THREAT OPS › Threat News › T-Mobile rewards points expiry texts are a phishing scam
T-Mobile rewards points expiry texts are a phishing scam
<p class="wp-block-paragraph">Since early May 2026, we’ve been monitoring a large phishing campaign based on T-Mobile rewards points.</p>
<p class="wp-block-paragraph">The messages falsely warn that a customer’s rewards points are about to expire. They aren’t legitimate account notices: They use urgency, invented point balances, and phishing links to push recipients into acting before the
MITRE ATT&CK techniques
Indicators of compromise
- https://t-mobile.{rotatingurl
- https://support.malwarebytes.com/hc/en-us/articles/18289151807507-Text-Protection-and-Text-Message-Filtering-in-Mobile-Securityurl
- https://help.malwarebytes.com/hc/en-us/articles/36738112474395-Using-Scam-Guard-to-detect-threats-on-iOS-and-Androidurl
- t-mobile.biktpw.topdomain
- t-mobile.cugbjl.topdomain
- t-mobile.cymfjd.topdomain
- t-mobile.gdikxv.topdomain
- t-mobile.hdzcnb.topdomain
- t-mobile.koxetp.topdomain
- t-mobile.nxdcfp.topdomain
- t-mobile.pkrbai.topdomain
- t-mobile.qfrhkt.topdomain
- t-mobile.qscizj.topdomain
- t-mobile.tmfncb.topdomain
- t-mobile.vmnqsu.topdomain