A new wave of scams is sweeping through the UK, with mobile provider EE reporting that over 265,000 customers have fallen victim to fraudulent text messages claiming to offer reward points. These deceptive messages, purporting to originate from both EE and Vodafone, are designed to extract sensitive personal information from unsuspecting users under the guise of a rewards programme that does not exist.
The Deceptive Message
Victims of this scam are receiving texts that claim they have accrued a substantial number of reward points—often around 12,739—through a rewards scheme they are unfamiliar with. The messages typically contain a sense of urgency, stating that a significant number of these points are set to expire within days unless claimed immediately. A typical message reads: “You currently hold 12,739 Reward Points available in your account. If no action is taken, these points will expire in 3 days under the terms of the 2026 Reward Points campaign.”
Upon clicking the link provided in the message, users are redirected to a counterfeit website that mimics the legitimate branding of their mobile provider. There, they are presented with enticing offers, such as high-end gadgets, requiring them to pay for postage to claim their prizes. Unfortunately, this is merely a ruse to gather bank details from users, which criminals can exploit for financial gain.
Response from Mobile Providers
EE first became aware of this scam two months ago and has since seen an alarming rise in reports from customers. A spokesperson confirmed that the company is collaborating with both Apple and Google to tackle the issue but noted that the messages are sent using Rich Communication Services (RCS), a more advanced messaging format that cannot be blocked in the same way as traditional SMS.
Vodafone, while having its own VeryMe Rewards scheme, has clarified that it does not refer to it as the “Vodafone Rewards Club,” a term used in some of the scam texts. The company has indicated that most of its customers are not receiving these fraudulent messages as RCS is not enabled for Vodafone on iPhones.
Identifying the Scam
The fraudulent texts are designed to create a false sense of urgency, a common tactic used by scammers to pressure victims into making hasty decisions. One EE customer described their experience after clicking the link: “It just refreshed to a blank page with a spinning icon.” This suggests that once users provide their bank information, the scammers swiftly take advantage of the data before disappearing.
What You Should Do
If you receive a suspicious message, it’s crucial to refrain from clicking any links contained within. EE advises customers to report such texts by using the “report spam” feature on their devices or forwarding the message to 7726 at no cost. Should you have inadvertently shared personal information, immediately contact your bank and report the incident to Report Fraud (formerly known as Action Fraud).
Why it Matters
The rise of these scams highlights the urgent need for consumers to remain vigilant and informed about potential threats. With the increasing sophistication of fraud tactics, it has never been more critical for individuals to exercise caution when dealing with unsolicited communications. Protecting personal and financial information is essential in an era where cybercrime is on the rise, and awareness is the first line of defence against these malicious schemes.
