How to Spot Fake AT&T and Verizon Phishing Texts in 2026

"AT&T: Your account has been flagged for unusual activity. Verify your identity within 24 hours or service will be suspended." If you received this text, would you click the link?

AT&T, Verizon, and T-Mobile collectively serve over 300 million subscribers in the US. That makes them the perfect targets for impersonation scams. In 2025, the FCC reported a 70% increase in carrier phishing complaints.

Why Carriers Are Prime Targets

• Universal usage — nearly everyone has a phone plan
• Account-linked payments — carrier accounts connect to billing and payment methods
• Fear of disconnection — losing phone service feels like an emergency
• SIM swap potential — carrier account access enables SIM swap attacks

Common Phishing Tactics

1. Unpaid Bill / Service Suspension

The most common scam. "Your bill is overdue," "Service will be suspended today."

Real examples:

• "Verizon: Payment of $89.99 overdue. Pay now to avoid service interruption: [phishing link]"
• "AT&T Alert: Account suspended due to billing issue. Resolve: http://att-billing.xyz"

2. Account Security Alerts

"Unauthorized login detected," "Verify your identity to prevent account lockout."

3. Free Upgrade Offers

"You're eligible for a free iPhone upgrade!" or "Exclusive 5G plan offer for loyal customers."

4. SIM Card / eSIM Scams

"Your SIM card needs to be updated" — designed to facilitate SIM swap attacks.

Real vs. Fake Comparison

Check	Legitimate Carrier	Phishing
Sender	Official short code (e.g., Verizon uses specific codes)	Random phone numbers
URL	att.com / verizon.com / t-mobile.com	Shortened URLs, misspelled domains
Info requests	In the official app only	Asks for SSN, PIN, or password via link
Greeting	Your name or account holder name	"Dear Customer"
Urgency	States specific due date	"Immediately" or "within hours"
App verification	Same notification in carrier app	No notification in app

What To Do With Suspicious Messages

1. Don't tap any links — not even to investigate
2. Open your carrier's app directly to check your account
3. Call your carrier's official number — AT&T: 611, Verizon: *611, T-Mobile: 611
4. Forward suspicious texts to 7726 (SPAM)
5. Report to the FCC at fcc.gov/consumers/guides/stop-unwanted-texts

If You Already Clicked

1. Change your carrier account password immediately
2. Set up a carrier PIN/passcode if you haven't
3. Check for unauthorized changes to your account
4. Contact your carrier about potential SIM swap
5. Monitor your bank accounts for unusual activity
6. File a report at identitytheft.gov

5 Habits to Protect Your Carrier Account

1. Set a carrier account PIN — separate from your device PIN
2. Enable SIM lock — prevents unauthorized SIM swaps
3. Use a unique password for your carrier account
4. Enable account change notifications — get alerts for any account modifications
5. Regularly review authorized devices and lines

Sharing Account Info Safely

Managing a family plan means sometimes sharing account PINs or login credentials. Sending these through iMessage or Messenger leaves them in chat history where they can be compromised.

LOCK.PUB lets you create password-protected, self-destructing notes for sharing sensitive account information. The data disappears after it's read, so credentials don't linger in messaging apps.

Other Commonly Impersonated Services

Service	Scam Type
IRS	"Tax refund pending"
Social Security	"Benefits suspended"
USPS/FedEx	"Package delivery failed"
Apple	"Apple ID locked"
Netflix	"Payment declined"

The SIM Swap Threat

Carrier phishing is often the first step in a SIM swap attack, where criminals transfer your phone number to their device. This gives them access to your two-factor authentication codes, email accounts, and bank accounts.

Protect yourself by sharing sensitive information through secure channels. Use LOCK.PUB to send account credentials with password protection — the link expires and can't be forwarded.

Final Thoughts

Carrier phishing exploits your fear of losing phone service. Scammers know that the threat of disconnection triggers immediate, unthinking action.

The rule: never click links in texts about your phone bill. Always check directly through your carrier's app or by calling 611.

For sharing sensitive account information, create an encrypted note at LOCK.PUB — free, secure, and takes seconds.

The more urgent a message feels, the more important it is to stop and verify.