One-time PIN or verification code
A scammer pretends to be from our fraud or support department and calls or texts you. They ask for your account PIN or code to verify your account. If you share it, they can sign in as you.
Example text scams:
- AT&T Notice: 11,420 rewards points in your account will expire on Jan 31. Redeem before [Date]
- Access updated: see the report now: [URL with att in it]
- [Name], ATT could not complete your account processing. Respond within 24 hours at [number] to avoid restriction.
SIM swap or eSIM takeover
Someone gets a new SIM or eSIM and tries to move your phone number to their device. This lets them receive your calls and texts (including sign-in codes).
Get more details about SIM swap scams
Social engineering
A scammer contacts you and says they’re from AT&T. They may ask for your personal info to verify your account, like your Social Security number, password, or credit card number.
Find out about social engineering scams
Account takeover
Someone uses a stolen password (often from a data leak) or a fake sign-in page to get into your account and change settings, place orders, or update contact info.
Delivery order
A scammer contacts you pretending to be from AT&T and tells you to return your device due to a defect, recall, or security alert. Then they ask you to select a link in the email or text they sent you, share personal info, or ship your phone to an unknown address.
Gift card or prepaid payment request
Someone contacts you and pretends to represent AT&T. They offer a discount or threaten to shut off service unless you pay with gift cards, prepaid cards, crypto, or a money transfer. The scammer may even give you a toll-free callback number to make the payment.
If you suspect a call, text, or email is a scam
- Stop and don’t share your account or personal info. We won’t contact you and ask you:
- For a PIN or code
- To ship your phone to an unknown address
- For a prepaid or gift card for payment
- Don’t click or tap. Avoid links in unexpected texts and emails.
- Hang up or ignore. Stop responding. Delete the text or email.
- Report unwanted calls or texts. Unwanted calls and texts are annoying, and some could be fraudulent or illegal.
- Report other fraud types. Know how to contact the credit agencies and more.
If you already shared your info
- Change your password, don’t reuse old ones.
- Update your AT&T ID if it’s easy to recognize.
- Change your account or security passcode to add stronger protection.
- Manage access to your account online to confirm who can authorize changes to your account.
How to take proactive steps
- Protect your AT&T account. Review settings and authentication options to help prevent unauthorized access to your account.
- Confirm recovery email. Make sure the recovery email address listed on your profile is the one you want to use to reset your password.
- Treat any request for a code or PIN as a scam. Be cautious if someone pretending to be from our fraud department or support contacts you and asks for a PIN or code. We won’t ask you to read back a passcode or PIN used to sign in as you.
- Watch for early warning signs. Be cautious of unexpected calls, texts, or emails asking for account details. For example: password resets, a sudden “No service” message, SIM or eSIM prompts, password reset emails, or address or shipping changes.
- Get general security tips. Find other things you can do to help protect yourself from fraud and keep your accounts and devices safe.