Coronavirus/COVID-19 Scams

Scammers are taking advantage of the fear and uncertainty surrounding the COVID-19 coronavirus. Some of the most common scams are described below. It is best to rely on official government and other reputable websites for information. For U-M updates and information, see:

Fake Contact Tracing

Some scammers are pretending to be contact tracers. They are attempting to profit off of confusion around contact tracing to steal your identity, money, or both. Check out this information from the FTC to help you tell the difference between real contact tracers and scammers: Help COVID-19 contact tracers, not scammers (FTC).

Fake Test Results at U-M

As of March 2021, we have had a report of a student at U-M receiving fraudulent email claiming that their COVID-19 test results are available. The university is using the LynxDx company for its weekly COVID-19 testing. See COVID-19 Sampling & Tracking Program for details about receiving test results. Check the ResponsiBLUE app for the status of your test. You will receive email from LynxDx 48–72 hours after your test letting you know your results are available. To see the results, you need to create and check an account at lynxdx.health. Carefully examine any email you receive about test results. Hover over links with your mouse on a computer (or press and hold on a smartphone or tablet) to see the actual URL. Do not follow links that go somewhere other than lynxdx.health for U-M COVID-19  test results.

Fake Testing and Medical Supplies

Increasing numbers of scams involve offers of free or discounted coronavirus testing. Offers of tests sold by phone and email are not reliable. You should contact your county's health services for information on testing in your area. There are also scams offering personal protective equipment (PPE), thermometers, and other medical supplies which are often fake or offered at a price-gouging premium. 

Fraudulent Cures and Treatment

According to the Federal Trade Commission (FTC), "There currently are no vaccines, pills, potions, lotions, lozenges or other prescription or over-the-counter products available to treat or cure Coronavirus disease 2019 (COVID-19)—online or in stores." Any website or email that claims otherwise is a scam.

Fraudulent Requests for Donations

If someone wants donations in cash, by gift card, or by wiring money, don’t do it. See the FTC's How to donate wisely and avoid charity scams.

Identity Theft: Don't Share Your Vaccine Card on Social  Media

Some people are so happy and relieved to get the COVID-19 vaccine that they immediately share a photo of their vaccination card on social media. Unfortunately, that gives scammers access to your name, birth date, and the location where you got the vaccine. That information can be used for identity theft. For tips about sharing the good news safely, see this from the Better Business Bureau: BBB Tip: Don’t share your COVID-19 vaccine card on social media.

Insurance and Medical Billing Scams

A number of scams now involve offers of insurance, frequently using phone calls that pressure the recipient by referring to the coronavirus outbreak. These scams may attempt to obtain personal information or payments for the fake insurance. Another fraud involves calls or texts claiming that a friend or family member has been hospitalized for COVID-19 and that you need to pre-pay their medical bills for them to receive treatment. Do not rely on caller ID, which can me faked, check out the Phone Scams and Voice Phishing page for tips on spotting fake calls.

Job Offer Scams

Be wary of emails offering part-time jobs related to the coronavirus pandemic. These are scams designed to trick you out of you money, personal information, or both. These are a variation on fake job offers we have seen at U-M in the past (IA Notice: Student part-time job scam, 11/26/18).

Malicious Tracking Maps

Attackers are circulating links to malicious websites disguised as COVID-19 maps on social media and through misleading emails. When you visit one of these sites, you may be prompted to install an applet. The applet then infects your device with malware that steals data such as login credentials and banking information. Do not install unknown apps, applets, .exe files, or other files when prompted to do so by a website.

Stick to verified COVID-19 tracking maps, and double-check the URL of linked websites before clicking. See a list of legitimate sites in the box above.

Misinformation

Misinformation email specific to U-M, including email impersonating faculty or staff, has been reported to Information Assurance. An example of such email can be found in a vaccine misinformation phishing alert on Safe Computing. 

Beware of emails and social media postings that claim to be from experts. For the most up-to-date information about the coronavirus, visit the Centers for Disease Control and Prevention (CDC) and the World Health Organization (WHO).

Phishing

The U.S. Secret Service has reported a number of phishing scams related to the virus, and the media are reporting still more.

  • People may receive a phishing email claiming to be from a medical/health organization that links to fraudulent sites where people are asked to enter their email, password, and other identity information. The attachments contain malware.
  • Some malicious actors are sending phishing emails claiming to be from a local hospital, telling the recipient they have been in contact with someone who has tested positive for COVID-19. The recipient is asked to open a attachment for a form to take to an emergency clinic. The form contains malware.

Do not open unsolicited, unexpected attachments and shared documents! Instead,  look up the number for the alleged sender and contact them via phone to confirm the email and the enclosed information. Learn about phishing on Safe Computing at Phishing & Suspicious Email.

Text Message and Robocall Scams

The Federal Communications Commission has received reports of scam and hoax text message and robocall campaigns offering fake home virus test kits, bogus cures, and more. Police departments from Maine to Florida are warning of a text message scam in which the recipient gets a text saying someone they came in contact with has tested positive or shown symptoms for COVID-19, recommending self-isolation, and providing a link for more details. Do not click links in unexpected texts from numbers or people you do not know. Do not accept phone calls from numbers you do not recognize.

Media Articles and Web Resources