{"id":417134,"date":"2026-09-20T14:31:19","date_gmt":"2026-09-20T14:31:19","guid":{"rendered":"https:\/\/malwaretips.com\/blogs\/?p=417134"},"modified":"2026-09-21T02:22:21","modified_gmt":"2026-09-21T02:22:21","slug":"telus-phishing-scam","status":"publish","type":"post","link":"https:\/\/malwaretips.com\/blogs\/telus-phishing-scam\/","title":{"rendered":"TELUS Phishing Scam: How Fake Texts and Support Calls Steal Your Account"},"content":{"rendered":"<p>A message says a TELUS account has a pending mobile-number transfer. Another caller offers a discount, asks to confirm a password, or claims a credit is waiting.<\/p><div id=\"mwtad3580266982\" class=\"gas_fallback-ad_309684--placement_406659\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3957935887\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p>These approaches can look different on the surface, but they all depend on the same mistake: trusting the contact route before checking the account itself.<\/p>\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1672\" height=\"941\" class=\"wp-image-417128 size-full lazyload\" style=\"max-width:100%;height:auto\" src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" alt=\"Reconstructed TELUS phishing email claiming a mobile number transfer needs verification\" title=\"\" sizes=\"auto, (max-width: 1672px) 100vw, 1672px\" data-src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/09\/imagestelus-security-email.jpg\" data-srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/09\/imagestelus-security-email.jpg 1672w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/09\/imagestelus-security-email-300x169.jpg 300w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/09\/imagestelus-security-email-1024x576.jpg 1024w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/09\/imagestelus-security-email-1536x864.jpg 1536w\"><\/figure>\n<div id=\"mwtad3717768683\" class=\"gas_fallback-ad_309746-ad_309685-placement_406660\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"4456629336\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>Overview<\/h2>\n<h3>The message borrows trust from a Canadian telecom brand<\/h3>\n<p>TELUS phishing scams impersonate the company through email, text, phone calls, social messages, and copied support pages. The sender may mention a mobile plan, internet service, account credit, device upgrade, or number transfer.<\/p><div id=\"mwtad925691491\" class=\"gas_fallback-ad_381396-ad_309685-placement_406667\" style=\"margin-top: 50px;margin-bottom: 50px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"1471373341\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p>Brand colors and a familiar logo make the approach feel routine. Caller ID and sender names are not reliable proof because both can be spoofed or copied.<\/p>\n<h3>The story creates a problem that needs immediate help<\/h3>\n<p>One version says a SIM swap or port-out request is waiting. Another warns of an overdue bill, suspicious login, expired promotion, or failed payment method.<\/p>\n<p>The scammer wants the target to believe that delay will disconnect service, lose a discount, or let someone else take the phone number. Fear makes a request for a PIN or one-time code seem like protection.<\/p><div id=\"mwtad1496460482\" class=\"gas_fallback-ad_309686-ad_309685-placement_406668\" style=\"margin-top: 50px;margin-right: 10px;margin-bottom: 50px;margin-left: 10px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"6935453015\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<h3>The real goal is account access, payment, or a phone number<\/h3>\n<p>A fake agent may collect a TELUS login, security question, account PIN, card number, or verification code. A successful SIM-swap attempt can move the victim&#8217;s number to a device controlled by the criminal.<\/p>\n<p>Possible harm includes:<\/p>\n<ul>\n<li>Unauthorized changes to the TELUS account or plan.<\/li>\n<li>Loss of control over a mobile number.<\/li>\n<li>Password resets for email, banking, and social accounts.<\/li>\n<li>New devices, upgrades, or charges added to the account.<\/li>\n<li>Stolen card and billing information.<\/li>\n<li>Identity theft using address, date of birth, and account details.<\/li>\n<li>Follow-up calls that use the first stolen details to sound genuine.<\/li>\n<\/ul>\n<div id=\"mwtad4178982843\" class=\"gas_fallback-ad_309747-ad_309685-placement_406661\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"9589536513\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>Common Forms of the TELUS Phishing Scam<\/h2>\n<p>The same criminal group can use several scripts over time. Recognizing the broader pattern is more useful than memorizing a particular number, sender address, or sentence.