Real NHS / Healthcare Text vs Health Scam Text
How to tell a genuine NHS or healthcare appointment message from a health-themed phishing text.
Last reviewed: 1 June 2026
Healthcare services really do text patients, and most of the messages you receive are genuine. Practices send appointment reminders, results notifications and invitations for screening or vaccination, usually from a named practice or a recognisable shortcode, and usually asking you to confirm, call a number you already know, or simply turn up. Health scam texts work because they arrive into that ordinary stream and borrow its tone, and because anything touching your health carries a weight that makes ignoring it feel risky. A message hinting that treatment will be cancelled, or that a payment is needed to secure care, hits hardest when you are already waiting for something. The distinction that matters most is money and data. Genuine NHS care does not ask you to pay by text or to confirm your date of birth, NHS number and card details together in one message.
Side-by-side comparison
| Real healthcare text | Health scam text | |
|---|---|---|
| Sender | Recognisable NHS shortcode or named practice | Generic mobile number or unknown shortcode |
| Action requested | Confirm appointment, call a known number, or visit a clinic | Click a link to pay a fee or 'verify' personal details |
| Payment | Never asks for card or bank details by text | Demands a fee or insurance payment via link |
| Link domain | nhs.uk, official practice domain, or no link | Lookalike domain with hyphens or random characters |
| Urgency | Routine reminder tone; cancellation by phone is fine | Threats to cancel care or release medical records if you don't act now |
| Personal data | May use your name or NHS number for context only | Asks you to confirm date of birth, NHS number, and card details together |
Common red flags
- Link to a non-nhs.uk domain
- Request for card or bank details to confirm an appointment
- Threat that treatment will be cancelled unless you pay
- Combined request for NHS number plus payment in one message
- Pressure to act within minutes or hours
Verification steps
- Call your GP practice or hospital directly using the number on their official website
- Log in to the NHS app to see any genuine appointment notifications
- Never follow a payment link from a health text — pay only through official patient portals
- Forward suspicious texts to 7726 (free spam-reporting number in the UK)
What not to do
- Don't click any payment or 'verify details' link in a health text
- Don't provide card details to confirm a medical appointment
- Don't assume the sender is genuine because it uses your name or NHS number
A safe response
Do not tap the link, and do not reply to the message. Instead, check the same information somewhere you control: open the NHS App, or ring your GP surgery or hospital on a number you find on their own website or on a letter you already have, and ask whether the message came from them. Staff are used to this question and will not mind. Forward the text to 7726 free of charge, then delete it. If you have already entered card details, ring your bank on the number printed on the back of your card and ask them to block and replace it. If you shared personal details, tell your practice so they can note it on your record.
Frequently asked questions
I already clicked the link but did not enter anything, am I at risk?
Usually the risk is low. Opening a page mostly confirms to the sender that your number is active, which may mean more messages arrive, so expect that and ignore them. Do not go back to the page. If you entered anything at all, treat it as shared: change that password everywhere it is used, and ring your bank if card or account details were involved. If your phone starts behaving oddly or apps appear that you did not install, have it checked.
Will I miss a real appointment if I ignore a text I am unsure about?
No, because you are not ignoring it, you are checking it another way. Every genuine appointment also exists in your practice or hospital records, and most now appear in the NHS App, so a quick look or a phone call confirms it within minutes. If the appointment is real, you can confirm or rearrange it on that call. If nothing shows up anywhere, the message was not real and there was nothing to miss.
Does the NHS ever send texts with payment links?
NHS services do not charge patients for standard appointments and will never ask you to pay via a link in a text message. Any such request is a scam.