The NHS Test & Trace scheme is already being exploited by cybercriminals, with a new smishing (SMS-phishing) attack telling citizens that they have been in contact with someone who has COVID-19. An example of the text message is below. These kinds of fake text messages typically include a link to a malicious site, or will ask the receiver to share personal information that could then be used to commit identity fraud.
Be warned that text messages like this one are already in circulation as the track & trace service launches. They are not genuine and anyone going to that website link will be asked to submit personal information that will then be used by fraudsters. pic.twitter.com/P11vyuPVmr
— Stuart Fuller (@theballisround) May 28, 2020
NHS has written specific guidelines on how they will contact people in the Test & Trace scheme, which can be found here.