Email pin - text message barrage

[Twitch199]

I just got a barrage of pin text messages - there were about 50-70 texts in the space a few minutes. I assume this is hackers, but I thought the BT system stopped issuing these if there were so many requests. If BT is allowed this number of requests in a few mins , then on a 4 digit pin it's just a matter of time untill they guess the right pin. Why can't BT sort this out, at least move to longer pins?

[stupidfckinghackers]

Just got the same, why is BT still issuing 4 digit pins anywhere?

Really worried hackers are just compromising accounts with this. Got over 100 text messages at once.

[hackercomplaint]

This has now happened to me twice in the last few days. Both times they've spammed over 100 times. BT REALLY need to sort this out and put a limit on the amount of requests for a "one-time pin" that can be made in such a short period & make the pin number longer. Its absolutely ridiculous. If this keeps happening I'll be forced to switch providers. BT, please fix this gaping hole in your security (and mine) A.S.A.P

[mathewjg]

I have over 500 requests today - I wanted to change the password but BT sends a text message which gets lost amongst the multiple other requests.

[GazR]

I've had the exact same last night. Woke up around 1.30am with my phone receiving a spam of verification texts with a 4 digit pin.

It happens to me every now and then. What I find particularly worrying is that BT don't appear to have any sort of anti-spam system in place. Attackers are essentially free to spam non-stop requests without their systems acknowledging there is an abnormal amount of requests.

Of the 127 messages I received over 4 or so minutes, I found it particularly worrying that 10 of the messages contained the same pin code, another number appears 6 times and another one 4 times. The same numbers were not received back to back or one after the other, they were mixed amongst the barrage of messages.

Also - Why a 4 digit pin?!
I immediately got up and changed all my passwords.
None of the verification messages I got sent when changing passwords myself contained a 4 digit number, they were all 6 - So I'm unsure what method the attackers are using to spam the 4 digit pins.

This has been happening on/off for the last 4 years for me.
Unfortunately, nobody seems to really take on board my concerns when I call which is disappointing.

[mathewjg]

I now have over 1000 text messages. There does not seem to be any way to contact BT. 

[GazR]

That's awful.
I've had similar in the past. Combined with the stress and worry that somebody is going to gain access to your emails and do whatever they want.

I have migrated around 90% of my emails to a different provider as of last year when BT's response was simply "They haven't got in".
Didn't fill me with confidence that a major ISP and e-mail provider is unable to offer the most basic of protection and gave what I perceived as a shrug of the shoulders.

Change your passwords, make sure 2FA is on, change your BT ID email address also?

Ultimately, consider changing providers who have more robust systems in place.

[Christopher_G]

Hi all,

We are aware that some customers have received a large number of password reset pin messages and we are actively investigating the cause of this. If you have received multiple messages like this, please ignore them and remain vigilant for any unusual activity with further messages or unexpected calls.

We want to reassure you that your email account is secure, and you do not need to do anything at this time.

Chris