Report to CVS
Last updated September 18, 2026
The short answer
Check a suspect CVS email or site by calling 1-800-SHOP-CVS
CVS publishes the subject lines its impersonators use, and a detail that settles any text message instantly. CVS Health texts customers from short codes, never from a 10-digit phone number.
What they handle
- Fake CVS gift card and survey reward emails
- Texts from 10-digit numbers claiming to be CVS
- Websites built to look like CVS
- Requests for personal or financial details by email
How to file a report
- 1
Call 1-800-SHOP-CVS
If you are concerned a website or email may be fraudulent, CVS asks you to contact it on 1-800-746-7287.
- 2
Check the sender domain
CVS says the giveaway is a sender address that is not a CVS.com domain and looks nonsensical. Multiple fonts, off-brand colours and low-quality graphics come with it.
- 3
Check whether the text came from a short code
CVS Health uses short codes to text customers, not 10-digit phone numbers. A 10-digit sender claiming to be CVS is a scam.
- 4
Do not reply or follow the link
CVS asks you not to reveal personal or financial information by email, and not to respond to email solicitations or follow links sent in them.
What you'll need
- The email or text and its sender
- The website address, if you were sent to one
- Your ExtraCare number, if the message quotes one
What to expect
CVS can act on the fake site and the sender. Known fakes have used subject lines about a complimentary $50 CVS gift card and a CVS survey reward.
Frequently asked questions
I got a text saying I won a CVS gift card. How do I know it is fake?
Look at the sender. CVS texts come from a short code, so a 10-digit number is not CVS. The prize itself is the oldest pattern in retail phishing.
Company guide
CVS Pharmacy scams
Knowing which scam you were hit by makes the report better. This is how scams impersonating CVS Pharmacy actually work, what the company will never ask you for, and the warning signs to recognise next time.
Read the guide →