Scam email?

[GE]

I've received an email "confirming my order" but I haven't ordered anything. The address it was sent from is "noreply@mails.three.co.uk"

Can anyone confirm this is a genuine three email?

Thanks in advance.

[AB13]

Can you confirm if this was a scam? As I have just had an email from this email…

[FraserC]

The best way to find out is to get in touch. An advisor will be able to complete security with you and take a look at your account for anything suspicious. 

[RichH]

I’ve had dodgy mails from the same email , don’t reply or ring to any of it , apparently I’ve got an outstanding bill which is BS so it’s spam 

[Reynoid]

Hi,

I just had a phone call claiming to be from Three offering 5G (which I already have) and a discount that halves my current plan. They then wanted to completely wipe my details and reset them. They then sent an email from the account ‘noreply@login.three.co.uk’ wanting me to click the link. I’m sorry but I’m very cautious as to opening links that I don’t trust. Can a Three representative confirm if this is all legit?

[JonathanB]

Hi @Reynoid,

We've offered 5G at no extra cost since the service became available, and that does sound like quite a big bill reduction, so I think you're right to be sceptical here. login.three.co.uk doesn't sound like a domain we'd use for sales communications either. It is an email address we use for My3 resets though.

Based on what you've shared, I think you were speaking to scammers who were trying to get you to reset your password, and in the process steal your login details. I'd recommend to get in touch, and the team can confirm for certain if we've called, but I think this is a scam.

Here's more info on Fraud to watch out for too.

Thanks,
Jonathan

[PeteG]

Hi, GE. 

Welcome to the Three Community. 

That looks like one of our emails. Some times we send out order confirmations when changes are made to your account as well, like if you changed an account setting or got an addon. Did you make any changes like that?

Pete.

[GE]

I am on payg and topped up this morning. I then noticed that a further top up had been made with "Self Service Kiosk" in the detail. I didn't understand this but did look around the Three app on my phone to see if there was anything else about it but couldn't find anything. I didn't tap anything or order anything (not even accidentally!). This was about 11.22 this morning. I had to go out so had to wait to get home to see what happened. Late afternoon I received this email with a DPD tracking link which I foolishly clicked on, though it did take me to the genuine DPD site.  I did contact Chat about the Kiosk top up and the email but they were a bit vague with phrases like "it seems to be confirmation" of the Kiosk top up so I'm still concerned it is a phishing email.The lady on Chat said she couldn't see any orders related to my account. Strangely enough the tracking link has also disappeared from the email message?

[PeteG]

That sounds odd. I have no idea why anything from a top up would cause a DPD tracking email to be sent out to you. I don't think these two things are related. 

Which email address did the DPD email come from? When you clicked the link and went to their website, did you enter any personal details? 

Pete.

[GE]

Thank you both for your replies.

When I contacted Three Chat I gave the order number that was in the email. She said it "seemed to be" confirmation of the Kiosk top up (that I never made - but the credit does show on my balance - that's another story!). She didn't seem very commital and I wasn't sure she knew. She did confirm there were no outstanding orders showing for my account. The original link in the email took me to https://track.dpd.co.uk/ where it asked me to enter the tracking code. I entered the order confirmation and postocode and it said it had no records (which was obvious as I realised it was a confirmation code not tracking ref - I'm really having a bad day today!). The DPD page seems legit. As I said, the strange thing is the link is no longer in the email. Looking at the email address supposedly from Three, it's the "@mails.three.co.uk" bit that would show anything iffy, mainly the "mails"bit. I haven't entered any other personal details, nor received any messages from DPD themselves.

Any ideas?