As you may know, we’ve been taking a lot of action recently to combat a spate of what’s called ‘smishing’, which is where a fraudster sends a text message to someone to try and gain their personal information. You may well have received messages like this purporting to be from various businesses.
In this case, these fraudsters have been targeting giffgaff members, pretending to be from giffgaff, and have been asking people to submit their login information on a fake page that looks a lot like a giffgaff page.
They ask for your username, password, and a lot of personal information, pretending that it’s ‘verification’. This can include things like your full name or address, all the way up to your banking information and security questions. If someone fills out this form, then they’ve unfortunately just unwittingly given away a lot of information to a scammer, so it’s important that every member has a clear understanding of how to spot targeted attacks like this and can be confident that they’re keeping their details secure.
We’re doing everything we can to stop this from happening. We have been shutting down these sites as quickly as they crop up, as well as monitoring those sites to see if our members have been victims of these scams. Unfortunately, these people are very persistent, and very good at creating a sense of urgency and making their websites seem legitimate so that people give away information more readily. As much as we’re doing, we know that some people will have unfortunately given away their information in this way.
So, what can you do to stop this?
How to stop yourself from being affected
If you think you’ve already been affected
I know this might be an alarming thing to read, but it is important that you are aware of it and know the best way to keep yourself safe. We’re always working to make sure we’re keeping you and your information secure, but it’s not always just up to us, so if you have any questions about how best to make sure you’re not caught by scams like this, please ask and I’ll be happy to discuss it with you.
Thanks for the sensible advice @captainben
There have been a lot of members posting that they've received these scam texts.
Can text messages that are spoofing the name 'giffgaff' rather than having a mobile number be forwarded to 7726?
I know you can forward messages from spoofed numbers, but what about when a message appears to come from 'giffgaff'?