Where does the 63641 text message come from?
63641 is CVS Pharmacy’s official short code.
It’s used for prescription alerts, account notifications, and two-factor authentication. The code itself is legitimate—but scammers can spoof it.
If a message asks for your Social Security number, rushes you into clicking a link, or requests payment details, it’s not from CVS.
Who owns the short code 63641?
- Registered to CVS Pharmacy
- Used for account alerts (distinct from 898287 for prescription notifications and 28732 for ExtraCare rewards)
- Confirmed across multiple independent community sources
CVS customers on Reddit regularly confirm they receive legitimate notifications from this number—things like prescription-ready alerts, verification codes, and account updates.
Why you got a text from 63641
- Prescription alerts—your medication is ready for pickup, a refill reminder, or a supply issue.
- Verification codes—someone logged in to (or tried to log in to) a CVS account tied to your number.
- Account notifications—changes to your CVS.com profile, insurance info, or security settings.
- Health updates—flu shot availability, COVID-19 testing, or insurance coverage changes.
- Visionworks orders—eyewear notifications from a brand under the CVS Health umbrella.
Is the 63641 short code safe or a scam?
It depends on the message content. Here’s a quick breakdown:
| Scenario | Risk level | What to do |
| Prescription or account alert | Safe | Standard communication—no action needed |
| Verification code you didn’t request | Suspicious | Don’t share the code. Consider changing your CVS password. |
| You’re not a CVS customer | Likely harmless | Probably a wrong number. Reply “STOP” to opt out. |
| Message asks for personal data or payment | Scam | Do not click any links. Report the message. |
The FTC has flagged a rise in SMS-based phishing scams that impersonate well-known brands—CVS included. Even if the sender ID shows 63641, that alone doesn’t guarantee the message is real.
How to spot a 63641 phishing scam
Not every text from 63641 is safe. Here are the red flags:
- Urgency or threats—”Your account will be locked in 24 hours” or “Confirm now or lose access.” Legitimate CVS messages don’t pressure you with deadlines.
- Requests for personal data—CVS will never ask for your Social Security number, full credit card number, or account password via text. Period.
- Suspicious links—real CVS links point to cvs.com. If the URL looks off (cvs-pharmacy-secure.com, cvs.account-verify.net), don’t tap it.
- Grammar and spelling errors—official CVS messages go through professional copywriters. Typos and awkward phrasing are dead giveaways.
- Unexpected payment requests—CVS doesn’t collect payments through text messages.
What to do if you receive a message from 63641
If you’re a CVS customer:
- Check whether the message matches a recent prescription, appointment, or account change.
- If it contains a verification code you didn’t request, log in to your CVS account directly (not through the text) and change your password.
- Never click links in the message. Open the CVS app or go to cvs.com manually instead.
If you’re not a CVS customer:
- The message was likely sent to a recycled phone number. Reply STOP to opt out.
- Don’t click any links or reply with personal information.
- If the messages persist, block the number and report it as spam.
How to report suspicious messages from 63641
- Forward the message to 7726 (SPAM)—this reports it to your carrier.
- File a complaint at reportfraud.ftc.gov.
You can also report phishing attempts directly to CVS through their security page.
FAQ
Is 63641 a legitimate CVS number?
Yes. 63641 is one of several short codes CVS uses for customer communications. However, scammers can spoof any sender ID—so always verify the message content before taking action.
Why did I get a text from 63641 if I’m not a CVS customer?
Your phone number was likely previously associated with a CVS account. This happens when carriers recycle phone numbers. Reply STOP to opt out.
Can I block 63641?
Yes, but keep in mind that blocking it will also stop legitimate CVS alerts—including prescription notifications and verification codes. If you’re an active CVS customer, consider managing your preferences at cvs.com instead.
What’s the difference between 63641 and 898287?
63641 handles account-level notifications and verification codes. 898287 is primarily used for prescription-related alerts. Both are legitimate CVS short codes.
Some users have reported receiving Affirm-related messages from this number. CVS partners with Affirm for payment plans, so these messages may be legitimate if you’ve used Affirm at CVS.
What should I do if I clicked a suspicious link from 63641?
Change your CVS password immediately. Monitor your bank statements and credit reports for unusual activity. Consider placing a fraud alert with the major credit bureaus.
How do I stop texts from 63641?
Reply STOP to the message. CVS is required to honor opt-out requests. If messages continue after 24 hours, contact CVS customer service directly.
Does CVS send texts about COVID-19 from 63641?
CVS has used this short code for health-related notifications, including COVID-19 vaccine availability and testing information. These messages are legitimate.
Can scammers fake the 63641 number?
Yes. SMS spoofing allows scammers to make messages appear as if they come from any number or short code. Always evaluate the message content—not just the sender—before responding.
