In this section
Cyber criminals, or scammers, can use emails, text messages, phone calls and fake websites to pretend to be trusted organisations, including NHS organisations.
They do this to try and trick people into sharing personal information, banking details, passwords or security codes, or to click links which install harmful software.
The NHS, or the Trust, will never ask you to provide sensitive information in an unexpected email or text message.
Scammers may:
- Pretend to be from the NHS, a hospital, your GP practice or another trusted organisation.
- Send emails or text messages with links to fake websites.
- Telephone patients saying there is a problem with an appointment or medical record.
- Ask for payment details, passwords or security information.
- Try and make you feel that you need to act quickly, so you do not check the message first.
How to protect yourself
How you can help keep yourself safe:
- Be careful with unexpected emails, texts or phone calls.
- Check the senders email addresses and website addresses carefully before clicking links.
- Never share passwords, banking details or security codes in response to an email, text message or phone call.
- Remember that a message may still be a scam even if it contains NHS, Trust or hospital branding, or information about you.
- Keep your devices, software and internet browser up to date.
If you think you have received a scam message
- Delete the message or report it as spam or junk.
- Contact the Trust, your hospital or service directly if you are unsure that the message is genuine. Do not use contact details given in the message itself.
- Contact your bank immediately if you have shared financial information.
- Contact Report Fraud if you believe you have been the victim of fraud.
- Do not click links or open attachments.
- Do not reply to the message.
Online safety when using MyMFT
MyMFT allows you to securely access and manage your care at MFT online.
We want to reassure patients that there has been no change to how we communicate with you through MyMFT. We will never ask for your MyMFT password or verification codes by email, text message or telephone.
Scammers will sometimes use NHS branding, including the MyMFT or MyChart name or logo to make emails, text messages, phone calls and websites appear genuine.
They may try to:
- Steal your login details.
- Ask for payment information.
- Request verification or security codes.
- Offer free gifts, rewards or prizes.
- Direct you to fake websites that look similar to MyMFT.
If something does not feel right, stop and check before responding. Do not click links and do not provide personal or financial information.
How to recognise genuine MyMFT communications
Always access MyMFT through our official website, the online portal or app.
Our official MyMFT website is https://my.mft.nhs.uk/MyMFT
If you receive MyMFT notifications from MFT, they will come from our official email address: donotreply@mft.nhs.uk
Before clicking a link or entering information:
- Check the sender’s email address carefully.
- Check the website address shown in your browser.
- Be cautious of spelling mistakes, unusual wording or unexpected requests.
- MyMFT does not run giveaways – Be cautious of free offers messages claiming you have won a prize or can receive a free gift. These are likely to be scams.
Protect your password and verification codes
Remember, we will never ask for your MyMFT password or verification codes by email, text message or telephone.
Passwords and verification codes should only ever be entered directly into the official MyMFT website or app.
If you think your MyMFT account has been compromised or you have responded to a scam message:
- Change your MyMFT password immediately.
- Report suspicious emails as spam or junk to your email provider.
- Review the contact details held in your MyMFT account.
- Contact the MyMFT helpdesk for support:
- Email: mymft@mft.nhs.uk
- Phone: 0161 529 6000