This morning I received a text message from Lebara saying they'd had trouble taking my payment. Made complete sense as I've lost my wallet and had to cancel my cards this week. At the bottom was a link to log into MyLebara account which took me to a dodgy looking site for a VPN saying my details have been stolen etc etc.Very odd from an official Lebara text. Anyone else had this?
Text message from Lebara with dodgy link
X
Collapse
5 replies
182
views
-
5 replies
-
Just like Geoffrad2309 received a dodgy phishing email, the suggestion I made would be to perhaps take a screenshot of what you received and post it here,so the community know what to keep their eyes on.All the best
2-
Reply
-
-
Couldn't work out how to post a screenshot but the text certainly looks legit as it was the latest of the usual texts you get from the same Lebara number, this one saying that my monthly plan couldn't renew as there was an issue with the payment. This is correct as it is due today and I had cancelled the card so the payment wouldn't have gone through. (I also had an email with this info but no link). What is strange is the last sentence saying "to log in to your MyLebara account visit - and then gives a link to a site which says my phone has been compromised so sign up for this VPN.
This is the address for reference:
Lebara.me/42Hkv9
2-
Reply
Comment
-
-
Pete1987, GaryMc thanks both for flagging the phishing and smishing messages that you received. I've informed the higher ups about this. We also have some information on identifying and dealing with these sort of messages on the community. You can report any suspicious SMS messages by forwarding the message to 7726.
Martin - Community Manager1-
Reply
Comment
-
-
@Pete1987 , @Martin
We experienced a very similar scam attempt recently.
My wife received a text that appeared to come from Lebara (same message thread as genuine messages), saying that the payment for the 12GB MSE plan had failed. The timing made it very convincing, as her previous card had just been cancelled and replaced.
We clicked the link without noticing the domain (lebara.me instead of lebara.co.uk), which opened a page showing a “Potentially Unsafe Connection” warning. It prompted us to enable a VPN, and redirected to an App Store page for a VPN app (maximus-fast-vpn). At that point we realised it was a scam and closed everything. No app was installed and no details were entered.
Just sharing this in case it helps others - the SMS looked very convincing and came through the same thread as legitimate Lebara messages.
Screenshots attached.
3-
Reply
Comment
-
-
So pleased to have joined this thread, thanks for the update on scam text messages. I bought data for use in Hong Kong but have had daily text msgs telling me to buy international data or pay £94 per day!
-
Reply
Comment
-
Comment