Security Advisory – Upgrade Scam targeting mobile phone users

Scammers are impersonating mobile phone providers and using deceptive tactics to gain access to your account and steal valuable mobile devices.

How the scam works?

1. Cold call:  the scammer calls you claiming to be from a mobile provider, offering and upgrade to your phone.  They try to confuse the victim and ask various questions.   
2. Account access:  While on the call, the scammer uses the “Forgot Password” option on the mobile providers website.  This triggers a verification code to be sent to your phone.
3. Code request: The scammer asks you to read out the verification code, claiming it’s necessary to process your upgrade.
4. Account hacked: Once the scammer has your code, they reset your online account password and gain full access.
5. Fraudulent order:  the scammer orders a high-value phone to be delivered to your address.
6. Second call:  After the phone arrives,  the scammer contacts you again.  When the victim expresses confusion or refusal, they offer to “resolve the issue” by collecting the phone and processing a refund.
7. Collection: the scammer arranges for the phone to be collected, leaving you without the device and potentially liable for the cost.

How to protect yourself.

Please note if you have a work phone, Eir will never call you regarding a phone upgrade.  All business phones are provided through the IT section, and they are the only ones who can organise an upgrade to your phone. 

• Never share verification codes.  No legitimate company will ask for a one0time code or password over the phone.
• Verify the caller: If someone claims to be from your mobile provider, hang up and call your provider directly using the official customer service number.
• Monitor your account: Regularly check your account for unauthorised activity or changes.
• Use strong unique passwords: avoid using easily guessed passwords and enable two-factor authentication, if available.
• Report suspicious calls: If you receive such a call, report it to your mobile phone provider immediately. 

What to do if you are a victim of this scam?

• Contact your mobile provider and inform them immediately.
• Change your passwords.  Reset your account password and any other accounts that use the same credentials.
• Report to the authorities: File a report with your local garda station.
• Contact your bank:  If you used your credit or debit card contact your back immediately.
• Be vigilant: keep an eye on your account and credit reports for any further suspicious activity.