15 July 2020 / Money, Scams

Scam alert: fake O2 invoice SMS

George Martin Conversation Editor

Comments 82

A convincing fake text message purporting to be from O2 is doing the rounds. Have you received it? Here’s what makes this one particularly dangerous.

Well-crafted smishing texts or phishing emails will always make you look twice, and that’s exactly what I did when I received this one just two days ago.

I’m with O2, so this fake SMS is clearly finding its intended audience. But what made it stand out as worth a second look?

This one’s all about the layout. It mimics a genuine O2 text message almost perfectly, but it’s yet another phishing scam designed to steal your bank details.

Hi George, it’s not a genuine message. Please do not click on any links or enter any details. Can you drop us a DM with your O2 mobile number please? ⬇️ https://t.co/5pyLDJBC6r

— O2 in the UK (@O2) July 13, 2020

A similar smishing text targeted Giffgaff customers back in April, which again attempted to send recipients to a phishing website,

How can you tell it’s a scam?

Despite its slick layout, there are a few signs that you should always look out for when you receive a text message purporting to be from a business:

⚠ It’s asking you to enter bank details by providing a direct link

⚠ It’s attempting to panic you into action by stating that O2 was unable to process your latest bill

⚠ The URL is suspicious, containing the domain ‘invoice142’ – this site is nothing to do with O2

⚠ It’s arrived from a completely random number, separate to any other communication from O2

You can read all our tips on how to spot a scam on our consumer rights pages here.

Even if you’re a customer of the brand, you should always be wary of unsolicited texts. If you’re not sure, get in contact with the company via its official channels and ask directly – especially if you’ve been asked for bank details.

O2 told us:

O2 takes the safety and security of its customers very seriously. O2 will never email, text or call to ask for a one-time code, password, or other security information you’ve set up on your O2 account.

Receiving a suspicious email, text or voice call won’t harm you in any way. It’s only dangerous if you interact with it.

If you’re suspicious, report it immediately. You can report fraudulent text messages by forwarding to 7726. It won’t cost you anything and it means we can investigate the sender.

There’s lots of useful advice and links on our O2 Fraud and Security webpage.

If you think you may have given sensitive information to scammers, let your bank know immediately, then read our guide to getting your money back.

Have you received this fake O2 text? Have you been sent anything similar out of the blue requesting your bank details?

Let us know in the comments.