Identify fake AT&T emails

You can protect yourself from email scams by learning what they look like. Do you suspect an email is fake or wasn’t sent from AT&T? Don’t open it, click any links, or open any attachments. These links or attachments can install malicious software or viruses on your device.

There are several signs that could point to a fake email.

• Makes odd claims about your bill. Strange alerts might be that a bill is ready, an account needs to be verified, or a payment needs to be confirmed. These emails often include a link to sign in to your account. Don’t click on the link.
• Asks for personal or account info.
• Claims a high balance is due. The email may also make threats that your account will be suspended if you don’t pay the high balance.
• Doesn’t include an account number. When we email you about your AT&T bill, we'll include either several digits or your full account number on it.
• Links to non-AT&T websites. Hover over the links in the email to see the true destination website. A malicious site will try to mimic the look of an AT&T website. However, if you pay close attention, you’ll see it usually has a different format. For example, the link might look like https://[non-att.com domain]/[random text]/[random text.html]. Links will take you to a malware payload website, which changes often to get around blocking. AT&T isn’t affiliated with these links. These are dangerous websites.
• Includes attachments. AT&T bills don't include attachments. Fake attachments will be in .zip format and may have names that start with ATT_Payment.

If you think an email is malicious, you can address it right away.

1. Review the email carefully. Don’t click any links or download any attachments. 
2. Report the email, using one of these options:
   • On currently.com: Select the Spam button in the toolbar above the message. This will also remove the email from your inbox.
   • In an email program: Forward the email to AT&T at abuse@att.net. When possible, include the full email header to help us identify the origins of the email.
3. Delete the email, if it hasn’t already been removed from your inbox.

There are several common factors with have identified common examples of fraudulentfake emails. Review We have somethese examples so you can recognize, report, and remove any emails you identify as fake.

Webmail upgrade
The message says your email inbox messages are pending or were put on hold due to a recent webmail upgrade.



Account verification
The subject line refers to shutting your account down. The email asks you to verify your account.


Account Sign-in
The subject line claims that you have a new or past-due account balance. The email wants you to sign in to your account with a link they provide.



Payment details
The email looks like a payment confirmation. It asks you to open an attachment or click on a link to review payment details.



Good to know: You may get other fake communications, not just email. You could get text messages, phone calls, and even messages on social media. Hackers are always thinking of new ways to scam people. Don't share anything if you're not sure that the website you're visiting is an AT&T website.