Identified Scam:

Received a Text/Email Asking You to Validate Your COVID-19 Status? It's a Scam

Scammers are impersonating government departments in an attempt to steal your information in this new COVID-19 scam.
Updated 26 October 2021
Received a Text/Email Asking You to Validate Your COVID-19 Status? It's a Scam
Identified Scam:
Key Finding

Fake emails and text messages impersonating government agencies ask you to validate your COVID-19 vaccination status.

Key Risk

You risk having your identity stolen and your accounts compromised.

Sections on this page
  1. How the COVID-19 Status Validation Scam Works
  2. Signs of this Scam to Watch Out For
  3. How to Beat this Scam
  4. What If You Fall for This Scam?
  5. Report COVID-19 Status Validation Scams
  6. Frequently Asked Questions

Yet another scam jumping on the back of the COVID-19 pandemic has surfaced in the U.S., asking people to validate their vaccination status. Coronavirus scams now include:

How the COVID-19 Status Validation Scam Works

Scammers have changed tactics, transitioning from offering fake vaccines to impersonating government officials and requesting your coronavirus vaccine validation. Here's how the scam works and how to protect yourself. 

You Receive an Email or Text Message from "Government"

Currently, there have only been reports of this scam occurring via text message or email; however, it's likely scammers may even start calling their targets. 

Emails may use official government logos and even be sent from email addresses that look similar to the real deal. Some have reportedly been impersonating:

  • State health departments
  • The Centers for Disease Control and Prevention (CDC)
  • The Department of Motor Vehicles (DMV)
  • State transportation departments

Example COVID-19 status verification text message.
Example of a scam text message asking for COVID-19 status verification.

The message says the government needs to validate your COVID-19 status and that they need your information urgently. 

As with most scams, the criminals here use a sense of urgency to get you to act before thinking it through—if the government is requesting something urgently, fear can make you act quickly. 

Example Scam Email

Virginia Department of Health requires an immediate validation of your Covid-19 status. This is a Waiver Validation Update and a compulsory one-time validation for all Virginia residents.


Virginia hospitals are reporting hospitalizations to VHHA on a daily basis. Please visit the VHHA dashboard for more detailed information. 

Don't click the link! Any request to validate your COVID status is a scam! 

Example COVID-19 status verification email scam.
In this example of a COVID-19 status verification scam, you'll see the email isn't coming from an official government department.

You Click the Link and Enter Your Information

You're taken to a fake government website if you click the link in the scam text or email. Again, much like the email, it may look legit, using official government logos and branding. 

If you enter your information and submit the form, your information is sent to the scammer, who can now use it to steal your identity and money. 

When you land on a website that's asking for your information, the first thing you should do is check for red flags, such as:

  • URLs not matching official government sites (you can even check this before clicking the link in the first place).
  • Misspellings, bad grammar, and typos. 
  • Sketchy-looking logos or design. 

Example scam website (COVID verification status)
Scam COVID status verification sites will have many red flags to look out.

Your Identity is Stolen

Armed with your sensitive information, such as your Social Security number (SSN), the scammer can now steal your identity and commit fraud. This includes, but isn't limited to:

  • Applying for credit cards in your name. 
  • Applying for loans in your name. 
  • Gaining access to your bank accounts. 
  • Collecting unemployment benefits in your name. 

Not only are you putting your money at risk, but identity theft can take years to recover from

Signs of this Scam to Watch Out For

There are a few red flags of a scam that you'll be able to spot both within the text message/email itself, then on the fake website (if you click the link). 

Within the email or text message:

  • Check the email address it's coming from. It won't come from an official government address (although it may be similar). 
  • Look for typos, spelling mistakes, and grammatical errors. 
  • Look at the link URL—if it doesn't go to an official government website, it's a scam. 
    • Within emails, you can hover over the link to see where the link goes without clicking on it. 
  • Analyze the logos and designs within the email. If it looks sketchy, it probably is. 

If you've clicked the link and have landed on a website:

  • Check the URL—if it's not an official government website, it's a scam. 
  • Look for spelling errors, grammatical issues, and typos. 
  • Analyze the website's design and logos—if something doesn't look right, don't trust it. 

Don't click around the website for more information, as this can open you up to more scams. When in doubt, Google the department/agency to find their actual website. 

How to Beat this Scam

Do not click the link if you receive a text or email requesting that you validate your COVID-19 status or confirm you received the vaccine. State governments have issued statements confirming that any requests for this type of validation are scams. 

If you do click on the link, do not enter or submit your information. Simply close your browser. 

If you're unsure if the message you received is legitimate or not, contact the government department directly using the contact information found on their official website. DO NOT use the contact information provided in the email or text as this will be fake and connect you directly to the scammer. Follow these steps:

  • Google the state department or agency that supposedly sent the message. 
  • The legitimate website should be at the top of the search results (if not in the top three results). 
  • Confirm the website is legitimate—government websites usually end in ".gov" instead of ".com" or other suffixes. 
  • Call the number on the official website and ask if the message you received is legitimate. 

What If You Fall for This Scam?

If you click on the link and enter your information on the fake government website, you must act quickly to protect your identity and money. Follow these steps:

  • Change your passwords for your online accounts (if you entered a password into the form).
    • This is important if you entered a password that you use for another online account. 
  • Change your usernames for your online accounts. 
  • Place a fraud alert or credit freeze on your credit report (if you gave your Social Security number). 
  • Contact your financial institution if you think your credit/debit card information is at risk. 
  • Ensure you have two-factor authentication enabled for your online accounts. This provides an extra layer of security in case the scammers are able to access your email. 
  • Scan your device for malware/viruses, in case clicking the link downloaded harmful software.
  • Regularly monitor your bank, email, and other online accounts for strange activity. 

Change Both Your Usernames and Passwords

Alerts that someone is trying to log into your accounts or change your passwords mean someone has your username. Although they haven't gained access to your account yet, it's best to change both your usernames and passwords.

Report COVID-19 Status Validation Scams

If you receive an email or text message asking you to validate your COVID-19 vaccination status, you can report it to:

  • The local government agency they are impersonating.
  • The Federal Trade Commission (FTC). 
  • The Internet Crime Complaint Center (IC3). 

Reporting scams to the proper authorities can help protect your local community and educate others about them so they don't fall victim. 

Frequently Asked Questions

Is the government asking people to validate their COVID-19 vaccination statuses?

No. Any request to validate your current COVID-19 status is a scam. 

What happens if I click the link in a COVID-19 status scam email or text message.

Hopefully, nothing bad will happen just from you clicking a link in a scam email or text asking you to verify your vaccination status. The critical thing to avoid is entering your information on the online form. However, to be safe, it's recommended that you scan your computer or device for malware/viruses if you click on the link. 

Who are these COVID-19 scam emails and text messages coming from?

On the surface, the texts and emails will appear to come from government departments, such as:

  • State health departments
  • State transportation departments (e.g., the DMV)
  • The CDC

However, they're actually coming from scammers. 


Featured Reads