NHS: your upcoming appointment has been cancelled. To rebook, confirm your details here: nhs-rebook.example.
The NHS can send genuine messages. NHS App guidance says you may be able to view messages from NHS services and may also get messages in other ways, such as text messages. That is why the safer test is not "did the NHS text me?" but "is this message asking me to use a link to pay, claim money, or provide sensitive details?"
Why a fake NHS text is convincing
Scammers use sender names, timing, and health-related urgency to make a message feel important. A missed appointment or cancelled treatment can make people act quickly. Some texts also offer a grant, refund, or payment to lure people into entering bank details.
Two facts help. First, the NHS App lets people manage healthcare and, where available, book or manage appointments and view messages. Second, the NHS Constitution says NHS services are free of charge except limited circumstances sanctioned by Parliament. A surprise text asking you to pay a fee to keep, rebook, or receive an NHS appointment should be treated as a scam until you have checked directly.
Signs an NHS text is a scam
- It asks you to pay a fee to keep, rebook, or receive an NHS appointment.
- It asks for bank or card details through a text link.
- It offers a grant, refund, or payment that you must claim through a link.
- It asks for full personal information to "confirm" or "verify" your appointment.
- The link is not an
nhs.ukaddress, or it is a shortened or lookalike link. - It pressures you to act immediately or lose your appointment.
- You cannot match it to a real appointment in the NHS App or with your GP surgery or hospital.
- Errors can be clues, but a tidy, official-looking text can still be a scam.
How the NHS text scam works
First, a text claims your appointment has changed, or that you are eligible for a payment, treatment, or priority booking. Second, it pushes you to a link to rebook, confirm, or claim. Third, the link opens a fake NHS-style page asking for personal details and often card or bank information. Fourth, the criminals use those details for payments, identity fraud, or follow-up scams.
Because a health message feels urgent, the safest move is to pause and check through the NHS App, your NHS account, your GP surgery, or the hospital using contact details you find yourself.
How to check an NHS text safely
Do not tap a suspicious link or call a number from the text. Instead:
- Check the NHS App or your NHS account for appointments and messages.
- Contact your GP surgery or hospital directly using a number from a letter, your records, or the official
nhs.ukwebsite. - Treat any payment request for keeping, rebooking, or receiving an NHS appointment as unsafe unless you can verify it directly.
- Never enter bank or card details through a link in an unexpected NHS text.
- If the text cannot be matched to a real appointment, treat it as fake.
If you are unsure whether a linked site is a copycat, our guide on Is This Website a Scam? A Practical Checklist Before You Buy walks through the checks, and our DVLA Vehicle Tax Text Scam: How to Spot the Fake (UK) guide covers the same trick using another official name.
If you clicked or shared details
Act quickly. If you entered card details or made a payment, contact your bank or card issuer using the number on your card. Tell them it was a scam and ask them to stop the card, monitor the account, and discuss any dispute or chargeback options.
If you sent money by UK bank transfer on or after 7 October 2024, APP fraud reimbursement rules may apply to eligible Faster Payments and CHAPS transfers. The PSR rules include a 13-month claim window, a maximum claim amount of £85,000, possible exclusions, and a possible excess of up to £100. Report the payment to your bank as fraud as soon as possible.
If you shared personal information, consider Cifas Protective Registration at cifas.org.uk and monitor your credit reports with Experian, Equifax, and TransUnion. Keep the text, screenshot, payment receipt, and any website address you used.
How to report an NHS scam text (UK)
Forward the text to 7726. It is free, and it reports the message to your mobile provider, which can investigate and block the sender. You can also send a screenshot or screen recording to the NCSC at report@phishing.gov.uk.
If the scam reached you by email, forward it to report@phishing.gov.uk. If you lost money, shared sensitive information, or were hacked, report it to Report Fraud at reportfraud.police.uk or on 0300 123 2040 if you are in England, Wales, or Northern Ireland. In Scotland, report to Police Scotland on 101.
You can also tell the relevant GP surgery, hospital trust, or NHS organisation using contact details you find yourself.
Frequently asked questions
Does the NHS send appointment texts?
Yes, NHS services can send genuine messages, including text messages. That means a text is not automatically fake. The red flag is a link asking you to pay, claim money, or provide bank, card, or sensitive personal details.
The NHS is free - so why would an NHS text ask for payment?
Be cautious. The NHS Constitution says NHS services are free of charge except limited circumstances sanctioned by Parliament. A surprise text asking you to pay to keep, rebook, or receive an NHS appointment is not a normal way to handle care and should be checked directly.
Can the NHS really cancel my appointment by text?
Genuine reminders or updates can come by message or text, depending on the service. If a text says your appointment is cancelled or changed, check it in the NHS App or contact your GP surgery or hospital directly. Do not use the link in the message.
I clicked the link and entered my details - what now?
If you entered card or bank details, call your bank using the number on your card and ask them to stop the card and watch the account. If you shared personal information, consider Cifas Protective Registration. Then report the scam text to 7726 and to Report Fraud if money, sensitive details, or hacking were involved.
How do I report an NHS scam text?
Forward it to 7726 for free. If you have a screenshot or email, send it to report@phishing.gov.uk. If you lost money, report it to Report Fraud in England, Wales, or Northern Ireland, or to Police Scotland on 101 in Scotland.