Before You Tap: A Somerset Patient’s Guide to Verifying NHS Appointment Messages

A message arrives on your phone. It says an appointment at a Somerset hospital needs confirming, or that a clinic slot will be released unless you respond. There is a link, a deadline, and a tone of urgency. It may look exactly like the kind of reminder many patients now receive. The question is simple and sensible: is it really from the NHS?

Most appointment texts are genuine. Somerset NHS Foundation Trust, like other NHS organisations, uses messages to remind patients about clinics, ask them to confirm or cancel, and point them towards the NHS App or an official contact route. But the same technology that makes reminders convenient also makes imitation possible. The aim of this guide is not to make patients wary of every message. It is to offer a calm method for checking before personal information is shared.

Why an appointment text can be imitated

A sender name on a text is not proof of identity. Alphanumeric sender IDs, which display a word such as NHS instead of a mobile number, can be copied. A message can include a hospital name, a plausible date and a professional-looking logo without coming from the trust. Scammers rely on the fact that patients are used to receiving appointment reminders and may be anxious about missing care.

That does not mean patients should ignore appointment messages. It means the message should be treated as a prompt to check through a route you already trust, rather than as the final word.

What a genuine Somerset appointment message may contain

A genuine message from an NHS appointments team will usually relate to an appointment you are expecting or can see in your records. It may name the service, give a date and time, mention the hospital or community site, and include a reference number. It may ask you to confirm attendance, cancel, or reschedule. It may point you to the NHS App or tell you to contact the appointments team using a number you can verify.

On a call that you have initiated, NHS staff may ask for information to confirm your identity. This can include your name, date of birth, address, NHS number or the reference on your appointment letter. These are normal checks. The important distinction is that you are in control of the call and have used a contact route you trust.

What NHS services will not ask for

NHS appointment services will not ask you to send bank details, card numbers or a PIN by text or email in order to secure an appointment. They will not ask for your NHS login password, ask you to grant remote access to your phone or computer, or pressure you into paying a fee to release a clinic slot. They will not normally ask you to reply to a text with sensitive personal information, and they will not require you to download an attachment to confirm attendance.

There are legitimate NHS payments, such as some prescription charges or dental charges, but these follow clear official processes. An unexpected text demanding payment to keep an appointment is a warning sign, not a routine administrative step.

The warning signs worth noticing

The strongest clue is often pressure. Be cautious of messages that threaten immediate loss of care, use countdown language, or insist that you act within minutes. Check for a link that is shortened or does not lead to an official NHS address. Look for small inconsistencies: the wrong hospital site, a service you have never attended, a reference number that does not match your letter, or spelling that feels unlike the NHS correspondence you usually receive.

Other warning signs include a request to continue the conversation on WhatsApp, an instruction to call a premium-rate number, or a message that asks you to confirm your identity by sending a photo of a passport or driving licence. Genuine NHS teams may need identification in some circumstances, but they will explain why and use a secure process. They will not improvise it through an unexpected text.

How to check a message safely

Do not use the link or phone number in a suspicious message. Instead, verify the appointment through a channel you already know. If you use the NHS App, sign in normally and look at your appointments. If you have an appointment letter, use the contact details printed on it. If you do not have a letter, look up the main switchboard number for Somerset NHS Foundation Trust through the official website or call NHS 111 for advice.

When you call, explain that you have received a message and want to confirm whether it is genuine. Have your appointment details to hand if possible, but do not read out financial information. The appointments team can tell you whether the message matches their records. If the message is fake, they can advise you on the next step. If it is genuine, you can confirm or change the appointment through that trusted route.

If you have already tapped, replied or shared information

Try not to panic. If you opened a link but did not enter details, close the page and do not return to it. If you entered an NHS login password, change it through the official NHS App or website. If you shared bank details, contact your bank straight away using the number on your card or statement. If you allowed remote access to a device, disconnect it from the internet and seek advice from a trusted technical service.

Report suspicious texts by forwarding them to 7726, the free reporting service for scam messages. You can also report to Action Fraud and let the Somerset trust know if the message claims to come from its appointments service. Keep the message, but do not click any further links. If you are worried that a real appointment has been affected, contact the appointments team through an official number and explain what happened.

A simple rule for Somerset patients

Pause, verify independently, then respond through a known route. A genuine NHS appointment can usually be confirmed, cancelled or rearranged without rushing. Personal information, once shared, cannot be taken back in the same way. NHS staff understand why patients check. A short delay while you confirm a message is reasonable; it is not a failure to engage with your care.

This guide cannot confirm whether one particular message is genuine. Only the trust can do that. But a consistent habit of checking through the NHS App, an appointment letter or an official switchboard gives Somerset patients a practical way to keep both their appointments and their personal details safe.