phishing scam????

[#1]

i just recievd an email headed PLUSET SECURITY NOTIFICATION and the start of it is

Dear Customer,

Our automated security monitoring has identified multiple failed login attempts associated with your PlusNet account on October 18, 2025. As part of our commitment to protecting your account, we require additional verification.

Action Required

To restore full access to your account, please complete our identity verification process. This is a mandatory security measure to confirm you are the authorized account holder.

then theres a link button..the sended is  plusnet support services

Time-sensitive: Failure to complete this verification within 5 business days may result in temporary account restrictions until your identity is confirmed.

If you believe this notification was sent in error, or if you have any questions about your account security, please contact our support team immediately.

We appreciate your prompt attention to this matter and thank you for helping us keep your account secure.

Yours faithfully,
The PlusNet Account Security Team

im guessing this is a scam or phishing email???

[#2]

im guessing this is a scam or phishing email???

Correct

[#3]

thank you

[#4 · Accepted solution]

If you've not already deleted this scam message then I suggest you forward it to: report@phishing.gov.uk.  You'll get an auto reply thanking you for submitting it but explaining they can't respond to you in person.

[#5]

thank you

[#6]

The essential check to know if this is a scam is where does the link go to.

Presently there are customers receiving real messages from Plusnet cyber security - these will though also have an associated ticket which can be seen and responded to via the user portal.

[#7]

---

@Townman wrote:

The essential check to know if this is a scam is where does the link go to.

---

Yes, and as you know that's trivial to check, by simply hovering (but never clicking) the mouse over the link.

It's also worth mentioning that people should check where the message came from.  Yes, the From field can be spoofed but in this case it wasn't. I forget where this one (appeared) to come from but it definitely wasn't Plusnet.

Mind you, having said these things are easy to check, I find that's only true on a computer.  I've yet to figure out how to do these checks if I see this sort of junk in the Samsung email client on my Samsung phone.

Which is why the first line of defence we all must adopt against email phishing is suspicion.  Assume all incoming messages, even those that appear to be from people you know, are dangerous and check them out before you do anything with them.