An urgent warning has been issued to millions of iPhone and Android users by O2, urging customers to be wary of a new scam targeting UK users. The scam involves a fraudulent message claiming that customers’ SIM cards are at risk of deactivation due to a failure to accept updated Terms and Conditions. This message, which uses urgent language like “IMPORTANT” and “NOT,” appears to come from an official O2 number, making it difficult to distinguish as fake.
For O2 SIM card holders, it is crucial to be vigilant. The scam message states, “O2UK: IMPORTANT: Your SIM Card(s) will be inactive on 04/06/2026, because you have NOT signed our Terms and Conditions. Logon to sign.” In addition to the deactivation threat, the message contains a link redirecting recipients to a fake website aimed at stealing personal information. Scammers may then use this information to access MyO2 accounts and potentially breach other online accounts using stolen passwords.
Customers who receive messages about their O2 SIM cards expiring should refrain from clicking any links provided. Instead, they should access their accounts through the official O2 website or app, or contact O2 directly to verify the message’s authenticity.
Murray Mackenzie, Director of Fraud Prevention at Virgin Media O2, highlighted the increasing sophistication of scammers in their tactics. He emphasized the importance of vigilance and reporting suspicious messages to prevent scams from spreading.
O2 has offered advice to help customers protect themselves:
– O2 will not send texts demanding acceptance of new Terms and Conditions or threatening SIM deactivation. Such messages are fraudulent.
– Exercise caution with messages using urgent or threatening language to prompt immediate action.
– Be wary of unexpected messages from unknown numbers. Genuine O2 messages typically display under a verified “O2” sender name rather than a standard mobile number.
– Avoid clicking on links in unsolicited texts. Instead, access the MyO2 app directly or call 202 from an O2 phone to verify the legitimacy of any requests.
– If you have inadvertently provided login details after clicking a suspicious link, change your password immediately to secure your account.