If You Got a “Your Bill Is Paid For” Text, You’re Part of a Massive T-Mobile Texting Scam

Stu Sjouwerman | Apr 21, 2022

If You Got a “Your Bill Is Paid For” Text, You’re Part of a Massive T-Mobile Texting ScamThe latest scam targeting T-Mobile customers impersonating T-Mobile and focused on collecting your personal data by tempting you with free “gifts”.

Who doesn’t like free stuff? With mobile carriers often having promotions like “Get an iPhone 13 on us!”, it’s not too far-fetched to believe they may be giving away a free gift to one (or more) of its customers.

In a recent scam (that many of you probably experienced), a text was sent out to a group of mobile phone numbers (which looked like a group text). The message may have said something to the effect of

“Your bill is paid for March. Thanks, here’s a little gift for you”

and proceeded to provide a URL that had zero to do with T-Mobile. Upon clicking the link, victims were taken to one of many pages impersonating T-Mobile and offering gifts like an Apple iPad Pro and Magic Keyboard:

Spot-the-Scam_TMobile

Questions are asked to “verify” you, which could be used to collect details used to aid SIM swapping activities, commit identify theft, and more.

Employees that have undergone continual Security Awareness Training already know to be suspicious of any communication that involves receiving something for free.

In the case of this scam, if it seems too good to be true, it definitely is.

Topics: Phishing

Discover Your Organization’s Phish-prone™ Percentage

Ninety-one percent of data breaches begin with spear phishing. Launch our Free Phishing Security Test for up to 100 users to uncover your team's vulnerability and see how your security posture stacks up against industry benchmarks.

Get Your Free Phishing Security Test

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.