Security Alerts
How can you protect yourself?
- Do not reveal personal or financial information in email and do not respond to email solicitations for this information. This includes following links sent in email.
- Pay attention to the URL of a website. Malicious websites may look identical to a legitimate site but the URL may use a variation in spelling or a different domain (e.g., .com vs. .net).
- For more information about protecting yourself from these types of attacks, please visit the Protecting Your Privacy website.
Alert - Fraudulent Text Messages
CVS Health wants to alert you to an SMS or text message scam that is fraudulently designed to appear as a CVS offer. In the example shown below, please note the highlighted areas of the message that seem to be intentionally misspelled. Another indicator of fraud is the 10 digit phone number. CVS Health utilizes short codes to text customers, not 10 digit phone numbers.
The text message and the links in the message direct the recipient to a site that is not associated with CVS Health or any of its affiliates. CVS Health does not solicit information from our customers in this manner. You should not reply to or follow any links contained in such a message.
The following is a sample of a fraudulent email message:
This fraudulent text misspells CVS and reward. It also was sent from a ten-digit phone number, which CVS wouldn’t use.
Alert - Fraudulent email - "CVS Surprise"
CVS Health wants to alert you to an email scam that is fraudulently designed to appear as a CVS branded email offer. The subject line of the emails contains wording similar to the following:
Subject: Subject: ,we__want__to_thank__you_get-rewarded
This email and the links in the email direct the recipient to a site that is not associated with CVS Health or any of its affiliates. CVS Health does not solicit information from our customers in this manner. You should not reply to or follow any links contained in such a message.
The following is a sample of a fraudulent email message:
This fraudulent “surprise” email contains multiple different fonts, off-brand colors and low-quality graphics that CVS would not use. The clickable buttons also communicate an unnecessary sense of urgency.
Alert - Fraudulent Pharmacy Phone Calls
Alert 1 - Fraudulent Calls about Your Prescription
CVS Health wants to alert you of recent phone calls that are believed to be made by criminals who are posing as pharmacy representatives. In this case the criminals are spoofing a CVS Pharmacy's phone number and posing as a representative from the pharmacy. The caller then offers the call recipient a chance to order drugs or purchase medical services.
Some questions the caller is asking are:
- Do you need any refills on your current medications?
- Would you like to order Cialis or Viagra?
- What drugs do you want?
CVS Pharmacy will never call and request our customers to provide this type of ordering or purchasing information. Protect your personal information from fraud
- Do not provide personal information to anyone without first verifying that they are a CVS pharmacist or technician.
- Never provide credit card or other financial information to unsolicited callers.
- If you have any doubts or uncertainty, please call your CVS pharmacy directly regarding your prescription or a prescription refill.
To reach CVS Pharmacy, CVS Caremark, MinuteClinic, or customer service, please use the numbers listed on CVS.com or on the back of your ExtraCare® card, the Caremark Customer Care toll-free number (1-800-552-8159) or the MinuteClinic Patient Support number at 1-866-389-2727.
Alert 2 - Fraudulent Calls about Your Personal Information
CVS Health wants to alert you of recent phone calls that are believed to be made by criminals who are posing as pharmacy representatives. The caller is requesting personal information from customers for fraudulent purposes, stating that the information is required to verify a prescription and is asking for a driver's license number, social security number, insurance information, and/or other personal information. If you do not know a caller or are unable to verify that the call is being made by legitimate CVS pharmacy representatives, do not provide your personal information to the caller.
Protect your personal information from fraud
- Do not provide personal information to anyone you do not know.
- Never provide credit card or other financial information to unsolicited callers.
- If you have any doubts or uncertainty, please call your CVS pharmacy directly regarding your prescription or a prescription refill.
To reach CVS Pharmacy, CVS Caremark, MinuteClinic®, or customer service, please use the numbers listed on cvs.com, or on the back of your ExtraCare® Card, the Caremark Customer Care toll-free number (1-800-552-8159) or the MinuteClinic® Patient Support number at 1-866-389-2727.
Alert - Fraudulent CVS Gift Card
CVS Health wants to alert you to an email scam that is fraudulently designed to appear as a CVS branded email offer. The subject line of the email contains wording similar to the following:
Subject: Your name came up for a Complimentary $50 CVS/pharmacy® gift card
This email and the links in the email direct the recipient to a site that is not associated with CVS Health or any of its affiliates. CVS Health does not solicit information from our customers in this manner. You should not reply to or follow any links contained in such a message.
The following is a sample of a fraudulent email message:
This fraudulent email appears to offer the recipient a gift card if they take a survey. The sender’s address does not have a CVS.com domain and is nonsensical. The disclaimer at the bottom also states that the sender is not affiliated with or sponsored by CVS.
Alert - Fraudulent Pharmacy Phone Calls
CVS Health wants to alert you of recent phone calls that are believed to be made by criminals who are posing as pharmacy representatives. The caller is requesting personal information from customers for fraudulent purposes, stating that the information is required to verify a prescription and is asking for a driver's license number, social security number, insurance information, and/or other personal information. If you do not know a caller or are unable to verify that the call is being made by legitimate CVS pharmacy representatives, do not provide your personal information to the caller.
Protect your personal information from fraud
- Do not provide personal information to anyone you do not know.
- Never provide credit card or other financial information to unsolicited callers.
- If you have any doubts or uncertainty, please call your CVS pharmacy directly regarding your prescription or a prescription refill.
To reach CVS Pharmacy, CVS Caremark, MinuteClinic®, or customer service, please use the numbers listed on cvs.com, or on the back of your ExtraCare® Card, the Caremark Customer Care toll-free number (1-800-552-8159) or the MinuteClinic® Patient Support number at 1-866-389-2727.
Alert - Fraudulent CVS Survey Rewards
CVS Health wants to alert you to an email scam that is fraudulently designed to appear as a CVS branded email offer. The subject line of the email contains wording similar to the following:
Subject: Congratulations on your CVS Survey Reward
This email and the links in the email direct the recipient to a site that is not associated with CVS Health or any of its affiliates. CVS Health does not solicit information from our customers in this manner. You should not reply to or follow any links contained in such a message.
The following is a sample of a fraudulent email message:
This fraudulent CVS email contains multiple errors like a misused dollar sign and not starting a sentence with a capital letter. There is also an excessive use of exclamation points creating a false sense of urgency.
Alert - Fraudulent CVS Phishing Website
CVS Caremark wants to alert you to a fraudulent website that is falsely posing as a legitimate CVS/pharmacy website. This site is not owned, operated, or affiliated in any way with CVS Caremark. You should not respond to any requests to provide your personal information on this false website.
The following is a sample of the false website:
This fraudulent website contains unnecessary capitalization, random spacing and grammatically incorrect and confusing sentences. The logo also does not resemble the real CVS logo.