Covid passport scam email

[orangepeelsz]

I'm posting this here for traffic

I have had my final covid jab last week and I got an email this morning, I'm so savvy with this stuff through my work and it looked totally legit. From NHS and saying I needed to click the link to receive or reject the covid passport now that I'm fully vaccinated.

I believed, I followed the link (I noticed the address that appeared in the bar at the top looked odd but then it flashed to a legit looking one so I didn't question it.

Asked for name, address. DOB, telephone number. I filled it all in stupidly then the next page asked for card details not to take payment but just to confirm identity, that raised massive alarm bells and I realised it was fake. I clicked the other links to t's and c's etc on the bottom of the page and they did nothing so clearly a scam page!

I am now worried they have my name, address, email address and telephone number and dob . Thankfully I stopped and didn't give card details

Do you think I should now be worried they have that information?

It looked like this

You should always check the web address. One look at that would have told you it wasn’t legit.

“May help reopen airports and other badly hit areas of the economy” yeeeeeh, legit wording there, not!

Yes I’d be worried you’ve been fooled into giving all that personal information away OP. Thank goodness you didn’t give your card details but your DOB, address etc could be used. Start putting extra security on your accounts and read more carefully going forward. Often, as in this case, the wording gives it away. Although the address bar is clearly a scam even if it did take you to a legit looking thing after.

I realise I shouldn't have done it is there anything I should be doing now to protect myself or am I now just waiting for someone to start taking credit out in my name or something

Yes change your e mail address and link all your accounts to the new e mail address.

Request extra security measures from your bank. Most of them offer this service so it means extra password before access.

Check your social media account settings and ensure they are secure, that you can’t be easily found and that you change your e mail linked to them so the old one cannot be used to ‘send new password’ to.

Thanks so much

I use a different email address for social media so that's fine

I've changed my email with bank and credit card.

I think everytime I access any kind of website account now I will swap to my other email address.

For anyone else in this position there is a government phishing email address that you forward the email to so I've just done that and got an email back with helpful advice too.