O2 Customer Service Scam: Beware of Sponsored Google Results

A recent experience involving one of our customers at Simple Tech Solutions Barrow is an important reminder that the first result you see on Google is not necessarily the company you were searching for.

The customer simply wanted to cancel her O2 mobile contract. Like many people would, she searched Google for O2 customer services and contacted the first prominent result she saw. Unfortunately, it was a sponsored advert, and the people she contacted were not O2.

What Happened?

Believing she was speaking to O2 customer services, the customer explained that she wanted to cancel her contract. During the conversation, the caller began asking for information relating to her account.

A one-time security code was then sent to her phone. The caller asked her to read that code back to them.

The code was not needed to cancel her contract. The scammers were using it to get through the security protecting her account. After obtaining the code, they were able to reset her account password and then attempted to order a brand-new iPhone through her O2 account.

Thankfully, she called us. The customer contacted Simple Tech Solutions Barrow while this was happening. As soon as she explained what the caller was asking her to do, I told her to stop communicating with them because it was a scam.

Never Read Out a One-Time Security Code

One-time passcodes are an additional layer of security. If a criminal already has some of your account information, that code may be the final thing preventing them from taking control of the account.

O2 specifically warns customers about one-time authorisation code scams and says it will never call and ask you to reveal one of these codes. If a caller asks you to read out a verification or security code that has just arrived on your phone, stop and do not give them the code.

“But It Was the First Result on Google”

This is what makes this case particularly concerning. The customer had not deliberately visited a suspicious website or responded to an unexpected message. She was actively trying to contact a genuine company.

She searched for O2 customer services and selected a prominent result. The problem was that the result was a paid sponsored advert.

A sponsored result is an advertisement. Being positioned above normal search results does not prove that the advertiser is the company you searched for. Criminals can use convincing names, adverts and websites to make people believe they are contacting a genuine organisation.

How to Contact a Company Safely

• Go directly to the company's official website rather than automatically choosing the first search result.
• Use the company's official app if you already have it installed.
• Check a genuine bill, statement or previous correspondence for contact details.
• Pay attention to labels such as Sponsored or Ad in search results.
• Never give a caller your password, PIN or one-time security code.
• If something feels wrong, hang up and contact the company again using independently verified details.

Already Gave Someone the Code?

Act quickly. Contact the genuine provider through its official website, app or a telephone number you have independently verified. Tell them that your account may have been compromised.

Ask them to check for:

• Password or security changes
• New phone or device orders
• Changes to your email or postal address
• New contracts or upgrades
• Any other unusual account activity

You should also change your account password and secure the email account connected to it. If the same password has been reused elsewhere, change it on those accounts as well.

Simple rule: A security code sent to your phone is for you to enter into the genuine website or app. Treat it like a password. Never read it to an unexpected caller.

A Phone Call Prevented This Becoming Much Worse

Fortunately, this customer realised something was not right and contacted us. That allowed us to identify what was happening before the scammers could take things further.

She wasn't doing anything unusual. She simply wanted to cancel her mobile contract. She searched for customer service, selected a prominent sponsored result and nearly had an expensive new iPhone fraudulently ordered through her account.

When searching for customer support online, take a few extra seconds to make sure you are dealing with the real company. And above all, never share a one-time security code with someone who calls you.