<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Fraud in Pay Monthly</title>
    <link>https://community.o2.co.uk/t5/Pay-Monthly/Fraud/m-p/1318043#M183522</link>
    <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;I`ve just noticed there is around £15 added onto my bill every month under Premium and Information Services. On investigation i found it was a company called Opera Telecom LTD and a scam. They are taking the money in dribs and drabs £1.25 at a time.&lt;/P&gt;&lt;P&gt;It started when i renewed my contract / phone last november.&lt;/P&gt;&lt;P&gt;Can any one tell me how i can stop the money coming out and maybe even get my money back?&lt;/P&gt;</description>
    <pubDate>Fri, 03 Apr 2020 16:11:22 GMT</pubDate>
    <dc:creator>Highlander9</dc:creator>
    <dc:date>2020-04-03T16:11:22Z</dc:date>
    <item>
      <title>Fraud</title>
      <link>https://community.o2.co.uk/t5/Pay-Monthly/Fraud/m-p/1318043#M183522</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;I`ve just noticed there is around £15 added onto my bill every month under Premium and Information Services. On investigation i found it was a company called Opera Telecom LTD and a scam. They are taking the money in dribs and drabs £1.25 at a time.&lt;/P&gt;&lt;P&gt;It started when i renewed my contract / phone last november.&lt;/P&gt;&lt;P&gt;Can any one tell me how i can stop the money coming out and maybe even get my money back?&lt;/P&gt;</description>
      <pubDate>Fri, 03 Apr 2020 16:11:22 GMT</pubDate>
      <guid>https://community.o2.co.uk/t5/Pay-Monthly/Fraud/m-p/1318043#M183522</guid>
      <dc:creator>Highlander9</dc:creator>
      <dc:date>2020-04-03T16:11:22Z</dc:date>
    </item>
    <item>
      <title>Re: Fraud</title>
      <link>https://community.o2.co.uk/t5/Pay-Monthly/Fraud/m-p/1318046#M183524</link>
      <description>&lt;P&gt;&lt;LI-PRODUCT title="Guide: Have you fallen for or been conned into a premium rate scam? What to do next" id="Guide001"&gt;&lt;/LI-PRODUCT&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;A href="https://community.o2.co.uk/t5/Other-Products-and-Services/Coronavirus-Covid-19-Community-Help-and-Support/m-p/1317694#M38634" target="_blank"&gt;https://community.o2.co.uk/t5/Other-Products-and-Services/Coronavirus-Covid-19-Community-Help-and-Support/m-p/1317694#M38634&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 03 Apr 2020 16:11:53 GMT</pubDate>
      <guid>https://community.o2.co.uk/t5/Pay-Monthly/Fraud/m-p/1318046#M183524</guid>
      <dc:creator>jonsie</dc:creator>
      <dc:date>2020-04-03T16:11:53Z</dc:date>
    </item>
    <item>
      <title>Re: Fraud</title>
      <link>https://community.o2.co.uk/t5/Pay-Monthly/Fraud/m-p/1318356#M183678</link>
      <description>&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://community.o2.co.uk/t5/user/viewprofilepage/user-id/3859544"&gt;@Highlander9&lt;/a&gt;&amp;nbsp;wrote:&lt;BR /&gt;&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;I`ve just noticed there is around £15 added onto my bill every month under Premium and Information Services. On investigation i found it was a company called Opera Telecom LTD and a scam. They are taking the money in dribs and drabs £1.25 at a time.&lt;/P&gt;&lt;P&gt;It started when i renewed my contract / phone last november.&lt;/P&gt;&lt;P&gt;Can any one tell me how i can stop the money coming out and maybe even get my money back?&lt;/P&gt;&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;&lt;P&gt;&lt;a href="https://community.o2.co.uk/t5/user/viewprofilepage/user-id/3859544"&gt;@Highlander9&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Were these premium texts arising from 87070?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;The O2 number checker incorrectly has this number listed as Opera Telecom Ltd. It isn't. actually, the number is a "shared shortcode" operated by a company called Oxygen8.