Imagine receiving a text message that promises you’ve racked up nearly 13,000 reward points from your mobile provider—points you can trade for a luxurious massage chair or a top-of-the-line vacuum cleaner. Sounds too good to be true? That’s because it is. This is the latest tactic scammers are using to trick you into handing over your bank details. But here’s where it gets even more alarming: these fraudulent messages are masquerading as legitimate offers from major providers like EE and Vodafone, leaving thousands of unsuspecting users at risk.
Here’s how it works: You receive a text claiming you’ve earned a substantial number of reward points through a program you’ve never heard of. The message looks convincing—complete with your provider’s logo and a professional-looking website. All you need to do is click the link, redeem your points, and pay a small postage fee for your shiny new appliance. But this is the part most people miss: the entire setup is a scam designed to steal your financial information.
Recently, fake texts claiming to be from EE and Vodafone have been circulating widely. EE confirmed it first detected the scam two months ago, and since then, a staggering 265,000 people have reported receiving these fraudulent messages. Here’s the kicker: EE doesn’t even offer a points-based rewards program. Vodafone, on the other hand, does have a rewards scheme called VeryMe Rewards, but it never refers to it as the “Vodafone Rewards Club,” as some of these scam texts do. This subtle discrepancy is a red flag—but it’s easy to overlook if you’re not paying close attention.
And this is where it gets controversial: The scam messages are being sent via RCS (Rich Communication Services), a more advanced messaging system than traditional SMS. Unlike SMS, RCS messages are harder to block, leaving providers like EE scrambling to find solutions. EE claims it’s working with tech giants like Apple and Google to tackle the issue, but progress has been slow. Vodafone, meanwhile, notes that most of its customers aren’t receiving these texts because RCS isn’t enabled on iPhones by default. However, users on other networks are still vulnerable.
Let’s break down what these scam messages look like. One example reads: “This message serves as an advance notice regarding your Vodafone Reward Points. You currently hold 12,739 points, of which 12,000 are scheduled to expire in 3 days in line with the 2026 programme.” Another, supposedly from EE, warns: “Important Reminder about your reward points. You currently have 12,739 Reward Points available in your account. If no action is taken, these points will expire in 3 days under the terms of the 2026 Reward Points campaign. To explore your reward options and redeem your points, please visit the link below.” These messages create a false sense of urgency, a classic tactic scammers use to pressure you into acting without thinking.
Victims who clicked the link were directed to a website that appeared legitimate, offering prizes in exchange for their points. They were then prompted to enter their bank details for shipping. One user reported: “After entering my details, the page just refreshed to a blank screen with a spinning icon.” By then, it was too late—their information had already been compromised.
So, what can you do to protect yourself? First, never click on suspicious links in text messages. If you receive a message like this, EE recommends reporting it as spam by pressing the ‘report spam’ button on your phone or forwarding it to 7726 (free of charge). If you’ve already fallen victim and shared your personal details, contact your bank immediately and report the incident to Report Fraud (formerly Action Fraud).
Here’s a thought-provoking question for you: As scammers become increasingly sophisticated, should mobile providers be held more accountable for preventing these types of fraud? Or is it solely the user’s responsibility to stay vigilant? Let us know your thoughts in the comments—this is a conversation worth having.
