is that a scam?
← Back to all scams
MEDIUM phishing Last reported: 20 Oct 2026 Share

A text from "EE" says your reward points are expiring — there are no such points and the link is fake

A text claiming to be EE says your reward points expire soon — click to redeem. EE has no reward scheme. The link leads to a fake page that steals your mobile account credentials; harvested details enable SIM swap or account hijacking.

Also known as: EE reward points scam, fake EE loyalty points text, EE smishing UK, mobile reward points phishing, O2 reward text scam, Vodafone loyalty points scam

What to do right now

  1. 1 Do not click the link. Forward the scam text to 7726 (free on all UK mobile networks) and delete the message.
  2. 2 If you clicked the link and entered your EE login details, immediately log into your real EE account at ee.co.uk (typed directly — do not follow any link) and change your password.
  3. 3 Watch for unexpected one-time passcodes (OTPs) sent to your phone in the hours after clicking the link — these may indicate a SIM swap attempt. Contact EE immediately if you see them.
  4. 4 If you notice your mobile signal drops completely and your phone shows 'no service', call your mobile operator from another device — your SIM may have been swapped.
  5. 5 Report to Report Fraud at https://www.reportfraud.police.uk or call 0300 123 2040.

Red flags

  • ⚠ EE does not have a reward points or loyalty scheme — any text claiming your EE points are expiring is automatically fake
  • ⚠ The link does not go to ee.co.uk — the real EE domain; lookalike domains like 'ee-rewards.co.uk' or 'ee-points-claim.com' are all fraudulent
  • ⚠ The message creates urgency by stating only 'X days left' to claim points — real telecom loyalty programmes do not expire with short text warnings
  • ⚠ After clicking the link, the page asks for your EE account login, password, date of birth, or full mobile number — legitimate EE pages are reached by navigating to ee.co.uk directly
  • ⚠ You receive the text even though you are not an EE customer — scammers send bulk SMS and do not verify network

Known variants

  • Merger SIM deactivation call: callers impersonating Three or Vodafone claim that due to the Vodafone-Three merger your SIM will stop working within 24 hours or be blocked. They harvest your name, age, email, and postcode to 'send a replacement SIM' — a data-collection pretext for phishing or account takeover.

    Last seen: 9/26/2026

  • O2 inactive SIM text: text claiming your SIM will deactivate because you have not signed new Terms and Conditions, with a link to a fake MyO2 login page. Entering credentials hands fraudsters your MyO2 account. O2 never texts about T&C acceptance to avoid SIM deactivation.

    Last seen: 10/19/2026

  • Sky cold-call discount: caller impersonating Sky offers 30–50% off, asks about last bill to seem credible, harvests date of birth, account password, and sort code. Device variant: caller offers free upgrade device; fake courier collects it, ordering it in victim's name. Reports rose 124% January 2026; still active October 2026.

    Last seen: 10/20/2026

Sources

Share this with someone who might need it