&lt;/P&gt;&lt;P&gt;Oxygen8 Communications Limited,&lt;BR /&gt;12th Floor, Lyndon House,&lt;BR /&gt;58 – 62 Hagley Road,&lt;BR /&gt;Birmingham,&lt;BR /&gt;B16 8PE,&lt;/P&gt;&lt;P&gt;Email: customercare.uk&amp;lt;at&amp;gt;oxygen8.com Tel: 0808 206 0808&lt;/P&gt;&lt;P&gt;One of the "services"using this number was a scam called Grocery Offer Alerts, operated by a Cypriot company called Mekersia&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Mekersia Limited&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Navarinou 6, Flat 101&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Engomi&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;2416&lt;/SPAN&gt;&lt;BR /&gt;&lt;SPAN&gt;Cyprus&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Tel&amp;nbsp;01451604444&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Email:&amp;nbsp;support@mekersia.com&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;We investigated this service and discovered that they were using a vulnerability in the system which allowed &lt;STRONG&gt;any valid number&amp;nbsp;&lt;/STRONG&gt;to be "subscribed" to the service by fraudsters.&lt;/P&gt;&lt;P&gt;The video below, in which we subscribed a phone to this service without it even being turned on is shown below.&lt;/P&gt;&lt;P&gt;&lt;div class="video-embed-center video-embed"&gt;&lt;iframe class="embedly-embed" src="https://cdn.embedly.com/widgets/media.html?src=https%3A%2F%2Fwww.youtube.com%2Fembed%2FVfZLctnVwnc%3Ffeature%3Doembed&amp;amp;display_name=YouTube&amp;amp;url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DVfZLctnVwnc&amp;amp;image=https%3A%2F%2Fi.ytimg.com%2Fvi%2FVfZLctnVwnc%2Fhqdefault.jpg&amp;amp;type=text%2Fhtml&amp;amp;schema=youtube" width="600" height="338" scrolling="no" title="Grocery Alerts Scam" frameborder="0" allow="autoplay; fullscreen; encrypted-media; picture-in-picture;" allowfullscreen="true"&gt;&lt;/iframe&gt;&lt;/div&gt;&lt;/P&gt;&lt;P&gt;The obvious vulnerability is that the PIN number, which should have been sent by text to the phone, was displayed on the signup screen.&lt;/P&gt;&lt;P&gt;When we discovered this fraud, we notified the regulator (the Phone-paid Services Authority) Oxygen8 Ltd (the level 1 supplier responsible for the service), Mekersia Ltd (the service provider) and Square 1 Ltd (who operated the PIN verification for the service). Although none of these had the courtesy to reply, the exploit was removed at about 8:00 pm on 29th March.&lt;/P&gt;&lt;P&gt;There have been many complaints about this "service", and there is evidence that some of the numbers fraudulently "subscribed" were harvested from Gumtree advertisements.&lt;/P&gt;&lt;P&gt;&lt;A href="https://who-called.co.uk/Number/87070" target="_blank" rel="noopener"&gt;https://who-called.co.uk/Number/87070&lt;/A&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Assuming that this is the service responsible for your charges, contact Mekersia to insist on a full refund. You should alo complain to the regulator.&lt;/P&gt;&lt;P&gt;At a time like this, O2 should be ashamed that they are continuing to facilitate and profit from these scams.&amp;nbsp;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 03 Apr 2020 20:59:55 GMT</pubDate>
      <guid>https://community.o2.co.uk/t5/Pay-Monthly/Fraud/m-p/1318356#M183678</guid>
      <dc:creator>Payforit_Sucks</dc:creator>
      <dc:date>2020-04-03T20:59:55Z</dc:date>
    </item>
    <item>
      <title>Re: Fraud</title>
      <link>https://community.o2.co.uk/t5/Pay-Monthly/Fraud/m-p/1325686#M187285</link>
      <description>&lt;P&gt;At the beginning of April after fo;;owing your advice, I contacted Mekersia and Oxygen8. I asked them both to stop removing money from my O2 account immediately and refund the total amount. I recieved a phone call from Mekersia&amp;nbsp;&amp;nbsp;and was told money would be refunded. Since then no more money has been taken from my acount. As yet no refund but at least I am not any worse off. Thank you for helping me with this matter.&lt;/P&gt;</description>
      <pubDate>Sun, 12 Apr 2020 12:32:58 GMT</pubDate>
      <guid>https://community.o2.co.uk/t5/Pay-Monthly/Fraud/m-p/1325686#M187285</guid>
      <dc:creator>Highlander9</dc:creator>
      <dc:date>2020-04-12T12:32:58Z</dc:date>
    </item>
  </channel>
</rss>

