This happened to me today, and as someone who works in technology and cybersecurity every day, that's exactly why I'm sharing it. If it almost got me, it could easily get a practice manager or owner just trying to save the business some money.
I received a phone call from someone claiming to represent AT&T. They said my promotional rate was expiring and offered a special promotion to replace it: lower pricing on my Internet service while keeping the same speeds and services I already had. The timing lined up — I'd signed up for service almost exactly a year earlier — which made the call feel even more credible.
At first, nothing seemed unusual. The representative began by asking for my account PIN, my address, and how much I was currently paying for service. Looking back, this was the first warning sign — a legitimate AT&T representative should already have that information on file, and certainly shouldn't need me to tell them what my own bill costs.
As the call continued, the caller explained that Apple was sponsoring a special promotion for AT&T Internet customers. To receive the discounted rate, I'd need to prepay several months of service — sweetened with an additional $50 credit. To make it feel official, I received text messages during the call with reference numbers and promotional details, clearly designed to build trust.
The scam finally became obvious when I was instructed to call a separate "billing department," reference a case number, and pay using Apple Pay.
That's the moment the story fell apart. Legitimate telecom providers don't route customers to a separate department and require advance payment via Apple Pay to receive a standard discount. The caller also never once confirmed my actual Internet speed, current package, or existing rate — details any real account rep would pull up immediately.
This scam is built for consumers, but the same script works even better against a busy veterinary practice — and for a few reasons that make practices a softer target than an individual:
The fix is simple: the practice manager or owner — not front desk staff — should be the single point of contact for any call from a telecom or vendor about your account, alongside your IT provider. No one else on staff should be discussing account PINs, billing amounts, or payment details with an inbound caller, ever.
Cybercriminals keep improving their techniques. The most effective scams today aren't the ones full of spelling errors and outrageous claims — they're the ones that sound almost believable. This one built credibility with account verification questions, promotional text messages, reference numbers, and a smooth sales pitch. Had they not insisted on Apple Pay, some people might never realize they'd been scammed until the money was gone.
Remember: a legitimate company will never object to you hanging up and calling them back on a trusted number. If your practice gets a call that feels even slightly off, that's reason enough to stop and verify.