O2 Warning: How to Spot Fake 'Important' Texts and What to Do
Scammers are sending fake O2 text messages to trick you into visiting phishing websites and handing over your personal details.
7726.The 'important account notice' text — what it looks like
A common pattern in O2 phishing texts is: IMPORTANT: Your O2 account requires immediate verification. To avoid suspension, confirm your details here: [link]. Another variant targets your payment: Your O2 direct debit of £XX has failed. Update your payment method within 24 hours or your service will be suspended: [link]. A third variant promises something: Congratulations — you are eligible for a free handset upgrade. Claim before midnight: [link].
All three share the same three features: a false sense of urgency, a link you're pressured to click, and a claim that something bad will happen — or something good will be lost — if you don't act immediately. That urgency is the mechanism. The goal in every case is to get you to enter your O2 login credentials, card details, or personal information on a fake website.
What real O2 texts look like — and what O2 says it will never ask for
O2 does send genuine texts — data usage alerts, bill-ready notifications, and upgrade reminders — so the presence of a text from 'O2' is not suspicious by itself. What matters is what the message asks you to do.
If a text asks you to log in and verify your details via a link, do not use it — go directly to o2.co.uk yourself instead. O2's published commitment is specific: it says it will never call, text, or email you asking for a one-time code, password, or other security information. Be careful with broader assumptions — O2 does send genuine billing and payment texts, so a payment-problem message is not automatically fake. The test is not the topic but the action: log in directly at o2.co.uk or through the official app to check an account or billing issue.
If the position is not clear there, contact O2 using contact details you found independently rather than replying to the message.
Genuine O2 texts tend to come from a named sender rather than a random mobile number, but sender names can be spoofed — a message displaying as 'O2' is not proof on its own that it is genuine. Check any claimed account issue by logging in directly at o2.co.uk, independently of any text message, and if the position is not clear there, contact O2 through contact details you found independently. EE and Vodafone customers see near-identical messages — see our EE scam text guide and Vodafone scam text guide.
Five seconds to check before you tap any link
Before clicking any link in an O2 text, run through these checks:
1. Check the sender field. Genuine O2 texts tend to come from a named sender rather than a mobile number, but sender names can be spoofed — so treat this as one signal, not proof.
2. Preview the link before tapping. On iPhone, press and hold the link to see the destination URL. On Android, long-press to copy and then inspect it. If the domain is not o2.co.uk or o2.com, treat it as suspicious.
3. Log in separately. Open your browser and type o2.co.uk yourself. If there is a genuine account issue, it will be shown on your account dashboard — no link required.
4. Never call a number in the text. Scammers include fake O2 support numbers in some messages. From your O2 phone, dial 202 (free) if you're Pay Monthly, or 4445 (free) if you're Pay As You Go — or use the O2 app to reach genuine support. From any other phone, use the O2 customer service number on your bill or o2.co.uk.
5. If in doubt, do nothing. Scammers rely on urgency to override your normal caution. If the message is real, the account issue will still be there in ten minutes when you have checked independently.
Already clicked or entered your details? Do this in order
If you clicked a link in a suspected scam text and entered information, act in this sequence:
1. Change your O2 password immediately — go directly to o2.co.uk on a different device if possible, log in, and change your password. Do this before anything else to close off access to your account.
2. If you entered card or bank details on the fake site, call your bank on the number on the back of your card right away. Tell them you gave your details to a phishing site. They can monitor for fraud and may be able to block the card before it is misused.
3. If the password you entered on the fake O2 site is one you use on other accounts — email, Amazon, banking — change it on every one of those services now. Scammers use harvested credentials to attack other accounts, a technique called credential stuffing.
4. Enable two-factor authentication on your O2 account so that future logins require a code sent to your phone — even if someone has your password, they cannot log in without the code.
5. Monitor your O2 bill for unfamiliar charges over the next few months. Premium-rate services can be added to an account without your knowledge once credentials are compromised.
How to report an O2 scam text
You can forward a suspicious SMS text to 7726 free of charge. For RCS, iMessage and messages received through apps, use the relevant built-in reporting tool.
If the text contained a phishing link, report the link to the National Cyber Security Centre: forward phishing emails to report@phishing.gov.uk, or use the NCSC's report-a-scam-website form at ncsc.gov.uk/section/about-this-website/report-scam-website.
If you have lost money or given financial details, file a full report with Report Fraud at reportfraud.police.uk or call 0300 123 2040 in England, Wales or Northern Ireland, or contact Police Scotland on 101 in Scotland. Keep the original text message as evidence — take a screenshot before you delete it.
Frequently asked questions
Does O2 send texts about account problems, or is any O2 text a scam?
O2 does send genuine texts — bill reminders, data alerts, and upgrade offers — so receiving a text from O2 is not automatically suspicious. What matters is what it asks you to do. O2 says it will never call, text, or email you asking for a one-time code, password, or other security information. Whatever a message claims — billing problem, suspension, upgrade — check it by logging in directly at o2.co.uk rather than using any link in the text.
The text came from a number labelled 'O2' in my phone — how can it still be fake?
SMS sender names can be spoofed. A scammer can send a message that displays as 'O2' or 'O2 Alerts' just as easily as the real company can. This is called SMS spoofing. The displayed sender name is not proof the text is genuine. The reliable approach is to ignore the link entirely and log in yourself at o2.co.uk; if the position is not clear there, contact O2 using contact details you found independently.
I'm getting an O2 text saying I'm due a free handset upgrade — is this real?
It may be genuine, but treat it with caution. Check your upgrade eligibility by logging in directly at o2.co.uk or by dialling 202 (Pay Monthly) or 4445 (Pay As You Go) from your O2 phone — do not use the link in the text. If you are genuinely eligible for an upgrade, it will show in your account independently of any message.
I forwarded the text to 7726 — what happens next?
Your network operator investigates the sender and, if confirmed as a scammer, blocks it and can alert other UK networks. You will normally receive an auto-reply asking for the sender's number — reply with it. You do not need to do anything further unless you lost money or entered personal details, in which case also report to Report Fraud at reportfraud.police.uk, or to Police Scotland on 101 if you are in Scotland.
I clicked the link but didn't enter anything. Am I at risk?
Usually not — on a modern, updated smartphone, simply clicking a link without entering information rarely causes harm. As a precaution: close the tab, clear your browser cache, and check that your O2 account password has not been changed by logging in directly at o2.co.uk. If your phone has not received any recent security updates, consider running a malware scan with a reputable tool.
Sources checked
- O2 — How to prevent and report scam calls and messages
- O2 — Contact us
- Ofcom — What to do about a scam call, text or message
- Report Fraud — reporting a fraud, and who the service covers
- Police Scotland — contact us: non-emergencies on 101