Email pin - text message barrage

[licquorice]

They don't need to access an email account to send spam, they can spoof as many addresses as they like.

As stated, it is to send seemingly personal mails to contacts.

[Chrismc2]

Am I missing something? Why if somebody’s got access to your emails could they not send password resets and access any account of yours that they want that don’t have 2FA?  Spam would be the least of my concerns. 

[stupid_hackers]

That is the main threat, they can use password resets to pivot to your paypal, bank and so on and steal your money.

[hackercomplaint]

"That is the main threat, they can use password resets to pivot to your paypal, bank and so on and steal your money."

Exactly! And having myself been targeted previously not once but twice for bank hacking/fraud this is why I'm particularly perturbed by BT's lacklustre & dare I say it, misleading response! 

In 2024 a hacker managed to spoof a company I'd purchased from a decade previously and withdrew £1000 from my bank. It took me over a month to get my bank to refund the money, which was a stressful ordeal in itself. Meanwhile I had to borrow money from friends to buy food!! Similar to being burgled, which I've also suffered from, these sorts of attacks are actually genuinely traumatising. So when my phone is being lit up, on and off, for now approaching 3 weeks, by yet another hacker trying to invade my privacy and put my finances in danger its pretty stressful. To be gaslit by BT when I phoned them just leads to more dread and a feeling of helplessness. So, again, thank you so much to those in this thread who've provided very useful info. I have learned A LOT, & without that help I may have not realised just how important and urgent it was for me to completely clean out my emails and change all my other accounts to no longer point to my BT email. I'd STRONGLY advise anyone else suffering from these PIN text barrages to do the same, just in case. There might only be a small chance the hackers will be successful on any 1 account, but once successful it could still lead to a significant loss of funds from any bank/paypal/similar linked account.
Notably, there's another nasty variation: if an attacker gets into an email account, they may silently create forwarding rules so password-reset emails continue going to them while the legitimate owner doesn't see them. BT's email does show a notification when this has been enabled, so watch out for that if your email does get hacked.

I apologise to people like Kimberlin if I appear to have been too energetic in my complaints/activity on this forum, but I think perhaps they don't quite appreciate how important it has been for me to get as much info about this as I can, so I know better how to deal with it and mitigate the risk. If I had more spare money I'd just have swallowed the early termination fee and put this to rest. Unfortunately, initially I didn't even realise I'd be charged for leaving BT! Now I know about that I've just got to find a way to afford it, then I'll be out of everyone's hair here, for good. 😥 What an unfortunate and completely avoidable debacle. BT, fix your security, for goodness sake.

[Kimberlin]

@hackercomplaint  You don’t have to apologise to me for anything. With respect, this doesn’t affect me whatsoever. I don’t use BT Mail for starters, I’ve never used an ISP for email.

You can write literally anything you want on this forum expressing your dissatisfaction with BT and its security but it won’t go anywhere because you’re not conversing with anyone at BT on a policy level. You’re literally just expressing your anger at thin air. 

If you’ve learned anything from the advice offered by others here, that’s the best you can hope for. Simply put, other than highlighting and telling the rest of the world what you’ve been through, like the rest of every post made here, it will eventually be absorbed and forgotten. As depressing as it is, the same problems will continue to persist, that’s just the way it is.

Any contract will have terms and conditions relating to early termination, it’s incumbent on the customer to read those terms. If you’ve ever had a mortgage or taken out a loan or had an insurance policy of any sort, are you telling me you’ve never read the agreement first before signing anything? Probably best not to answer that as I’m guessing half the world doesn’t.

I genuinely hope you manage to sort your problems out, just don’t over estimate your expectations.