Is it really AT&T?
Official AT&T domains, how well they block forged email, lookalike domains we found, and the scams currently using the AT&T name. The first automated check is queued.
Official AT&T domains
att.comReal AT&T emails and websites use these domains or a subdomain of them. Anything else, including addresses that contain the AT&T name, is not AT&T.
Paste the sender's email address, the link, or the website from the message.
Measured from public DNS
Can someone fake a AT&T email?
The first email security check for AT&T is queued and will appear here shortly.
Lookalike domain watch
Domains that imitate AT&T
The first lookalike scan for AT&T is queued and will appear here shortly.
Know the pattern
Scams using the AT&T name
Phone, broadband and energy providers send bills every month, so a fake bill blends right in.
Bill overdue or big discount
Messages claim your bill is overdue, or offer a large discount or refund, to get you onto a fake payment page.
SIM swap
Scammers convince a provider to move your number to their SIM, then receive your security codes. A sudden loss of signal is a warning sign.
From people who received them
Reported AT&T scam messages
No reports published for AT&T yet. If you received one, sharing it helps the next person recognise it.
Step by step
How to check a message that claims to be from AT&T
- 1
Look at the actual sender address, not just the name. Tap or hover over the name to reveal it. It must end in @att.com, or a subdomain of one.
- 2
Do not use links or phone numbers from the message. Type att.com into your browser or open the official AT&T app, and check your account there.
- 3
Slow down when you see urgency, small fees, gift cards, crypto, or requests for codes and passwords. Those are the levers every scam pulls.
- 4
Still unsure? Paste the sender address or link into the checker above.
Questions
AT&T scam FAQ
What email address does AT&T use?
Genuine AT&T email comes from addresses ending in @att.com, or a subdomain of those (for example something@mail.att.com). An address on any other domain, even one containing "at&t", is not AT&T.
Can scammers fake an @att.com email address?
We are running the first check on att.com. Until then, assume a sender address alone proves nothing and verify by visiting att.com yourself.
Are there websites pretending to be AT&T?
Our first lookalike scan for AT&T is queued. Check back shortly.
What should I do if I clicked a link in a fake AT&T message?
Do not enter anything else. If you typed a password, change it at att.com straight away and turn on two-step sign-in. If you entered card or bank details, call your bank using the number on your card. Then report the message using the guide below.
Help stop it
Where to report a fake AT&T message
United Kingdom
- Forward suspicious emails to report@phishing.gov.uk
- Forward scam texts to 7726
United States
- Report to the FTC at reportfraud.ftc.gov
- Forward phishing emails to reportphishing@apwg.org
- Forward scam texts to 7726 (SPAM)
Canada
- Report to the Canadian Anti-Fraud Centre at antifraudcentre-centreantifraude.ca
- Forward scam texts to 7726
Australia
- Report to Scamwatch at scamwatch.gov.au
- Report cybercrime through ReportCyber at cyber.gov.au
India
- Report at cybercrime.gov.in or call the 1930 helpline
Germany
- Forward phishing emails to the Phishing-Radar at phishing@verbraucherzentrale.nrw
Switzerland
- Report phishing websites at antiphishing.ch
Anywhere
- Report phishing websites to Google Safe Browsing at safebrowsing.google.com
- Tell the company through its official website or app
Telecom & Utilities
Check other companies
Orbiplot is not affiliated with AT&T. This page is generated automatically from public data: DNS records, domain registration data (RDAP) and the Internet Archive. Lookalike domains are listed because they resemble AT&T's name, not because we have confirmed any wrongdoing. If you own a domain listed here and believe it is misclassified, contact us through the site and we will review it.