O2 Warns Customers Not To Fall For Convincing New Phone Text Scam

A convincing new text message has forced UK mobile carrier O2 to warn its customers to be on high alert. The scam text is designed to look exactly like it comes from O2 itself, making it dangerously easy to fall for.

O2, one of the United Kingdom's largest mobile network operators with over 30 million subscribers, issued a public warning in June 2026 after reports of a highly targeted smishing campaign. The scam texts typically claim there is an issue with the recipient's account, such as a billing problem or a security alert, and urge them to click a link or call a number to resolve it immediately. The goal is to steal personal information, login credentials, or financial details.

Phone-based phishing—commonly known as smishing (SMS phishing)—has been a persistent threat for years, but this latest variant has alarmed O2 because of its sophistication. The message format, sender ID, and tone closely mirror O2's legitimate customer communications, making it nearly indistinguishable from a genuine alert. Such attacks exploit the trust customers place in their mobile provider, especially when the message appears to come from a known shortcode or contact name.

O2 has not disclosed the total number of reported incidents but stressed that the scam is spreading rapidly. The company advised customers who receive a suspicious text not to click on any links, not to reply, and to delete the message immediately. It also urged users to forward the scam text to 7726—the UK's national spam reporting number—so that telecom regulators and law enforcement can investigate and block the source numbers.

The broader context is a steep rise in smishing attacks across the UK. According to UK Finance, reported phishing incidents increased by 45% in 2025, with losses exceeding £100 million. Cybercriminals are increasingly targeting mobile users because smartphones are now the primary device for banking, shopping, and communication. The pandemic accelerated the shift to digital, and scammers have adapted quickly, using automation and AI-generated messages to scale their operations.

What makes O2's warning particularly urgent is its timing. Summer months often see a spike in travel-related scams, where fraudsters pose as airlines, hotels, or mobile operators offering roaming deals or emergency account updates. Mobile carriers themselves are also frequent impersonation targets because they hold sensitive data such as billing addresses, payment methods, and even device unlock codes.

Industry observers note that no single carrier can solve the smishing problem alone. While O2, Vodafone, EE, and Three have all invested in filtering and blocking technologies, scammers constantly evolve their tactics. The stolen personal data can be used for identity theft, fraudulent purchases, or sold on the dark web. The UK's National Cyber Security Centre (NCSC) recommends that consumers enable two-factor authentication on their mobile accounts and never share security codes via text.

Looking ahead, O2 is likely to step up its customer education campaigns and may introduce additional verification steps, such as asking users to confirm their identity through the My O2 app before acting on any text-based alert. The UK government is also considering stricter regulations for message sender IDs and shortcodes to make it harder for scammers to spoof legitimate brands. For now, the best defense is vigilance: if a text asks you to take urgent action involving your money or personal data, pause, verify through official channels, and don't let the pressure override your judgment.