Fake AT&T Telecom Rebate Scam
Scammers impersonate AT&T to send fake rebate or bill-credit notifications, directing victims to phishing sites that steal account credentials and payment information under the guise of processing a refund.
Part of: Fake Telecom Rebate Scam
Last reviewed: 8 June 2026
AT&T periodically offers legitimate promotional rebates — on device trade-ins, new line activations, and plan upgrades. These genuine offers make customers receptive to rebate-related messages, which scammers exploit by sending convincing fake notifications about rebates the customer never actually qualified for.
The fraudulent messages typically claim the recipient overpaid on a recent bill, is entitled to a plan-change credit, or qualifies for a device trade-in rebate. The amount is always appealing enough to motivate action but not so large as to seem obviously fake — usually between $25 and $150.
AT&T's real rebate programmes require customers to log in at att.com and navigate to 'Manage my plan' or to use the myAT&T app. Legitimate AT&T rebate cheques are mailed to your billing address. No AT&T rebate process asks customers to re-enter payment card details through an email or text link to receive money AT&T has already decided to send.
How this scam works on the AT&T brand
Phishing emails arrive from lookalike domains like 'att-rebates.com' or 'attonline-refund.net', faithfully replicating AT&T's blue-and-white globe branding. The email subject reads 'Your AT&T Rebate of $[amount] is Ready to Claim' and includes a fake confirmation number.
The 'Claim Rebate' button opens a cloned AT&T sign-in page. After the victim logs in, a second page asks for their bank routing and account number, or credit card number, 'for direct deposit of the rebate'. Neither the rebate nor any money from AT&T follows — the victim's banking or card details are now in the scammer's hands.
A smishing variant sends a text from a number spoofed to appear as AT&T's short-code 'MYATT': 'Your AT&T refund of $[amount] has been approved. Click [link] to receive it.' Because the text appears in the same conversation thread as real AT&T notifications, victims trust it reflexively.
Common red flags
- Email domain is not '@att.com' or '@attmail.com'
- You are asked to enter banking details or a full card number to receive a rebate AT&T has supposedly already approved
- The rebate references a plan change, trade-in, or promotion you did not request
- No matching rebate or credit appears when you log in to myAT&T directly at att.com
- The text appears in your regular AT&T message thread but directs you to a non-att.com URL
- Artificial urgency — 'Rebate expires in 24 hours' — discourages you from verifying via your account
How to protect yourself
- Log in directly to the myAT&T app or att.com to check 'Bill & payments' for any genuine rebate or credit on your account
- Real AT&T rebates are either applied as bill credits or sent as cheques — they never require you to re-enter payment details via a link
- Forward suspicious AT&T texts to 7726
- Enable two-step verification on your myAT&T account in the security settings
- If you entered banking details, contact your bank immediately to review for fraudulent transactions and consider changing your account number
- Change your AT&T account password and security questions if you logged in through a suspicious link
How to report it
- Report phishing to AT&T at [email protected] or via the fraud-reporting page at att.com/esupport/fraud.html
- Forward suspicious texts to 7726
- File a complaint with the FTC at reportfraud.ftc.gov
- Contact the FCC at consumercomplaints.fcc.gov if spoofed SMS was involved
Frequently asked questions
How do legitimate AT&T rebates work?
AT&T promotional rebates are typically applied as bill credits visible in the myAT&T app, or mailed as prepaid Visa reward cards to your address. You should not need to provide banking details to receive them.
Can a fake AT&T text appear in my real AT&T message thread?
Yes — scammers use sender-ID spoofing to inject messages into existing brand SMS threads. The appearance in your thread does not authenticate the message. Always navigate independently to att.com.
I submitted my bank details — what now?
Contact your bank immediately to monitor for suspicious transactions and consider a proactive account number change. File reports with the FTC and IC3.