"Update credit card" Phishing scam

[PhishingNinja]

Received an SMS from 470-XXX-XXXX today indicating that I must immediately update my credit card information on file for continued service, prefaced with a "Free Bell Msg:"

There is no balance outstanding on my account and nothing in my online account indicates there is a problem.  Has anyone else received a similar message?

[BellDRock · Accepted solution]

@PhishingNinja 

This is undoubtedly a scam. Known as "smishing".

Remember, we will never send you a direct SMS regarding bill corrections, credits, account or identification updates etc. and will never direct you to click on a 3rd party website or send account info via SMS etc.  When in doubt, always play it safe and never click any link.

Please forward the smishing attempt to 7726 (SPAM), delete the SMS and block the number for your security.

If you suspect that you have fallen victim to a smishing scam, don’t hesitate to contact the Canadian Anti-Fraud Centreto report it.

[jersey]

I received a scam text message. What can I do?

[User89]

I got a scam text from 647-XXX-XXXX saying, "Your 2% annual restitution of ($83.90) is ready to be claimed. Reply (Y) for Yes". What can I do?

[adfaeqwwe]

The scammer successfully to trick me to reset my password and gain access to my account

1. First they said they have a discount for Bell customer on a service
2. Then they want me to provide user account and the email account that registered in MyBell.ca. They mentioned this is for security reason/check
3. They then actually used this info to trigger the password reset without my notice and then ask me provide for the pin receiving from Bell text message
4. Without a speical password reset URL, they use the pin to reset my password and enter my account without any notice

Fortunatly, I did not let to further process of purchase which I assume they will then ask for credit card info.

For Bell, I think you should 

1. The reset password can't just rely on PIN, but the reset should be based on the url from the email. This will avoid the scammer to change password without explicitly requiring the Bell customer to take action/change password
2. Explicitly showing in the Text Message that this PIN is for changing/resetting the Password so customer understand this risk
3. Enforce login notification via email/text message to the customer's phone so scammer can't login without the customer's notification

[dks]

Thank you for sharing your experience. You were right. It was a fraudster. Never, ever give out your b1 number and password over the phone. Bell has other ways to confirm your identity besides your b1 number and e-mail. Bell does not call you to offer you an absurd discount or to offer you a new modem and a discount. 

[WelshTerrier]

Good Day & Welcome to the Bell Community Forum.

Thank you for sharing this with the Bell Community. What made you think it was a representative from Bell that called you? Because he said so? Because of his call display number?

Next time, please hang up! This was not Bell calling you. How about a scammer, a fraudster, a thief trying to gain access to your personal information. There is no reason for you to talk to them at all. Fraudsters call potential victims claiming to be from their service provider. They offer a promotion or deal so lucrative they cannot pass it up. The fraudsters proceed to ask for the victim’s personal information including their Social Insurance Number (SIN) and Driver’s License number, credit card, passwords, etc.

Treat it as a Scam! Fraudsters can impersonate anyone or any company that they wish to be in order to steal from you. Remember one thing, listen only, say nothing & share nothing! If in doubt call Bell directly.

You should verify your MyBell & your email accounts & change the passwords for both of these accounts A.S.A.P.

If you require further assistance, please contact Bell Customer Service, Internet tech support at: 1 866 310-BELL (2355)

Just a few reminders & suggestions:

1. Why would any reputable company request for you to provide them with any personal information? They called you! You did not call them!
2. Never, ever share any personal information with anyone you do not know or trust!
3. Do not reply to unknown emails, messages, callers, etc.
4. Do not open web links or attachments in suspicious messages.
5. Next time "Hang up!"

Please have a look at the following web link. It will explain just what I am saying with much more details.

Service provider impersonation scam - Bell

Take care.