O2 Customers targeted by fraudulent "smishing" text

O2 has just announced that users are being targetted by a fraudulent company, trying to obtain personal and financial details.

O2 yesterday identified a number of clients that have been receiving what is called “smishing” text messages pretending to be from O2. The messages suggest the customer is required to update their PAC code.

There’s a website link in the message that redirects the customer to a fake O2 website.

O2 have announced that they do not send out messages like this and that they should be deleted immediately. They went on to warn that the fraudulent messages and website can look very convincing and if any users are in doubt to contact their network via the normal routes to be sure.

The message reads:

“Your contract will be suspended if your PAC code is not updated. Login to MyO2 to make the required changes: o2contract.co.uk - Your payment method has expired.”

Full investigation is ongoing. We’re in the process of removing the fraudulent websites and domain name, and identifying and blocking the sender of the SMS.

What do I need to do?

If you have entered any details into this fake site, then you will need to reset your password and security questions on the O2 account. 

If you believe you have disclosed personal data you can report it to Action Fraud at https://www.actionfraud.police.uk/report_phishing

If you believe a crime or fraud has occurred due to this incident you should report it to Action Fraud at https://www.actionfraud.police.uk/reporting-fraud-and-cyber-crime