Listen to the episode
TLDR
Since May 2026, a large SMS phishing campaign has impersonated T Mobile, falsely telling recipients that their rewards points (typically 18,400) are about to expire. The messages use rotating look alike domains such as t...
How it works
Since May 2026, a large SMS phishing campaign has impersonated T Mobile, falsely telling recipients that their rewards points (typically 18,400) are about to expire. The messages use rotating look alike domains such as t...
Red flags
- : Unsolicited SMS claiming specific reward balances and imminent expiry, addressed generically as "Dear Customer" instead of by name. Shortened or odd looking URLs using unfamiliar .top domains instead of official t mobile.com . Urgency and pressure to "redeem now" via a link rather than through the verified T Mobile app
What to do
- 1: Do not tap any link in the text
- 2open the T Mobile app or type t mobile.com yourself to verify any points balance. Forward the suspicious SMS to 7726 (SPAM) and then delete it. Enable Spam Protection in your mobile security app and report the number to T Mobile so they can warn other users
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/09/t-mobile-rewards-points-expiry-texts-are-a-phishing-scamFAQ
Is T Mobile rewards points expiry texts are a phishing scam a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
: Unsolicited SMS claiming specific reward balances and imminent expiry, addressed generically as "Dear Customer" instead of by name. Shortened or odd looking URLs using unfamiliar .top domains instead of official t mobile.com . Urgency and pressure to "redeem now" via a link rather than through the verified T Mobile app
What should I do first?
: Do not tap any link in the text; open the T Mobile app or type t mobile.com yourself to verify any points balance. Forward the suspicious SMS to 7726 (SPAM) and then delete it. Enable Spam Protection in your mobile security app and report the number to T Mobile so they can warn other users
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.