AT&T scams
Last updated September 19, 2026
The short answer
AT&T scams involve fake billing texts, phishing emails about account suspension, and SIM swap attacks that hijack your phone number. AT&T will never text you a link to pay your bill or ask for your password. Always log in directly at att.com or use the myAT&T app.
AT&T is one of the most impersonated telecom brands in the United States. Scammers send fake past-due billing texts, phishing emails claiming your service will be disconnected, and even execute SIM swap attacks to take over your phone number and bypass two-factor authentication on your financial accounts.
How AT&T scams work
- 1
Fake billing or past-due text
You receive a text saying your AT&T bill is overdue and your service will be suspended. The text includes a link to "pay now." The link goes to a fake AT&T payment page that captures your login credentials and credit card information.
- 2
Account suspension phishing email
An email claims your AT&T account has been flagged for unusual activity and will be suspended in 24 hours unless you verify your identity. The link leads to a fake AT&T login page.
- 3
SIM swap attack
A scammer calls AT&T pretending to be you, using stolen personal info to convince the rep to transfer your phone number to a new SIM card. Once they control your number, they intercept your two-factor authentication codes.
- 4
Fake upgrade or reward offer
A text or call offers a free phone upgrade or exclusive AT&T loyalty reward. To claim it, you need to "verify" your account by providing your AT&T PIN, Social Security number, or payment info.
Warning signs
- A text says your AT&T bill is overdue and includes a link to pay
- An email threatens to suspend your AT&T account unless you click a link
- Someone calls offering a free phone upgrade in exchange for your account PIN
- You suddenly lose cell service for no apparent reason (possible SIM swap)
- The sender email or text doesn't come from an official AT&T address
- You receive a notification about a SIM or device change you didn't request
Examples
Fake AT&T past-due bill text
A text reads: "AT&T Alert: Your payment of $127.43 is past due. Service will be interrupted. Pay now: att-billpay.test." The link goes to a lookalike site that captures your AT&T login and credit card number. The real AT&T billing site is att.com/myatt.
SIM swap leading to bank account theft
A scammer gathers personal info from social media and calls AT&T claiming to need a new SIM card. After taking over the phone number, they reset passwords on the victim's bank and email accounts using SMS-based two-factor codes, draining the checking account within hours.
What to do
- Don't click links in texts or emails about your AT&T account. Go to att.com or use the myAT&T app directly.
- If you suddenly lose cell service, call AT&T immediately from another phone. This could be a SIM swap.
- Set up an AT&T account passcode (different from your PIN) for extra protection on account changes.
- If you shared your login credentials, change your AT&T password and PIN immediately.
- Report phishing texts by forwarding them to 7726 (SPAM).
Report it to AT&T
Forward the text to 7726 (SPAM) and phishing email to abuse@att.net, then add a wireless passcode to block SIM swaps.
Getting your money back
If your AT&T account was compromised, change your password and PIN immediately through att.com. If you experienced a SIM swap, contact AT&T to reclaim your number and add extra security to your account. Change passwords on all accounts that used your phone number for two-factor authentication. Place a fraud alert with the three credit bureaus if your personal information was exposed.
Frequently asked questions
Does AT&T send text messages about past-due bills?
AT&T may send billing reminders, but they will never include a link to a payment page in a text. If you receive a billing text, ignore the link and check your balance directly in the myAT&T app or at att.com.
What is a SIM swap and how do I prevent it?
A SIM swap is when a scammer convinces your carrier to transfer your phone number to their SIM card. Prevent it by setting up extra security on your AT&T account: add an account passcode, enable the "extra security" feature, and avoid sharing personal information on social media.
How do I report a fake AT&T text or email?
Forward suspicious texts to 7726 (SPAM). Forward phishing emails to abuse@att.net. You can also report them to the FTC at ReportFraud.ftc.gov.
Other companies scammers impersonate
Scams reuse their scripts across brands. If you were contacted about AT&T, these are the guides worth reading next.