One time codes.

[KevBe900]

Everyone including O2 tell you never to repeat back a one time code as it could give a scammer access to your account. When you contact O2 they use the code as a verification and ask you to repeat it back.... confusing for people! Come on O2 think of another way to verify a customer that doesn't involve a practice which we know is used by scammers and can cause anxiety to costomers.

[MI5]

@KevBe900 

The warning actually says "if someone is calling you asking for the code" not if you have called O2.

[pgn]

In my experience, when calling O2 CS, they have asked me for 2 characters from my memorable word (first pet, favourite team, etc), tbh.

This is accessible in your MyO2 if you have forgotten it, @KevBe900 - but to be asked for your password or the PIN just sent to you, yes, confusing, I will admit.

[Bambino]

The basic rule of thumb should be, if you haven't initiated the call, you can't be certain if the call is genuine or not, therefore never give out personal information, or repeat codes back to the caller. If you do it's a surefire way of finding yourself in the middle of a scam and a great deal of bother. Phone scams have reached epidemic proportions and are only getting worse. The phone networks have yet to come up with a foolproof solution. We should not be relying on the networks protecting us. We need to be proactive and protect ourselves. If I don't recognise the number, I don't answer the call. If it's important and genuine, the caller will leave a voicemail. If they don't, I block the number.

Scammers rely on people who are trusting and not savvy to the pitfalls. Sadly, no matter how many times warnings are given, some still fall into the trap.

[KevBe900]

Yeah they asked me for characters from my memorable word as well as the one time code.

[pgn]

Colour me shocked, @KevBe900.

Their own instruction says:

"*Be alert to fraud* NEVER share this code, including with O2 staff...":

It should be 2 or 3 characters from the answer to your security question.

@Dave-O2 - any feedback from O2 on this, please?

[pgn]

---

@MI5 wrote:

@KevBe900 

The warning actually says "if someone is calling you asking for the code" not if you have called O2.

---

You sure?

[MI5]

Yes. Read the first warning.

The second text has already been answered elsewhere by @Dave-O2 confirming that it refers to someone calling you alleging to be O2.

[pgn]

Then we defer to Dave, now he has been tagged in. T'wouldn't be unlike O2 to send mixed messages.

[Dave-O2]

Thanks for the tag @pgn 

As suggested above the instructions in the SMS are only relevant when you've received a call.

This is to protect customers from any Vishing scam attempts.