Fraud

[HoneyBlossom3030]

Good afternoon Today I received a phone call from supposingly sky, who asked me to verify my email so a code could be sent for me to repeat and to get through security. I tried the number of times to get off of the phone politely, but they needed to tell me that a new SIM was being sent out to me and that my other three phones. They had the details of mine daughters and husbands so had no reason to believe it wasn't sky. I've just received an email to state that I've ordered a iPhone watch which I most definitely didn't as I don't own an iPhone. It was a very strange conversation but had no reason to think it wasn't sky. Can you help me in this matter I do not want to be charged for an iPhone watch so can you please be cancelled and concerned on how outsiders can get my details from sky. Look forward to hearing from you in this matter Anita Hyde

[Daniel0210 · Accepted solution]

@HoneyBlossom3030 

You need to call Sky asap and report this and cancel the watch asap.

Scammers try to obtain sufficient information to be able to order expensive mobile devices in your name which Sky innocently deliver to you.

The scammers would then recontact you (again claiming to be Sky) saying they have made a mistake and for you to send it to a (non Sky) address. If you did that they then have the device and you have the bill.

They are very cunning. They may send packaging to post the item (to them) or might even send a 'courier' to collect it. see this link

https://www.sky.com/help/articles/account-takeover 

With any calls from 'Sky' (especially unexpected calls) if the caller asks for your previously agreed telephone password to confirm you're the account holder (which I would expect a genuine Sky agent to do) initially give an INCORRECT one on purpose. If the caller doesn't challenge it then you know it will be a scam call.

I would suggest changing your online password https://skyid.sky.com/resetpassword/ 

[twilight+princess]

If you gave them that code then that was the 2fa code to access your account, you need to sign in (if you can) immediately & change your password & if possible change the backup codes as most likely the scammers will have copied or changed these in order to lock you out in the future. I'd also cancel the order.
If future if you suspect a scam then hang up & call Sky using the number under the Contact Us page, if it is genuine then they'll have a record of the call.
In future if you receive a further call - & I suspect you will - saying the incorrect item was sent & to return it via their courier then do not do this.
As to how they knew the details of what devices you have then they may have had access to your account for some time or it was a gues depending on what details about the account/devices they gave.