FRAUD NEWSFLASH - Exercise caution with unusual email requests

The MIAA Fraud Team have been made aware by several staff, across a number of NHS organisations, of emails doing the rounds that appear to be from genuine NHS staff and / or colleagues, and sometimes even close colleagues, from both genuine NHS email addresses and also web-based email accounts.

These emails seem to have one of two purposes:

• Asking the receiver to look at or download an attachment, or click on a link, with no explanation.
• Asking someone from HR / Payroll how to go about changing their bank account.

All NHS staff should maintain vigilance over the authenticity of the emails that they receive. If a work colleague usually signs off “Best Wishes, Kaz”, and the email you receive is different, phone them to check if it’s genuine. If the tone or context of any email appears different to normal, please be cautious.

As always, always ‘Take Five’ to think twice before opening an attachment or clicking a link. 

How to report fraud

• All incidents of suspected fraud against the NHS organisation should be reported to the organisation's  nominated AFS or the NHSCFA by calling 0800 028 4060 or online at cfa.nhs.uk/reportfraud