Fake Doctor Appointment and Lab Report Link Scam
A message about your lab report or a doctor appointment carries a link that steals logins or asks for a booking fee. See how to tell real from fake.
Health matters make people click fast. An SMS says your blood test report is ready, or a call says your doctor's appointment needs a confirmation fee. The link opens a page that copies the look of a lab or hospital, then asks for your phone number, date of birth, Aadhaar-style details or a small booking payment. The report is never real, and the details can be reused to cheat you in other ways.
How the scam works
The scammer sends the same message to thousands of numbers, hoping that a few have really visited a lab or planned a check-up that week. Some use public listings of clinics to name a real hospital. The SMS or email carries a short link and a line such as 'Your report is ready, view now', which many people open without thinking about whether they gave any sample.
The page asks for a login with your phone number and an OTP 'to protect your report'. Others show a booking page that asks for a small fee, like Rs 49, through UPI. Because the amount is tiny and the topic is health, people do not stop to doubt. The page may also ask to download an app for 'viewing the report'.
The payoff is a stolen OTP, a card number, or an installed app that reads messages. Your name, date of birth and health details can be sold or used in a later call, where a 'doctor' or 'insurer' quotes them to seem real. Fear about a bad result keeps the victim from telling anyone, which gives the scammer more time.
An example of what you may see
Example SMS (invented): 'Your lab report for sample 48213 is ready. To view the full report and consult the doctor today, confirm your appointment fee of Rs 99 here: short link. Report will be deleted after 24 hours.' A follow-up call from an 'assistant' says the doctor is only free this evening and asks you to complete the payment immediately so the slot is not given to another patient. If you do not reply, the same number sends: 'Last reminder, report will be cancelled.'
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A report or appointment you do not remember asking for.
- A short or odd link instead of the lab's own app or website.
- A tiny fee or OTP demanded to view a report.
- A request to install an app to read the report.
- A deadline such as 'deleted in 24 hours'.
- No patient name, test name or lab branch in the message.
What to do right now
- Do not tap the link. Open the lab or hospital app, or its website typed by hand.
- Call the clinic on the number printed on your earlier receipt to check.
- Never give an OTP to see a report or confirm an appointment.
- Delete the message and block the sender after you report it.
- Tell family members who also use the same lab so they stay alert.
If you already paid or shared a code
- If you paid or gave an OTP, call 1930 and report at cybercrime.gov.in.
- Contact your bank on the number printed on your card and ask to block the card or UPI.
- If you installed an app, uninstall it and change banking and email passwords from a clean phone.
- Watch for follow-up calls that quote your health details and do not respond to them.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Safeavio's link check can look at a report link you paste before you open it, and warn about shortened or lookalike addresses and risky patterns. The scam check on the SMS text shows the urgency and the fee or OTP demand. The Phone scan can also show if an app installed for a 'report' came from outside a store. It does not read your messages on its own and cannot confirm whether a lab holds your sample.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
How do I know a lab report message is genuine?
A genuine lab names the test, the branch and a reference you recognise, and the report is available in its own app or portal. Check there directly instead of following any link in the message, and call the lab on a number from your own receipt.
Does a doctor appointment need an OTP?
No. An OTP is for logging in or approving a payment. A clinic can confirm an appointment through its own app or a call to a number you already hold. If someone asks for an OTP to book, stop and verify separately.
Why are health scams effective?
Worry about health lowers the guard. The tiny fee and the polite language make it feel safe. Taking a minute to open the official app yourself breaks the spell and removes most of the risk.