T-Mobile rewards points expiry texts are a phishing scam

Since early May 2026 a large SMS phishing campaign has impersonated T‑Mobile Rewards by warning recipients that invented points balances are about to expire and urging them to click short‑lived, lookalike domains to redeem points; analysts observed >1,000 related templates (199 very close variants) and at least 81 rotating domains (examples provided), Malwarebytes detections and mitigations are described, and users are advised not to follow unsolicited links and to use security products such as Malwarebytes Mobile Security and Browser Guard.