The COVID-19 pandemic created uncertainty for people across the UK and unfortunately, scammers were quick to take advantage. From fake government messages and fraudulent financial offers to phishing emails, bogus health information and impersonation scams, criminals used the pandemic as an opportunity to deceive individuals and businesses.
Although the immediate crisis has passed, the methods used during the pandemic continue to provide valuable lessons about how fraudsters operate. Many of the techniques associated with COVID scams—such as impersonation, urgency, fake websites and requests for personal information—are still commonly used in modern fraud.
Understanding the warning signs can help you protect yourself, your family and your business from becoming a victim.
What Is a COVID Scam?
A COVID scam is any fraudulent activity that uses the coronavirus pandemic, related services or public concern about COVID-19 as a way of gaining someone’s trust, money or personal information.
During the pandemic, criminals frequently impersonated trusted organisations and authorities. The UK’s National Cyber Security Centre (NCSC) warned that cyber criminals exploited the pandemic through malicious emails, websites and other communications. (National Cyber Security Centre)
Scams could arrive through:
- Emails and text messages
- Telephone calls
- Social media
- Fake websites
- Online advertisements
- Messaging applications
- Door-to-door approaches
- Fraudulent investment opportunities
The same basic techniques can still be seen in other types of fraud today.
Common Types of COVID-Related Scams
Fake Government Communications
Fraudsters may pretend to represent a government department or another official organisation. They may claim that you need to provide information, complete a form, pay a charge or take immediate action.
The use of official-looking logos, language and website designs can make these communications appear convincing.
However, an official appearance does not necessarily mean a message is genuine.
Fake Health or Medical Offers
During the pandemic, scammers exploited public concerns about health by promoting fake treatments, tests, medical products and other services.
Any unsolicited message offering a supposed medical solution should be treated carefully, particularly if it asks for payment or personal information.
Phishing Emails and Text Messages
Phishing involves using fraudulent messages to encourage people to click a link, open an attachment or provide sensitive information.
The NCSC advises people not to click links or enter information when they receive suspicious messages. (National Cyber Security Centre)
A fraudulent message might appear to come from a bank, government department, healthcare organisation or another trusted source.
Financial and Investment Scams
Some fraudsters used the economic uncertainty surrounding COVID-19 to promote supposedly profitable investments, financial assistance or other money-making opportunities.
Promises of guaranteed returns, unusually high profits or limited-time opportunities should always be approached with caution.
Charity and Donation Scams
Criminals can exploit people’s willingness to help others by creating fake fundraising campaigns or pretending to represent legitimate charities.
Before donating, verify the organisation independently rather than relying solely on information supplied in an unsolicited message.
Key Warning Signs of a COVID Scam
Recognising the behaviour of a scammer is often more useful than looking for one particular spelling mistake or suspicious logo.
1. You Are Being Pressured to Act Quickly
Scammers frequently create a sense of urgency. You may be told that you have only a few hours to respond, that your account will be closed or that you will face a penalty if you do not act immediately.
The NCSC identifies urgency, authority, emotion and scarcity as common tactics used by criminals to encourage people to act without thinking. (National Cyber Security Centre)
Take a step back and verify the claim before doing anything.
2. Someone Requests Personal or Financial Information
Be particularly cautious if an unexpected message asks for:
- Bank details
- Passwords
- PINs
- Security codes
- Copies of identification
- Personal information
- Payment details
Never assume a request is legitimate simply because the sender appears to represent an official organisation.
3. The Message Contains a Suspicious Link
A message may direct you to a website that looks almost identical to a legitimate organisation’s website.
Before clicking, consider whether you were expecting the message and check the website address carefully.
When verifying an organisation, use contact information obtained independently rather than using a telephone number or link contained in the suspicious communication. (National Cyber Security Centre)
4. The Offer Seems Too Good to Be True
Free products, guaranteed financial returns, exclusive opportunities or unusually generous offers can all be used as bait.
If an opportunity seems exceptionally good, take time to investigate it before providing money or information.
5. Someone Claims to Be From an Official Organisation
Impersonation is one of the most effective tools used by fraudsters.
A scammer may claim to be from a government department, bank, healthcare organisation, police force or another trusted body.
The NCSC specifically warns that criminals may impersonate trusted organisations to gain people’s confidence. (National Cyber Security Centre)
If you are unsure, end the conversation and contact the organisation through independently sourced contact details.
How to Protect Yourself From COVID-Related Fraud
A few simple habits can significantly reduce your risk.
Pause before responding. Do not allow a caller or message to pressure you into making an immediate decision.
Verify independently. Contact the organisation using its official website or another trusted source.
Avoid clicking unexpected links. If you need to access an online account, enter the organisation’s website address yourself or use an established bookmark.
Protect your passwords. Avoid reusing passwords across important accounts and change any password that may have been compromised.
Keep your devices updated. Security updates can help protect against known vulnerabilities.
Be careful about what you share online. Information available through social media can sometimes be used by criminals to make fraudulent communications appear more convincing. (National Cyber Security Centre)
What Should You Do If You Think You Have Been Scammed?
If you have responded to a suspected scam, do not panic. Acting quickly can help limit the potential damage.
If you have provided banking information, contact your bank immediately. If you have disclosed a password, change it anywhere that password has been used. If you clicked a suspicious link or installed software at a scammer’s instruction, follow appropriate device-security measures, including running antivirus software where available. (National Cyber Security Centre)
You should also preserve evidence of the incident.
Keep copies of:
- Emails and text messages
- Telephone numbers
- Email addresses
- Website addresses
- Payment records
- Bank statements
- Screenshots
- Social media profiles
- Names and aliases used by the individual
- Relevant correspondence
Do not delete potentially important evidence before you have considered whether it may be useful for reporting or an investigation.
When Can a Private Investigator Help?
Not every scam requires a private investigator. However, professional investigative support may be useful when you need to establish who is behind a suspected fraud, identify an individual or gather information surrounding a financial dispute.
A private investigator may use lawful investigative techniques such as open-source research, background checks, asset tracing and other forms of information gathering, depending on the circumstances and applicable UK law.
For example, investigative assistance may be considered where:
- You have suffered a significant financial loss
- The identity of the person involved is unclear
- You suspect someone has provided false information
- An individual has disappeared after receiving money
- You need to establish someone’s identity or background
- You are dealing with suspected online impersonation
- You need help organising information and evidence for a solicitor or other professional adviser
A private investigator cannot guarantee that lost money will be recovered and investigations should always be conducted lawfully and proportionately.
Reporting Suspected Fraud in the UK
Reporting a scam can help authorities identify patterns and protect other potential victims.
For England, Wales and Northern Ireland, fraud can be reported through Report Fraud. In Scotland, suspected fraud can be reported to Police Scotland. The NCSC also provides reporting routes for suspicious emails, texts, websites and other online scams. (National Cyber Security Centre)
If money has been taken from your account, contact your bank as soon as possible as well.
Stay Alert Beyond COVID-19
COVID-related scams demonstrated how quickly criminals can adapt their methods to major events and public concerns. The pandemic may no longer be the central theme of fraudulent communications, but the underlying techniques remain relevant.
Impersonation, fear, urgency, fake websites, misleading offers and requests for sensitive information continue to feature in many forms of fraud.
The best defence is to slow down, verify unexpected requests and avoid making important financial or personal decisions under pressure.
If you believe you have been targeted by a sophisticated scam and need help establishing the facts, a professional private investigator may be able to assist with lawful investigative enquiries and evidence gathering.