<\/p><div id=\"mwtad3642494979\" class=\"gas_fallback-ad_381401-ad_309685-placement_406669\" style=\"margin-top: 50px;margin-right: 10px;margin-bottom: 50px;margin-left: 10px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"5315249587\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<h3>Pending number-transfer alerts<\/h3>\n<p>An email or text claims someone requested to transfer the recipient&#8217;s number to another carrier. The target is asked to click a review button, enter a password, or approve the request.<\/p>\n<p>TELUS can send legitimate notifications when a real transfer request exists, but the customer should verify it through the account or a known support route. The message&#8217;s link should not be used to decide whether the request is real.<\/p>\n<h3>Fake credits and promotions<\/h3>\n<div id=\"mwtad2079232374\" class=\"gas_fallback-ad_381404-ad_309685-placement_406670\" style=\"margin-top: 50px;margin-right: 10px;margin-bottom: 50px;margin-left: 10px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"8735619847\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><p>A message says an account credit, device rebate, loyalty bonus, or special plan is ready. To receive it, the customer must confirm identity, update a card, or pay a small activation charge.<\/p>\n<p>Credits can be especially persuasive because the recipient may remember a real promotion. The safe check is whether the offer appears in the official account and published TELUS channels.<\/p>\n<h3>Impersonated customer-support calls<\/h3>\n<p>A caller says a billing error, network problem, or fraud alert requires immediate account verification. The caller may know the customer&#8217;s name, address, plan, or recent order from public information and previous data exposure.<\/p>\n<div id=\"mwtad3038686487\" class=\"mwtadp5 mwtadentity-placement\" style=\"margin-top: 50px;margin-bottom: 50px;\"><script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block; text-align:center;\"\r\n     data-ad-layout=\"in-article\"\r\n     data-ad-format=\"fluid\"\r\n     data-ad-client=\"ca-pub-7750719144850257\"\r\n     data-ad-slot=\"8560433799\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><\/div><p>The call can move from a harmless confirmation to a request for a security PIN, card details, or one-time code. A representative who asks the customer to read a code from another service is not protecting the account.<\/p>\n<h3>Fake login and payment pages<\/h3>\n<p>The link opens a site that copies the TELUS sign-in experience. After the username and password, it requests a PIN, one-time code, billing address, and card number.<\/p>\n<p>The page may redirect to the real TELUS site after capturing the information. A normal-looking ending does not undo what was entered earlier.<\/p>\n<div id=\"mwtad4114954204\" class=\"gas_fallback-ad_309748-ad_309685-placement_406662\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3906789406\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>How the TELUS Phishing Scam Works<\/h2>\n<h3>Step 1: The criminal chooses a telecom trigger<\/h3>\n<div id=\"mwtad2664297767\" class=\"mwtadp6 mwtadentity-placement\" style=\"margin-top: 50px;margin-bottom: 50px;\"><script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block; text-align:center;\"\r\n     data-ad-layout=\"in-article\"\r\n     data-ad-format=\"fluid\"\r\n     data-ad-client=\"ca-pub-7750719144850257\"\r\n     data-ad-slot=\"4034304343\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><\/div><p>Mobile service is tied to banking, email, authentication, and family communication. A message about a phone number, SIM, or billing account therefore feels urgent even when the recipient is unsure what happened.<\/p>\n<p>Campaigns may target Canadian numbers broadly or use customer lists that reveal a likely provider. The operator does not need a perfect profile because the brand is familiar to millions of people.<\/p>\n<h3>Step 2: A sender name or caller ID creates instant recognition<\/h3>\n<p>The text may display TELUS as the sender, while an email uses a copied logo and a friendly security signature. A call can show an apparently valid Canadian number.<\/p>\n<p>Those fields are presentation layers. They do not establish which network, mailbox, or person actually initiated the contact.<\/p>\n<h3>Step 3: The message combines danger with a simple solution<\/h3>\n<p>The customer is told that a transfer, billing error, or security event is underway. The provided button or phone number is presented as the only way to stop it.