Tesco Clubcard users are being urged to watch out for a convincing email scam currently landing in inboxes. The message, spotted by Express.co.uk's technology team, claims thousands of Clubcard points are about to expire.
The subject line reads: "Your 4,147 points are expiring soon." Once opened, customers are urged to click a link to save their rewards, but instead of boosting their balance, it puts their personal and financial details at serious risk.
How the scam works
The email is full of urgent calls to action, a tactic scammers often use to get people clicking without thinking. It reads: "We noticed that the email address associated with your account has 4,147 Tesco Clubcard points that are about to expire. Don't let your rewards go to waste!"
It then promises customers they can turn their points into shopping vouchers or exchange them for treats with Tesco's Reward Partners. But there's a nasty sting in the tail.
Fake website demands credit card details
Following the links leads to a remarkably convincing website designed to look like an official Tesco page. After following the on-screen instructions, users are asked to enter a phone number, name, address and email address.
After filling in the forms using fake details, the final page demands full credit card details to supposedly redeem the Clubcard points. Anyone fooled into handing over all this information will give cybercriminals the details they need to attempt fraudulent payments or steal money from bank accounts.
Tesco's official warning
The scam appears to have been circulating for several weeks, with Tesco customers taking to social media to report receiving similar messages. Tesco has previously warned customers that fraudsters can send emails that look genuine but are designed to steal sensitive information.
On its help page, the supermarket says: "You could get a genuine-looking email saying it's from us. But it asks you for information such as a password, date of birth, Clubcard number or bank details. Some emails may ask you to click a link to another website.
"We'd never do this. Emails like this are likely to be fake. The only time we'd ask for this information is if you've contacted us and we're replying to you. But we'll never ask you for your password."
If you are a Clubcard holder and receive an email claiming your points are about to expire, don't rush to click. Never enter personal or payment details through a link in an unexpected message. Instead, check your points directly through the official Tesco website or app.
