Protect yourself from fraudulent emails, calls, texts, and chat. Check the Xfinity internet security alerts site often for news, updates, security alerts, and top phishing scams.

Think you got a phishing scam email? If so, follow the steps in the section below.

What is email phishing?

Phishing is used by scammers who imitate real companies in emails to entice people to share usernames, passwords, account information, or credit card numbers.

They use complex lures as they "fish" for a user’s private information. The most common is to copy the look and feel of a major web page. They use that design to set up a nearly identical page that looks like part of the company's site.

Make sure you don't fall for phishing scams

Be suspicious of any email, chat, text, or call that asks for your personal account information, like usernames, passwords, and account numbers.
Always make sure you use a secure server when submitting credit card information.
- To make sure you're using a secure server, check the start of the web address — it should be https:// rather than just http://.
Xfinity will never ask you for password information over the phone, or through text, chat, or email.
Xfinity will never ask for billing or payment information through email.
Xfinity will never ask you to pay a large amount of money upfront over an uncommon payment method.
- To verify if an offer made by a caller, email, or text is valid, you can always visit xfinity.com or use Xfinity Assistant.

Think you received a phishing scam email?

Follow the steps below to start an investigation:

Do not click links in the suspicious email.
- Phishing emails inspire a sense of urgency often saying things like, “Your services are being disconnected” or “Your account is past due.”
  - You can check the status of your account anytime at xfinity.com or in the Xfinity app.
Copy the email, including headers, and paste it into a new email.
- Headers: Before the body (content text) of the email header lines show certain routing information of the message, like the sender, recipient, date, and subject.
  - Some headers are mandatory, like the From, To, and Date headers.
  - Others are optional, but very commonly used, like Subject and CC.
  - Make sure you copy all these details to your new email.
- Please do not forward the message. This will remove the email headers.
- Be sure to add the words "phishing email" in the subject.
Send the email to our abuse team.

Follow these guidelines

If you:

Responded to a fraudulent email: Immediately alert your bank and/or credit card company.
Received spam that is phishing for information: Forward it to spam@uce.gov.
Think you were scammed: File your complaint with the Federal Trade Commission (FTC) at ftc.gov.
- Then, visit the FTC's Identity Theft Web site at consumer.gov/idtheft to learn how to reduce your risk of damage from ID theft.

Additional information

Visit our Online Support Center to find common solutions.

The easiest way to activate, manage, and troubleshoot your Xfinity experience is with the Xfinity app! Get 24/7 real-time support, pay your bill, view plan details, get outage updates, and more. Download the free Xfinity app, or scan the QR code with your smartphone.

Need additional support? Ask Xfinity Assistant.