<\/p>\n<p>TELUS guidance recommends checking requests through official channels. A criminal instead controls the contact route and tries to keep the target from opening the genuine app or website.<\/p>\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1672\" height=\"941\" class=\"wp-image-417129 size-full lazyload\" style=\"max-width:100%;height:auto\" src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" alt=\"Reconstructed fake TELUS verification portal requesting a password PIN and one-time code\" title=\"\" sizes=\"auto, (max-width: 1672px) 100vw, 1672px\" data-src=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/09\/imagestelus-fake-portal.jpg\" data-srcset=\"https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/09\/imagestelus-fake-portal.jpg 1672w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/09\/imagestelus-fake-portal-300x169.jpg 300w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/09\/imagestelus-fake-portal-1024x576.jpg 1024w, https:\/\/malwaretips.com\/blogs\/wp-content\/uploads\/2026\/09\/imagestelus-fake-portal-1536x864.jpg 1536w\"><\/figure>\n<h3>Step 4: A copied portal collects account information<\/h3>\n<p>The first screen asks for a mobile number or email and a password. The next screen requests a security PIN, date of birth, billing address, or a code sent by text.<\/p>\n<p>The sequence is deliberate. Each field helps the operator access the account, pass an identity check, or convince another support agent that the caller is the real customer.<\/p>\n<h3>Step 5: The attacker attempts a SIM swap or account change<\/h3>\n<p>With the details in hand, the criminal may request a number transfer, replace the account email, add a new device, or reset the password. The victim may remain on the fake page while the real account is being changed.<\/p>\n<p>TELUS has explained that a successful SIM swap can give a fraudster control of calls and text messages. That can expose password-reset codes for other accounts linked to the number.<\/p>\n<h3>Step 6: A verification code is used as the final approval<\/h3>\n<p>The fake page says a code is needed to cancel the transfer or secure the account. In reality, the code may approve the attacker&#8217;s login, port request, payment, or password reset.<\/p>\n<p>Never assume the wording in a fake form describes the real transaction. Read the code message from the actual provider and stop if it names a different action, amount, or device.<\/p>\n<h3>Step 7: Follow-up support extends the theft<\/h3>\n<p>A second caller can claim that the first step failed and request remote access, a new code, or a transfer to a safe account. Accurate details from the first form make the caller sound like an internal investigator.<\/p>\n<p>The attacker may also sell the information to other criminals. A later email could target the victim&#8217;s bank, email account, or workplace using the compromised phone number.<\/p>\n<div id=\"mwtad1003008158\" class=\"gas_fallback-ad_318930-ad_309685-placement_406663\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3818335085\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>Identity, Contact, and Payment Checks<\/h2>\n<h3>Open My TELUS independently<\/h3>\n<p>Use the official app, a saved bookmark, or a known address entered manually. Review active sessions, account messages, device changes, number-transfer requests, and billing details there.<\/p>\n<p>If the alert is absent from the account, the message is not a reliable notice. If it is present, use the contact option shown inside the authenticated account rather than the original message.<\/p>\n<h3>Use TELUS&#8217;s published contact rules<\/h3>\n<p>TELUS maintains a <a href=\"https:\/\/www.telus.com\/en\/about\/security\/report-a-problem\" target=\"_blank\" rel=\"noopener\">fraud and phishing reporting page<\/a> with official support routes. It instructs customers to forward phishing texts to 7726 with \u201cSPAM\u201d and report suspicious calls to Customer Care.<\/p>\n<p>That page is a safer starting point than a phone number, email address, or button supplied by an unexpected contact.<\/p>\n<h3>Check the sender and destination domain<\/h3>\n<p>Expand the sender details and inspect the full email address. For links, focus on the registered domain immediately before the first slash, not on a brand word placed earlier in the address.<\/p>\n<p>A padlock, correct logo, or a page that asks the right questions does not establish ownership. Fake portals can use encrypted connections and carefully copied layouts.