NHS and Healthcare Scams: How to Protect Yourself from Medical Fraud

Why Healthcare Is a Prime Target for Fraudsters

Healthcare is one of the most trusted institutions in any society. When someone receives a call, letter, or message appearing to come from the NHS, a hospital, or another healthcare provider, their instinct is typically to take it seriously and to cooperate. This trust is precisely what fraudsters seek to exploit.

Healthcare scams take multiple forms, from calls impersonating NHS booking systems to fraudulent offers of prescription medication, from fake vaccine administration to bogus health surveys that harvest personal information. For older adults, who typically have more frequent legitimate contact with healthcare services and who may rely on those services significantly, the deception can be particularly convincing and the consequences particularly serious.

Understanding the specific forms that NHS and healthcare fraud takes, and the clear warning signs that distinguish them from genuine healthcare contact, is the most effective protection available.

Common NHS and Healthcare Scams

Fake NHS Appointment Calls

Scammers impersonating NHS appointment booking services have called older adults with offers of free health checks, cancer screenings, hearing tests, eye tests, and similar services. The call is convincing because it mimics the type of health service the NHS genuinely does provide and targets people who might genuinely benefit from such services.

The scammer uses the call to harvest personal information including date of birth, NHS number, address, and sometimes banking details for supposed administrative purposes. This information is then used for identity fraud, financial fraud, or sold to other criminal operations.

The NHS does sometimes contact patients by phone to book appointments, but will never ask for banking details and will not cold-call to offer screenings that have not previously been discussed with your GP. If you receive a call like this and are uncertain whether it is genuine, end the call and contact your GP practice directly to verify whether an appointment has been arranged for you.

COVID-19 and Vaccination Scams

The COVID-19 pandemic generated a wave of healthcare fraud that has provided a template for subsequent scams. Fraudsters called, texted, and emailed older adults impersonating NHS vaccination booking services, requesting payment for vaccines (which are free on the NHS), requesting banking details for supposed administrative purposes, or directing people to fake websites to book appointments that harvested their personal information.

Similar scams continue to circulate relating to flu vaccination, shingles vaccination, and other preventive health services. The NHS does not charge for vaccinations included in the NHS vaccination schedule and will not contact you requesting payment or banking details in connection with these services.

Prescription Medication Scams

Online and telephone fraud operations offer prescription medications outside the normal healthcare system, typically at prices significantly below pharmacy retail prices or claiming to provide medications that are difficult to obtain through normal channels. These offers are dangerous for several reasons.

Medications obtained outside the regulated healthcare and pharmacy system may be counterfeit, contaminated, incorrectly dosed, or entirely different from what is claimed on the label. The World Health Organization estimates that a significant proportion of medications sold through unregulated online channels are falsified. For older adults taking medication for serious conditions, the substitution of an effective medication with a counterfeit or wrong product can have life-threatening consequences.

In the UK, legitimate online pharmacies must be registered with the General Pharmaceutical Council and the MHRA and must display the NHS approved pharmacy logo if they supply NHS prescriptions. Always purchase medications from registered pharmacies and never from websites or callers operating outside the regulated system.

False Benefits and Healthcare Entitlement Calls

Scammers call older adults claiming to be from the NHS, the Department of Health, or social services, offering new healthcare benefits or entitlements. The supposed benefit might be a free medical device, a care package, adaptations to the home, or assistance with healthcare costs. To process the benefit, the caller requests personal and financial information.

The NHS and social services do provide genuine benefits and entitlements to older adults, so this type of scam is particularly convincing. The key distinguishing feature is the request for financial information, which legitimate healthcare benefit claims never require over an unsolicited phone call.

Fake NHS Survey and Research Calls

Callers claiming to conduct NHS or health research surveys request detailed personal, medical, and financial information in the name of health research. Genuine NHS and university research does involve patient surveys, but legitimate research is conducted with full ethical oversight and explicit, informed consent and does not collect financial details.

If you receive a survey call claiming to be from the NHS or a healthcare research organisation, ask for the name of the research project, the organisation conducting it, and a contact number you can verify independently. Genuine research organisations will provide this information readily.

Warning Signs of Healthcare Fraud

Certain warning signs appear across almost all forms of NHS and healthcare fraud. Recognising them quickly allows you to disengage before providing any information.

Any request for payment or banking details in connection with NHS services is a red flag. NHS services are provided free at the point of use in the UK, and you will never be asked to provide payment card details for NHS appointment bookings, vaccinations, or NHS-commissioned health checks.

Urgency or pressure to provide information immediately is a warning sign. Genuine healthcare services operate within normal administrative timeframes and do not create emergency pressure to respond to a contact.

Requests for your NHS number, National Insurance number, or full date of birth over an unsolicited call should be treated with caution. While the NHS does use these identifiers, they should never be provided to a caller you have not independently verified is from the NHS.

Unsolicited offers of health services that you have not previously discussed with your GP deserve careful scrutiny. The NHS does proactively invite patients for certain screenings and vaccination programmes, but these invitations typically come by letter from your GP surgery or NHS screening programme, not as cold calls asking for financial information.

How to Verify the Legitimacy of a Healthcare Contact

The simplest and most reliable way to verify whether a healthcare contact is genuine is to end the contact and independently verify through official channels.

For calls claiming to be from the NHS, end the call and contact your GP practice or local NHS trust directly using the contact details from the NHS website or from a letter from your GP. Ask whether the appointment or service mentioned is genuine.

Do not call back any number provided by the original caller, as this number may also be controlled by the fraudsters. Obtain the contact details for the NHS organisation independently, from the NHS website or a letter from your GP surgery.

For letters claiming to be from the NHS, check the letter carefully against previous genuine NHS correspondence. Fraudulent letters sometimes have subtle differences in branding, address details, or formatting. If uncertain, contact your GP practice to verify.

Reporting Healthcare Fraud

If you believe you have been targeted by NHS or healthcare fraud, report it to Action Fraud in the UK. You can also report concerns about illegal online pharmacies to the Medicines and Healthcare products Regulatory Agency (MHRA). If financial information has been provided, contact your bank immediately.

In other countries, report healthcare fraud to the relevant national fraud reporting service: the FTC in the US, Scamwatch in Australia, and the Canadian Anti-Fraud Centre in Canada.

Your report contributes to the intelligence that allows fraud units to identify and disrupt the criminal operations behind healthcare fraud. Even if no financial loss has occurred, reporting an approach that you identified as fraudulent helps protect others in your community who may be less fortunate.

Trust is the foundation of the relationship between patients and healthcare services, and it is precisely because that trust is so fundamental and so widely felt that healthcare fraud is particularly damaging. Protecting yourself from these scams protects not only your finances and your personal information, but your ability to engage confidently with the genuine healthcare services you depend upon.