Phishing or legit O2 text message?

[Anonymous]

This morning I recieved this text message perportedly from O2:

"We have reason to believe your email and password for MyO2 has been obtained by third parties through phishing and may be used to access your MyO2 account.

As a precaution, we will suspend your password on MyO2 and send you a new one to enable you to reset it.

For more advice, visit ******(plus some randon letters and numbers I've removed incase it is malicious. Link also edited to remove exact address) or contact us."

I did not follow the link in the text message, instead I went to the 02 site seperatly and logged in with no issues to My O2. No messages came up saying I needed to reset my password and I have not received an email as the text message said I would.

It all looks very dodgy as far as I'm concerned, but frankly its a very convincing text, with none of the usual give aways. Its comes from 'O2UK', has proper English and the address does have o2.co.uk in it although with some before and after extras which I can't find any info on.

Anyone else get this?

[Cleoriff]

@Anonymous

Phishing and scam advice here http://www.o2.co.uk/help/safety-and-security/fraud-and-phishing-advice

[MI5]

There has been a recent spate of scam texts which have been investigated on here and proven to definitely being fake.
Yours may be different but just be very cautious of anything and any links.

[Anonymous]

I've had 1 with a link that I think is definately fake - from Mybilling. These that I had today do seem to be legit. They all come from the same number and say O2UK. 2 were sent by 2 different customer service people that I was talking to at the time - both texts popped up on my mac while I was on the phone to them. They confirmed that they had sent them but there was no record of them on the system. I have a whole text conversation from the same number and contact (O2UK) and none appear on their system - even though they confirm sending 2 of them. It's weird and worrying! It happened to me in September and October as well. Ring all the ones from O2UK from my iphone and all ring to the same number 62 85

[MI5]

Sounds like something @Toby or @Martin-O2 could look into for you.

[Martin-O2]

Thanks for the mention @MI5 I think this is definitely worth raising with the rest of the ream. 

@Anonymous I'll drop you a private message to get a bit more info on this 

[Anonymous]

[Anonymous]

Be interested to hear more - I and my partner both had the same today. Initial text at 14.49 saying account possibly compromised. Follow up text a few hours later with code password to use.

In between I spoke with a live chat agent, who couldn't see anything wrong with my account, followed by the fraud team, who also couldn't see anything wrong. I also changed my password and other security options.

The texts all came through from O2UK - and on the same message thread as texts I always get from o2, telling me I've used all my data allowance, or that I've added a bolt on.

He doesn't have an o2 account anymore (old out of use email), but I do.

Really very odd.

[Cleoriff]

---

@Anonymous wrote:

Be interested to hear more - I and my partner both had the same today. Initial text at 14.49 saying account possibly compromised. Follow up text a few hours later with code password to use.

In between I spoke with a live chat agent, who couldn't see anything wrong with my account, followed by the fraud team, who also couldn't see anything wrong. I also changed my password and other security options.

The texts all came through from O2UK - and on the same message thread as texts I always get from o2, telling me I've used all my data allowance, or that I've added a bolt on.

He doesn't have an o2 account anymore (old out of use email), but I do.

Really very odd.

---

Probably needs investigating. Have a look at this guide https://community.o2.co.uk/t5/Pay-Monthly-and-Pay-Go/Are-you-fed-up-with-spam-calls-and-texts-Follow-these-steps-to/m-p/386364#M37293

[MI5]

The fact the the texts came through on the same thread would indicate a legitimate o2 text in this instance, although I suspect another system glitch of some kind..