The T-Mobile reward points scam is a phishing (smishing) attack where scammers send fake text messages claiming your "reward points" are expiring to steal login credentials or install malware. These messages often come in group texts with suspicious links, which are not legitimate T-Mobile communications. T-Mobile has explicitly stated they do not have a general reward points system that expires, nor do they send group texts about account rewards.
How the Scam Works
- You receive a text (often as a group message) claiming you have thousands of "reward points" expiring today.
- It provides a link to a fake portal that looks like an official T-Mobile site but uses a suspicious URL (e.g., ending in
.icu, .cc, or containing random characters). - The site asks for personal information and a credit/debit card to pay a small "shipping fee" (often around $1) for a prize like an iPhone or AirPods. Once you enter your details, scammers use them for large unauthorized purchases.
If You Received the Text
- Do NOT click the link or reply to the message.
- Report the Scam: Forward the message to 7726 (SPAM), a free service for most carriers to report fraudulent texts.
- Delete and Block: Immediately delete the message and block the sender.
- Verify Independently: If you want to check your actual rewards, log in directly via the official T-Mobile website or the T-Mobile app.
If you already entered your card information, contact your bank immediately to freeze your card and report the fraudulent activity.