Three gave away my PAC Code

40
Posted 20th May 2023 (Posted 16 h, 32 m ago)
So about 4 weeks ago Three Mobile gave away my PAC code to someone else. Obviously they have ported my number and it has cancelled my phone and my number now sits with with someone else (on Vodafone it seems)

I first contacted three 4 weeks ago when my phone had been cut off. They said I had requested the PAC code which I told them time and time again I hadn't. I am guessing the person who had was able to clone my number some how.

Since then my email password has changed and I am unable to access the emails because to change the password it sends a verification code to my phone number.

Anyway I have contacted three on so many occasions over that last 4 weeks and getting very little back. They said they wanted photo ID to show it's me. Then I rang a week later and they said they wanted me now holding the photo ID. I feel like they are messing me about.

I have had both the email address and phone number for 20 plus years so I don't really want to just accept and get a new number. Three did send a sim card out to me but that's just a kick in the face.

My email address has a lot of personal information, including medical, work and financial things in.

My phone number has contacts from over 20 years using it. People will message me and I am scared that the scammers could message back asking to borrow money etc. I can't contact everyone I've known.

Can anyone advise me how to sort this? Or had a similar issue in the past?

James
Community Updates
Ask
New Comment

40 Comments

sorted by
's avatar
  1. solid's avatar
    Just goes to show, maybe as a society, we shouldn't all be keeping so much of our lives tied up with our mobile numbers...

    Our mobile numbers should not be so important, that something like this can effect our emails, messages, accounts, finances, etc

    Hope you get it sorted
    bozo007's avatar
    Unfortunately, society wants convenience and refuses to accept anything that significantly improves security but adds work. And no one I know has considered what will happen if they lose their phone / number.
  2. markmc999's avatar
    From a practical point of view I'd also be trying to secure additional services you use such as bank accounts and credit cards so that whoever has done this doesnt try and gain access to them. 2FA as much as you can.

    Also get on some credit reporting sites ASAP especially the ones who monitor your account regularly to check for newly opened credit - this person is almost certainly trying to steal your ID.
  3. Kb64's avatar
    What is this authenticator app and how would I use it, it's the first time I've heard of such a thing
    solid's avatar
    There are several authentication apps you can use. Some examples in the link below

    uk.pcmag.com/sec…pps
  4. usenetz's avatar
    Contacting a journalist via their newspaper or directing on Twitter might be helpful as often companies such as Three suddenly find a way of resolving issues when the press get involved. BBC One TV has been running a series called Scam Interceptors who may also be interested. 

    There is an article here from The Sun which looked at the issue and contains links to Action Fraud to get a police crime reference number.

    You can call Action Fraud on 0300 123 2040 or use the online reporting tool.

    The Mail and The Guardian are also worth a look as it’s good to ruffle a few feathers.

    Failing all that, and what others have already suggested such as contacting Ofcom, getting in touch with your MP is also worth doing as a letter from the House Of Commons is a good way to get someone’s attention.

    Don’t just give though. Good luck!
  5. DangerousBeans's avatar
    Very important that in your settings you set notifications to 'show previews when unlocked' so that the code doesn't come up unless you unlock your phone.

    "jamie15
    6 h, 6 m ago
    Everyone can see a text message with a code as it pops up on phone, so it's easy to implement and widely used." (edited)
  6. Maverick77's avatar
    Had a similar problem with 3 a few years ago when I bought a new phone and the number disconnected after 1 week. After alot of calls and trouble shooting, new sims etc I got nowhere. It was only after a chance call with someone in EE that they agreed to look the number up and saw that 3 had actually blocked it. 3 themselves however seemed unable to work this out. On getting back to them and telling them this they apologised and gave me £10. I left them and went with EE instead.
  7. jase.2's avatar
    Id approach ofcom and say you have been slammed but neither the losing nor gaining service provider are offering any assistance

    then tell both you have complained to ofcom which can get their attention as they are measured on volume of ofcom complaints
  8. Russ2626's avatar
    Submit a GDPR complaint to Three. They haven't kept your personal information secure or have merged customer records. This should get the attention of the relevant team.
  9. AndyRoyd's avatar
    Suggest as minimum:

