O2 scam texts: how to spot a fake and what to do
Quick answer
Scammers send texts pretending to be O2, often with a link and a threat of suspension. O2 says it won't ask for one-time codes or bank details. Don't tap the link: forward the text to 7726, which is free, then delete it.
- Comes by
- Text, Email, Phone call
- Pretends to be
- O2
- Last updated
How it works
Scammers pretend to be O2. O2 is the impersonated company, not the sender.
The text says something is wrong with your account, bill or service, and gives a link to fix it. O2 lists the signs: spelling and grammar mistakes, a generic "dear customer" greeting, demands to act straight away or lose your account, and lookalike names such as "02" with a zero instead of the letter O. A sender name that reads O2 isn't proof either, because O2 warns scammers can spoof these.
The link goes to a fake page that collects your login or card details, or in some past waves installed malicious software. O2 says it will never ask by email, text or call for a one-time code, password or other security information.
Red flags
- A text from "O2" with a link you weren't expecting
- A threat to suspend your account unless you act now
- "Dear customer" instead of your name
- Spelling mistakes or "02" written with a zero
- A request for a one-time code, password or bank details
- A sender that's a mobile number rather than O2
Example message
O2: Your bill payment failed and your account will be suspended in 24 hours. Update your details now at [link] to keep your service.
What to do
- 1
Don't tap the link
Don't reply either. Delete the text once you've reported it.
- 2
Forward it to 7726
O2 says this is free and lets it investigate the sender. Your phone may have a built-in report spam button.
- 3
If you tapped but entered nothing, stay alert
Close the page. If you're unsure, check your account through O2's official app or website.
- 4
If you gave details, call your bank
Use the number on the back of your card, tell them it was fraud and change any passwords you shared. Our guide on what to do after a data breach covers the steps.
- 5
If you installed an app, take it seriously
O2's guidance for the FluBot scam says contacts and banking apps may have been accessed, and recommends a factory reset.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Many scam texts are sent in bulk, but some use your name or number. Scammers get those from people-search sites, public listings and breach data. Serus finds the data brokers that list you and removes your listings, and alerts you when your details show up in a breach, so fewer scammers can reach you.
Frequently asked
Does O2 text customers about their account?
It can, but O2 says it will never ask for a one-time code, password or other security information by text, email or call.
How do I report an O2 scam text?
Forward it to 7726. O2 says it's free and helps it investigate the sender.
The text came from "O2". Is it real?
Not necessarily. O2 warns scammers can spoof sender names. Check through the official app or website.
I tapped the link. What now?
If you entered details, call your bank and change your passwords. If you installed an app, follow O2's FluBot advice on a factory reset.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
