GP alert

Our counter fraud provider has updated that fraudsters continue to target GP practices to steal funds. Fraudsters are sending emails in from freely available domain names, purporting to be senior members of the practice. The email request that an urgent payment is made.

Some examples of wording being sent are:

An urgent payment of £9,891.22 needs to be made. Can we sort this out today?

Can we make payments of £14k for invoices today? What details do you need for a faster payment?

We need to make some payments today. Can we process an urgent payment of
£19,564.14 now? What details do you need from me

We need to arrange for an urgent payment of £4,726.18 today. Can we sort out this payment? What details do you need from me .

Payments of £12,443 need to be made today for invoices. What information do you require to ensure a faster payment?

Emails usually have the name of the senior manager or partner showing, but when checked actually come from one the following domains:

Actions required

• This alert should be shared with all practice staff authorised/able to make payments.
• Practices should ensure a process is in place to seek confirmation/approval of any payment request, ideally through face to face or telephone confirmation, or using nhs.net emails.
• Any false payment requests received should be referred to your ICB’s LCFS.

RSM offer free quarterly cyber fraud awareness sessions to our health sector clients. Staff from any GP practices within our ICB client areas are welcome to attend these sessions. The next one is scheduled for 30 July 2024 at 10:00. Practice staff can sign up to attend, at no cost, using this link: Free Cyber Fraud Awareness Session