<\/p>\n<h3>Refuse unusual requests for codes or payment<\/h3>\n<p>Do not read a security code to an unsolicited caller or type it into a page reached through a message. Do not pay an activation, unlocking, or fraud-reversal fee to a personal payment account.<\/p>\n<p>If a legitimate account needs a card update, make that change after logging in independently. The provider should not need a customer to disclose a complete card number to a random caller.<\/p>\n<div id=\"mwtad1492722161\" class=\"gas_fallback-ad_381388-ad_309685-placement_406705\" style=\"margin-top: 30px;margin-bottom: 30px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"3191649120\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>Understanding SIM-Swap Risk<\/h2>\n<p>A SIM swap is not always fraudulent. Customers may replace a lost SIM, change a device, or transfer a number between carriers. The scam occurs when someone else convinces the provider to perform the change.<\/p>\n<p>TELUS&#8217;s guidance notes that a criminal who controls the number can receive calls and texts and use password-reset features for accounts linked to it. The first symptom can be a sudden loss of mobile service rather than a suspicious message.<\/p>\n<p>Use an authenticator app or security key for important accounts when possible. Keep the mobile account protected with a strong, unique password and a recovery method that does not depend entirely on SMS.<\/p>\n<div id=\"mwtad3852376338\" class=\"gas_fallback-ad_381392-ad_309685-placement_406664\" style=\"margin-top: 50px;margin-bottom: 50px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"2944237110\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>Red Flags in a TELUS Message or Call<\/h2>\n<ul>\n<li>A transfer or account problem must be handled within minutes.<\/li>\n<li>The sender asks for a password, PIN, or one-time code by reply.<\/li>\n<li>The link opens a domain that is not a known TELUS address.<\/li>\n<li>The caller begins with a discount, credit, or surprise refund.<\/li>\n<li>Caller ID shows a familiar number but the call was unexpected.<\/li>\n<li>The representative discourages use of the My TELUS app.<\/li>\n<li>The page requests more identity data than the stated issue requires.<\/li>\n<li>A payment must be made through a personal app, gift card, or crypto.<\/li>\n<li>The message contains generic account details instead of a real reference.<\/li>\n<li>The phone loses service soon after an unexpected verification request.<\/li>\n<\/ul>\n<p>Polished wording is not a safety signal. An independent account check matters more than the message&#8217;s spelling, logo, or caller confidence.<\/p>\n<div id=\"mwtad3178267634\" class=\"gas_fallback-ad_381392-ad_309685-placement_406665\" style=\"margin-top: 50px;margin-bottom: 50px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"2944237110\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><h2>What to Do if You Have Fallen Victim to This Scam<\/h2>\n<ol>\n<li><strong>Contact TELUS through a trusted route immediately.<\/strong> Use *611 from a TELUS handset or the official support number and explain that a phishing attempt may have exposed account details or a number-transfer request.<\/li>\n<li><strong>Ask for a SIM-swap and port-out review.<\/strong> Confirm which changes, devices, emails, recovery methods, and transfer requests were made. Add an account note and restore control of the number if it moved.<\/li>\n<li><strong>Call the bank and card issuer.<\/strong> Report any card data or code that was entered. Ask about blocking transactions, replacing the card, stopping recurring authorisations, and securing online banking.<\/li>\n<li><strong>Secure email before other accounts.<\/strong> Change the password from a clean, independently opened page, sign out unknown sessions, review forwarding rules, and replace recovery details that the attacker could control.<\/li>\n<li><strong>Change reused passwords and PINs.<\/strong> Do not reuse the exposed TELUS password or security answers. Prioritize banking, email, cloud, social, and cryptocurrency accounts linked to the phone number.<\/li>\n<li><strong>Move critical authentication away from SMS.<\/strong> Use an authenticator app or security key where available. Review backup codes and generate new ones after the account is secure.<\/li>\n<li><strong>Preserve evidence.<\/strong> Save the message headers, sender, number, link, fake portal, call recording if legally available, transaction, and timing. Do not continue chatting just to collect more details.<\/li>\n<li><strong>Scan downloaded material.<\/strong> Remove remote-support tools, fake invoices, or carrier apps received during the contact. Run a full Malwarebytes scan if any file or program was installed.