    • present Subject Access Request to 3 (SAR / GDPR request)
    3s response should include/show the PAC was accompanied by your DoB, otherwise 3 hasn't complied with its own procedures
    three.co.uk/pri…hts
    ico.org.uk/for…st/

    • file fraud notification with Voda. Possibly wise to both call 0333 304 2897 and complete form at
    vodafone.co.uk/abo…rm/

    • file report at Action Fraud actionfraud.police.uk/

    Not convinced police can / would provide any active assistance.
  10. mutley1's avatar
    as mentioned above, report to action fraud then send the receipt from action fraud to vodafone customer service to report the issue to them. they may take some action and suspend the number pending investigation so that the fraudster can't continue to use the number.
  11. a.198311's avatar
    Hi, May be contact Vodafone and complaint a Fraud activity.. put a police complaint in and raise it to three as Fraud Activity, if taking no action raise it to their complaints team with an intention to take it to ofcom..
    StJimmy's avatar
    Author
    They did say they would raise it with Vodafone but I am not convinced.

    They won't let me raise a complaint as my account is locked down. That's why they wanted the photos etc.

    I haven't rang the police yet
  12. newbie68's avatar
    My goodness - that is scary. I hope you get this resolved. I can't see any other route other than what has been suggested. I would be looking to take this to Ofcom ASAP so that Three take it serious
  13. bozo007's avatar
    May be a good idea to change the password on the email account used for Three and also inform your bank if the number is used for one time passwords.
    sm9690's avatar
    Since then my email password has changed and I am unable to access the emails because to change the password it sends a verification code to my phone number.

    How are they meant to do that
  14. BanditHeeler's avatar
    I'd say ring the police and keep everything with three via email for now on. It's evidence.
    StJimmy's avatar
    Author
    I think the calls will be recorded
  15. rimz790's avatar
    Three messed up my number port from ee to them. On the day that i chose for the number to port over my ee sim card went dead and ever since then, after many online chats and submitting a complaint, I have lost the number! Absolutely useless of a company in that regards! Every time I have contacted them about it, i get told wait 48 hours, the number port is stuck in the system and after 4 different occasions, submitted a online complaints request and they got back asking the same things that the online chat guys asked. (edited)
    chezybezy's avatar
    Ooof. Ever get it sorted?
  16. Pájaro's avatar
    > They said they wanted photo ID to show it's me. Then I rang a week later and they said they wanted me now holding the photo ID. I feel like they are messing me about.


    This is actually totally reasonable. The whole point of photo ID is that it's to verify that the holder is the owner, which they can't do if they only have a picture of the ID. This seems like a clear case of fraud and identity theft, so they need to be cautious that they're dealing with the actual person, and not someone who's just got a copy of their dox.
    AndyRoyd's avatar
    Don't wish to appear pedantic - but how does a commercial company such as 3 verify photo ID?
    • a commercial co does not have access to Gov passport database
    • a commercial co does not have access to DoT d/l photos
    (except for a very few co's trialing Gov db access).
    The "photo ID" is only as convincing as the commercial co employee perceives the presented genuine article or a half-decent forgery, where forgery via emailed / uploaded image is not particularly difficult.

    Probable reality is no "verification check" of Gov-issued photo ID can be performed,
    and in reality is likely better described as "credibility check".
  17. DangerousBeans's avatar
    I know it doesn't help you now and I am very sorry for your woes, this is more of information for anyone reading this thread but in addition to the above I think perhaps if you have a lock on your Sim it can help guard against unauthorised use if your phone gets stolen.
  18. AndyRoyd's avatar
    Probably also wise to remove your name from the opening post of this thread.
's avatar