Afterpay scam emails: account limited, someone else's phone
Spoofed Afterpay account-status emails leading to a fake login page and a one-time-code form. A 2025 twist: genuine Afterpay emails about an account someone opened in your name with a phone number that is not yours — the wrong phone number is the linchpin of that variant.
- Impersonates
- Afterpay
- Arrives by
- email, SMS
- First seen
- 2025-09
- Specimens
- 1
- Updated
- 2026-09-02
Right now the only version we have seen
How to recognise it
- A limit, suspension or "unusual activity" notice with a link — real notices are visible inside the app
- The page behind the link asks for a login and then a one-time code
- An account you never opened, with a phone number you do not recognise
What to do
- Do not use the link; open the Afterpay app or type afterpay.com
- Forward the email to reportphishing@afterpay.com
- If the account is not yours, tell Afterpay through their help centre — do not "verify" anything through the email
Already called, clicked or paid? what to do in the next hour
- Entered a password? Change it now, and everywhere else you used the same one
- Entered card details? Call your bank, ask them to block the card and reissue
- Entered a one-time code? Sign in to the real service now and check for changes to email, phone and payment settings
How it changed
nothing to compare yet · one wave on record2025-09spoofed status email, fake login and OTP page
Got a different version? A new subject line, sender, number or domain becomes the next point on this line. Redacted before publication. Send it →
02 Sept2026
Registry
Family created
Grew out of the September 2025 guide, which stays online unchanged and remains the fuller read.
11 Sept2025
Specimen
Specimen №1: spoofed status email, fake login and OTP page
The guide documented the phishing site, its one-time-code form, and the "account in your name with someone else's phone" twist.
Channel
email
Same trick, other brands
- Netflix "payment failed / account suspended" phishingdormant · 2026-09
- Amazon "account-alert" phishing emailsdormant · 2026-09
Indicators
- None on record yet. Indicators change weekly; an empty list never means an email is safe.
In other streams
Registry data
- Machine-readable
/scams/afterpay-account-suspension.json- Timeline feed
/scams/afterpay-account-suspension/feed.xml- Sources
- 1 · 1 change logged
- Licence
- CC BY 4.0 · attribution required
- Created / updated
- 2026-09-02 / 2026-09-02