What is the Flubot scam?

What is the Flubot scam? 

The Flubot scam is a text message scam that infects Android phones, across all networks. A message, pretending to be from a number of services (including couriers, voicemail, messaging and video apps - amongst others), asks users to click an attached link and install an app – which is actually a piece of malware. If a user installs the app, the malware takes over the device and sends more infected texts to the user’s contacts.

If your device has been infected and you’ve been charged for SMS/MMS messages outside your plan, we will refund you as soon as possible. 

If you think your device has been infected, please forward the text message to 7726. You will then need to identify and remove the malware from your device.

Flubot malware is disguised as a regular app, so it can be difficult to spot. There are two ways you can tell if an app may be malware:

  • If you tap an app, and it doesn't open
  • If you try to uninstall an app and are instead shown an error message

Once you've found the app, you can do remove it by either:

  • Activating Android’s Safe Mode. Safe Mode temporarily blocks third-party apps from running and will let you identify and uninstall any Flubot apps. Find out how to activate Safe Mode
  • If that doesn’t work, you can download and activate Google Play Protect and perform a complete device scan. This may allow you to delete the Malware

My device has been infected - what do I do? 

The Flubot scam is a text message scam that infected your phone by asking you to download an app. This app was actually software intentionally designed to cause damage (malware). This malware then took control of your device, potentially allowing access to your banking and private details. It’s also been sending out more infected texts to your contacts without your knowledge, in the hope they’ll also install the malware.

We're doing what we can to prevent the messages being sent, but it's important that you identify and remove the malware from your device.

Flubot malware is disguised as a regular app, so it can be difficult to spot. There are two ways you can tell if an app may be malware:

  • If you tap an app, and it doesn't open
  • If you try to uninstall an app and are instead shown an error message

Once you've found the app, you can do remove it by either:

  • Activating Android’s Safe Mode. Safe Mode temporarily blocks third-party apps from running and will let you identify and uninstall any Flubot apps. Find out how to activate Safe Mode
  • If that doesn’t work, you can download and activate Google Play Protect and perform a complete device scan. This may allow you to delete the Malware