COVID-19 Scam Calls, Texts and Emails: What Still Matters
During the COVID-19 pandemic, fraudsters used health concerns, testing offers, and relief payments to persuade people to share personal information or send money. Those examples remain useful, but an old article or forwarded message is not evidence that a particular benefit, testing program, or payment is available now.
Individuals and families may encounter these claims in unexpected calls, texts, emails, or social media messages. Businesses may receive similar messages aimed at employee information, invoices, or account access. The practical question is the same: can the request be verified without using the contact details supplied by the sender?
Treat old program claims as historical information
Pandemic-era stimulus checks, emergency assistance, and free-test distribution operated under specific programs and time periods. Do not assume a message about an unclaimed payment or free supplies describes a current offer. Check the relevant agency’s official website or contact a known provider directly before submitting information.
Be especially cautious when a message combines an old program name with a new deadline, a processing fee, or a demand for your Social Security number. A familiar subject can make a fraudulent request feel credible even when its details do not match an actual program.
Recognize the request behind the message
Warning signs include pressure to act immediately, a request for account credentials, an unexpected attachment, or instructions to pay by gift card or cryptocurrency. A caller may claim to represent a government agency, medical provider, insurer, or delivery service. Caller ID and a recognizable logo do not independently verify that identity.
The FTC’s scam prevention guidance recommends slowing down and checking claims before responding. Hang up and use a number from an existing statement or the organization’s official website. Open your account through its usual app or a saved address rather than through the message.
Protect health and identity information
Do not provide insurance details, identification documents, payment information, or a one-time security code to an unverified caller. If the request concerns medical treatment or test results, contact your established provider through its normal channel. Verify any claimed product or service independently rather than accepting testimonials or urgent promises as proof.
If a suspicious message reaches a work account, follow the organization’s reporting process before forwarding it to colleagues. Avoid opening attachments simply to see what they contain. Preserve the message in a way that allows an IT or security professional to review it safely.
If you clicked, paid, or shared information
- Contact your bank, card issuer, or payment provider promptly if money or payment information was involved.
- If credentials were disclosed, use a trusted device to change the affected password and secure related accounts.
- Save the original message, sender details, website address, transaction records, and a short timeline.
- Contact the real insurer or provider if health insurance information was disclosed.
For suspected identity misuse, IdentityTheft.gov provides reporting and recovery steps. Consumer fraud can be reported at ReportFraud.ftc.gov; internet-enabled fraud can also be reported through FBI IC3. Keep the report reference numbers with your records.
Keep the focus on verifiable facts
For individuals, businesses, and attorneys reviewing a fraud case, an organized record is more useful than speculation about the caller’s identity. Note what was requested, what you provided, and what happened next. Our Cyber & Digital Investigations information describes related investigative work. If accounts or devices appear compromised, see what to do next when you suspect a compromise.