Last Updated on April 14, 2023

In recent weeks, we’ve been tracking a wave of CVS Pharmacy scams utilizing phishing SMS text messages and emails. (Real CVS text short code is 898287.) The scams attempts are so frequent that CVS have addressed the issue with their own warning, which you can find on their help page. Be safe out there, folks! In the meantime, the following is a summary of the CVS scams we have encountered.

CVS Text Message Scams

Screenshots from Reddit

As seen above, CVS survey scam text messages are spreading across the US, with California, Texas, and New York targeted most. All the texts share the same goal: to get the would-be victim to click on the phishing link. They’ll use gift cards and other giveaways to entice you — don’t fall for it! See below for where the link takes you.

CVS survey scam sample SMS content:

• At CVS we understand everyone is going through hard times. Which is why today you have a chance to get a 100$.  Take a minute, fill out thiis form and we’ll cover the cost‚!  {URL}
• At CVS we are constantly seeking the public’s opinion to help make our communities great and meaningful. We‚ adore making a positive impact in the communities we serve with important investments and support.  This abbreviated review takes 1 to 2 minutes and will give you compensation. {URL}
• At CVS, “Show Me the Money” is back on. You can go to $50 in a matter of minutes.  {URL}
• At CVS, it’s a giveaway that goes beyond a raffle! I receive at least $45 per day. Never takes longer than the time it takes me to sip my morning coffee. {URL}
• At CVS, there is a direct giveaway rather than a raffle. I always receive at least $45. Never more than the time it takes for me to have my morning coffee. {URL}

CVS Email Scams

Consumers have also reported receiving phishing emails, in which the scammers pose as CVS — complete with design and logo mimicry. Note the long, convoluted email address — official email addresses NEVER look like this.

The aim here, like the texts above, is to get the would-be victim to click on the attached phishing link. When clicked on, the links lead to a fake CVS survey page, as seen below.

These fake survey pages don’t appear to be especially malicious. Nonetheless, there is no prize to be had, making the whole thing a waste of time. At the same time, it is possible a user could have their details scraped during time spent on the page. Survey scams typically request/steal victims’ personal information. The scammers can use this information to commit any number of cybercrimes, such as targeted phishing attacks and identity theft.

Shop Safe with ScamCheck

• Always double-check reviews of shopping websites.
• Giveaways, while sometimes legit, are often a red flag.
• Pay attention to the company’s age, and be suspicious of great-sounding discounts.
• Strange payment methods (such as only PayPal) is also a red flag.
• NEVER use links or buttons from unknown sources! Use Trend Micro ScamCheck to detect scams with ease: ScamCheck is an all-in-one browser extension and mobile app for detecting scams, phishing attacks, malware, and dangerous links — and it’s FREE!

Check out this page for more information on ScamCheck. And as ever, if you’ve found this article an interesting and/or helpful read, please do SHARE it with friends and family to help keep the online community secure and protected. Happy summer shopping!