The Counter Fraud Team has received reports of NHS staff receiving scam phone calls.

HR will never contact you via WhatsApp to discuss work-related issues. Legitimate communication from HR will always be through the usual channels such as work email, phone calls, or in-person meetings.

Here's their update on what to do if it happens to you:

What’s happening?

• Scam calls are being received on mobile phones.
• A pre-recorded message says HR needs to discuss an issue and requests you add a number to WhatsApp.
• Once the number is added, the fraudster may attempt to:
  • Steal personal or financial information.
  • Gain access to your WhatsApp account via verification codes.
  • Send malicious links to install harmful software on your device.

One staff member who received this call advised that it came to his personal mobile. When he answered, it was a pre-recorded message in a female voice which simply said there was a HR issue and asked that he add the number to WhatsApp.

What you should do:

• Do not add the number to WhatsApp.
• Hang up and block the number immediately.
• If you are unsure if HR have genuinely tried to contact you, please get in touch with them using contact details from your organisation’s intranet.
• Never share personal or financial details through WhatsApp or over the phone unless you’ve independently verified the contact.

If you believe you have already been targeted or have shared any information:

• Report it to Action Fraud on 0300 123 2040
• Contact your bank immediately if financial information may have been compromised.

You can also contact to the Counter Fraud Team by emailing yhs-tr.counterfraudyork@nhs.net

The latest Counter Fraud bulletin is available - see attachment below.