<\/li>\n<li><strong>Reduce malicious redirects.<\/strong> AdGuard can help block known phishing and advertising domains, but it cannot replace independent navigation and account review.<\/li>\n<li><strong>Report the campaign.<\/strong> Forward phishing texts to 7726 with \u201cSPAM,\u201d report the incident to TELUS, notify the bank, and use Canadian fraud-reporting channels. Include the destination domain and payment route.<\/li>\n<li><strong>Watch for a second wave.<\/strong> Check account changes, credit activity, mobile service, password resets, and unexpected calls for several weeks. A caller promising to recover the number for a fee is another scam.<\/li>\n<\/ol>\n<h2>Frequently Asked Questions<\/h2>\n<h3>Does TELUS send security texts?<\/h3>\n<p>TELUS may send notifications about genuine account events, including a mobile-number transfer request. Verify the event through My TELUS or a known support route instead of clicking the message link.<\/p>\n<h3>Can a TELUS caller ask for my password or card number?<\/h3>\n<p>An unsolicited caller should not need a full password, security code, or complete card details. End the call and contact TELUS using an official number.<\/p>\n<h3>What is a SIM-swap scam?<\/h3>\n<p>It is an unauthorized transfer of a phone number to a SIM or eSIM controlled by a criminal. The attacker can then receive calls, texts, and some password-reset codes.<\/p>\n<h3>Why did the caller know my plan and address?<\/h3>\n<p>Public profiles, marketing records, data breaches, and previous customer-service interactions can reveal those details. Accuracy does not authenticate the caller.<\/p>\n<h3>What if I only clicked the TELUS link?<\/h3>\n<p>Close the page and remove unexpected downloads. If no credentials or payment data were entered, risk is lower, but update the browser and scan the device if anything behaved unusually.<\/p>\n<h3>Where do I report a TELUS phishing message?<\/h3>\n<p>TELUS directs customers to its fraud-reporting page, and phishing texts can be forwarded to 7726 with \u201cSPAM.\u201d Notify your bank and Canadian fraud-reporting services if money or identity data was involved.<\/p>\n<h2>The Bottom Line<\/h2>\n<p>TELUS phishing scams use number-transfer warnings, fake credits, support calls, and copied login pages to turn ordinary telecom activity into a route toward account takeover.<\/p>\n<p>Ignore the supplied contact path, open My TELUS independently, and treat every one-time code as approval for a specific action. A short pause can protect both the phone number and every account that relies on it.<\/p>\n<div id=\"mwtad531729004\" class=\"gas_fallback-ad_176819-ad_309685-placement_406666\" style=\"margin-top: 50px;margin-bottom: 50px;\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-7750719144850257\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-7750719144850257\" \ndata-ad-slot=\"8386082122\" \ndata-ad-format=\"auto\" data-full-width-responsive=\"true\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>A message says a TELUS account has a pending mobile-number transfer. Another caller offers a discount, asks to confirm a password, or claims a credit is waiting. These approaches can look different on the surface, &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"TELUS Phishing Scam: How Fake Texts and Support Calls Steal Your Account\" class=\"read-more button\" href=\"https:\/\/malwaretips.com\/blogs\/telus-phishing-scam\/#more-417134\" aria-label=\"Read more about TELUS Phishing Scam: How Fake Texts and Support Calls Steal Your Account\">Read more<\/a><\/p>\n","protected":false},"author":51,"featured_media":417128,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49],"tags":[],"class_list":["post-417134","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scam-reports","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/417134","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/users\/51"}],"replies":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/comments?post=417134"}],"version-history":[{"count":2,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/417134\/revisions"}],"predecessor-version":[{"id":417353,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/posts\/417134\/revisions\/417353"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media\/417128"}],"wp:attachment":[{"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/media?parent=417134"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/categories?post=417134"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/malwaretips.com\/blogs\/wp-json\/wp\/v2\/tags?post=417134"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}