O2 issues warning over new ‘inactive SIM’ phishing scam

O2 has issued an urgent warning to consumers regarding a new phishing scam that attempts to steal login credentials by impersonating the telecommunications provider.

The fraud involves messages claiming that a customer’s SIM card is about to be deactivated for failing to sign updated terms and conditions.

The messages direct recipients to a sophisticated, fraudulent website designed to mimic a legitimate O2 portal. Once there, victims are prompted to “log in” to accept the terms, providing scammers with the necessary usernames and passwords to gain unauthorised access to the customer’s MyO2 account.

An example of the deceptive text reads: “O2UK: IMPORTANT: Your SIM Card(s) will be inactive on 04/06/2026, because you have NOT signed our Terms and Conditions. Logon [site removed] to sign”.

While Virgin Media O2 has already blocked over one billion scam messages and continues to restrict access to known fraudulent URLs, the company warns that scammers are constantly evolving their tactics.

This initiative to protect consumers was recently discussed during a meeting between major UK telecoms providers, including Virgin Media O2, BT/EE, and VodafoneThree and the Minister for Fraud, Lord Hanson of Flint.

Murray Mackenzie, Director of Fraud Prevention at Virgin Media O2, emphasised the growing sophistication of these criminal efforts, noting the use of increasingly believable, urgent requests.

Mackenzie urged the public to remain vigilant and reminded customers that reporting suspicious activity is crucial in helping the company act faster to shut down scams at their source.

How to protect yourself from scams

• Verify before acting: O2 will not contact you via text to request that you sign updated Terms and Conditions to avoid SIM deactivation.

• Ignore urgent pressure: Be extremely cautious of messages that use threatening or highly urgent language intended to force a quick reaction.

• Check the source: Genuine messages from O2 often appear under a verified “O2” contact name on many smartphones, rather than coming from a standard mobile number.

• Avoid suspicious links: Never click on links in unexpected texts. Instead, visit the MyO2 app directly or call 202 from an O2 device to verify any account requests.

• Report the fraud: Forward any suspicious messages to 7726, the official reporting service used by telecoms providers to investigate and block malicious numbers.

• Act if compromised: If you believe you have entered your details into a fake site, change your account password immediately.

• Stay informed: For further advice on protecting yourself from fraud, visit the government’s “Stop! Think Fraud!” national awareness campaign.