Security Warning: Hackers Plan to Exploit UK Government’s Scheduled Emergency Alert Test

The UK government has scheduled a national test of its Emergency Alerts system this Sunday, September 7, at 3pm to smartphones and tablets, including iPhones. The test is the second trial run for actual life threatening emergencies like floods and wildfires, with the first test occurring back in April 2023. While the UK government has provided guidance on the its Emergency Alert system to prepare recipients for the alert, security experts are warning that fraudsters are salivating.

According the UK government’s website, the Emergency Alert system will reach iPhones running iOS 14.5 or later and Android phones and tablets running Android 11 or later on 4G and 5G networks, even if they aren’t connected to WiFi or mobile data. The system does not require phone numbers but instead relies on a recipients location. Users should expect their device to make loud siren-like sound (even if on silent), vibrate, and possibly read out the alert. The warning sound and vibration may last as long as 10 seconds.

Generally, UK government Emergency alerts will include a phone number or a link to the GOV.UK website for more information. Although the UK government has stated recipients “will not need to take any further action,” cybersecurity experts warn the test puts millions of iPhone and Android users at risk. Scammers will undoubtedly plan to use the test to dupe people into giving access to their data.

Lisa Webb, a scams expert at Which? stated:

Scammers will use any hook they can to try and steal money and personal information from victims, and unfortunately the government’s upcoming nationwide test of its new Emergency Alerts system will be no exception.

Hackers are likely to attempt to capitalize on the known timing of the test with messages resembling the Emergency Alert and links that look similar to government web addresses.

Webb also said the UK government was sending out a link with information on the alert. Although it’s unclear when or how this link was distributed, she cautioned against trusting that message as well saying, “…it is probably wiser to look this up via the official government website rather than risk clicking a ‘lookalike’ link.”

Although you’re likely not in the UK, everyone should heed the warning. Unscrupulous actors will take advantage of any opportunity, and a scheduled government alert to millions is the perfect opportunity to catch people with their guard down. As usual, if you’re uncertain about any message you receive, verify the information directly on sender’s website or call their published phone number. Never click on links or download anything in a suspicious alert, text, or email.