Afterpay text scams: what to do with an unexpected Afterpay text
Quick answer
Afterpay's own help page says you can safely ignore unexpected texts that appear to be from Afterpay. Don't click the link or reply. Check your account in the Afterpay app or on its website instead. Forward the text to 7726 and report it at ReportFraud.ftc.gov.
- Comes by
- Text
- Pretends to be
- Afterpay
- Last updated
How it works
Afterpay says it has received reports of both customers and non-customers getting unsolicited texts that appear to come from Afterpay, and advises that you can ignore them.
The usual aim of a text like this is phishing: a link to a look-alike page that asks for a login, card number or personal details. Because the message is sent to people at random, you don't need to be an Afterpay customer to get one.
Red flags
- A text from 'Afterpay' about an order or payment you don't recognize
- A link in the text instead of a prompt to open the app yourself
- A request to log in, confirm card details or verify your identity through the text
- Urgency: a payment 'failed' or your account will be locked
Example message
Afterpay: your payment of $[amount] could not be processed and your account is on hold. Update your details now at [link] to avoid late fees.
What to do
- 1
Ignore the text
Don't click, reply or call a number in it. Afterpay says unexpected texts can be safely ignored.
- 2
Check your account yourself
Open the Afterpay app or type the website address in your browser and look for real notices.
- 3
If you clicked, don't enter anything more
Close the page. If you typed a password, change it, and change it anywhere else you use it.
- 4
If you entered card details, call your card issuer
Use the number on the back of the card and ask them to watch for or block fraudulent charges.
- 5
Report it
Forward the text to 7726 (SPAM) and report it to the FTC.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers need your phone number or email, and often your name, before they can send a message that looks personal. They buy that from data brokers and people-search sites, or take it from data breaches. Mass text campaigns often go to every number in a purchased list, whether or not you use the service. Serus finds the brokers that list your details where you live and sends the removal requests, and it alerts you when your email or phone number turns up in a breach, so fewer scammers can reach you.
Frequently asked
Is the Afterpay text real?
Afterpay says unexpected texts that appear to be from it can be ignored. Check your account through the app or website.
Is Afterpay a scam?
No. Scammers pretend to be Afterpay. The fake texts are not from the company.
I don't use Afterpay. Why did I get this?
Afterpay says non-customers get these too. Scammers text large lists of numbers.
I clicked the link. What now?
If you entered nothing, you're probably fine. If you entered a password or card number, change the password and call your card issuer.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
