Paypal hacked via mobile phone provider

[mattyg2004]

I got an email from Experian today saying my email address & password has been sold online, I logged in and it said low risk you dont need to do anything

A few hours later
I get a text from O2 saying my sim swap is now complete

Didn't order a sim swap.. Then a few seconds later my sim disconnected and wasn't registered on O2 network... Then a few mins later £1800 paypal payment to Ikea

I'm fumin with O2. We've had fraud on our account before. Someone ordered some Iphones. We didn't know until an extra £100 started going out the bank. Can't believe someone managed to convince O2 of a sim swap with no notification to us beforehand

I've manged to get my phone number back and I'm back on the network

Can I contact o2

Nah not out of hours.

As a business user this is not acceptable


Rant over

So as this is the 2nd time and passwords are very secure. Is this likely to be a data breach at o2 or even an o2 employee

[MI5]

@mattyg2004 

https://www.actionfraud.police.uk/

[Bambino]

@mattyg2004 I'm a little confused. You say you got an email from Experian, logged in and it said low risk. Who did you log in to? 

Then you say your sim was swapped, your account was disconnected and you were charged £1800, and then you got your number back but you can't contact O2.

How did all this happen in one day? Very confusing. 

Have you contacted the police?

[mattyg2004]

Hi

I got the Experian web alert this morning. Logged into experian to see if it listed any sites But it said it wasn't high risk

At 17:44 I got a text from o2 saying my sim swap is about to complete.
Then my phone disconnected from the o2 network.
Then a few minutes later I got a notification email from paypal saying my password had been changed.
3 mins after that an email from Paypal saying I've just spent £1800 at Ikea. Delivery will be made to

xxx xxxxx xxxxxxxx
xxxxx xxx
xxxx
xxxx xxx
United Kingdom

[Bambino]

@mattyg2004 Just wondering. Are you sure it was Experian that you logged into? How would Experian know what your email address and password to any site was? 

[mattyg2004]

I have web monitoring set up with experian as part of their identity theft service. They do checks similar to haveIbeenPawned etc

I logged in via the app upon recieving the email. I never click links in emails.

This is why I'm concerned about it being an employee. I'm very careful.

[Bambino]

@mattyg2004 Well however they got in, you need to look at this link, if you haven't before, and also notify the police. 

https://www.o2.co.uk/help/safety-and-security/phishing-and-smishing-advice

[mattyg2004]

Thanks Guys

I'll update after speaking to o2 tomorrow.

Apparently sim swap fraud is growing.