If you received the unauthorized ASOS push notification reported on 6 October 2026, do not click or interact with its external link. ASOS says it is not currently asking customers to change their password or take any other action. The notification alone does not prove that your ASOS login was compromised, but the National Cyber Security Centre (NCSC) advises ASOS customers to assume they may be affected—even if they did not receive it.
What the ASOS notification means
ASOS says some customers received an unauthorized push notification on 6 October 2026. The company says it is investigating unauthorized activity involving third-party platforms used to communicate with customers and has restricted access to those platforms. ASOS says names and contact details may have been accessed, but it does not believe account passwords or payment-card information were affected. Its site and app remain available, according to the company.
As an Amazon Associate I earn from qualifying purchases.
These are ASOS’s current statements, not an independent forensic finding. The incident concerns unauthorized activity involving customer communications; by itself, receiving—or not receiving—the notification does not establish whether someone accessed your individual account. The NCSC nevertheless advises customers to assume they may be affected and remain alert to suspicious messages. Check the ASOS incident notice and the NCSC alert for updates as the investigation continues.
What to do first
- Ignore the notification’s link. Do not tap it, open it, or otherwise engage with the external third-party link. If you want to check your account or verify a later message, open the official ASOS app or type the website address yourself.
- Do not reset your password just because of this notification. ASOS says it is not currently asking customers to change their ASOS password or take another action. It says it will contact affected customers if that advice changes.
- Look for account or payment activity you do not recognize. Check your account details and orders, then review transactions through your bank or payment provider.
- Be wary of follow-up messages. Do not use links in unexpected messages about the incident, even if they ask you to verify your identity, log in, provide payment details, or claim a refund.
Should you change your ASOS password?
If the unauthorized notification is your only concern, follow ASOS’s current instruction: it is not asking you to change your ASOS password. A reset is sensible if you have a separate reason to think the password is exposed or your account shows suspicious access.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
If you reused your password
Change the reused password on every other service where you used it, going to each service directly rather than through a message link. ASOS and the NCSC recommend using unique, separate passwords. A password manager can be one way to create and keep track of them.
If you need to change or reset your ASOS password
Go to ASOS directly and, while signed in, select “Change password.” ASOS says the replacement must be 10–100 characters and different from your previous password. If you cannot sign in, select “Forgotten password?” on the sign-in page; ASOS says it will send a reset link to the email address registered to your account. See ASOS account help for its instructions.
Rank #2
- Requires 3 "AAA" batteries (included)
- Unit auto-locks for 30 minutes after 5 consecutive incorrect PINs
How to check orders and payment activity
Review your ASOS account details and orders for changes or purchases you do not recognize. Check your card or other payment activity through your bank or payment provider. If you spot an unfamiliar transaction, report it to the provider and contact ASOS through its official Help pages about suspected fraud.
Recommended Free Tools
Do not send a full card number or screenshots of your bank account by email or live chat. ASOS’s online safety guidance explains how to report suspected fraud and handle questionable messages.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to verify messages claiming to be from ASOS
After an incident becomes public, scammers may use it to make convincing messages about account security, refunds, or payment problems. Treat unexpected requests for your password, payment details, or identity documents as suspicious. Do not click links or open attachments in a message whose authenticity you doubt.
Instead, open ASOS independently and contact Customer Care if needed. ASOS says it may contact customers through an ASOS-branded email address or a verified social-media account. Its guide, “How do I know I’m talking to ASOS?”, provides more information on checking a contact. The NCSC also advises vigilance for suspicious messages following a breach.
Rank #4
- FIDO-ONLY FUNCTIONALITY: Supports FIDO2 (passkeys) and FIDO U2F protocols for passwordless and second-factor authentication. Does not support OTP, TOTP, Smart Card (PIV), or other advanced features - upgrade to YubiKey 5 Series for extended functionality
- SECURE AND CONVENIENT: Passwordless MFA login with the YubiKey Bio authenticator and biometric information using a fingerprint, with a PIN as a fallback. Simply plug in via USB and use your fingerprint to authenticate
- DEVICE & OS COMPATIBILITY: Compatible with Windows, macOS, ChromeOS, and Linux. Works seamlessly with supported services like Google and Microsoft accounts, and major password managers. See the full compatibility list at "Works With YubiKey"
- DURABLE & RELIABLE: Resistant to tampering, water, and crushing. No batteries or network connectivity required, offering dependable authentication without any downtime. Securely manufactured in USA & Sweden
- Yubico Authenticator App - Fingerprint enrollment, passkey management and PIN configuration available via the app app - Upgrade to YubiKey 5 Series to generate one-time-passwords (OTP) via Yubico Authenticator and for advanced compatibility (OATH, PIV)
Use stronger security for your other accounts
Use a strong, separate password for each account, and enable two-step verification on services that offer it. The NCSC recommends both measures. The information available about this incident does not confirm whether ASOS itself offers two-step verification, so do not assume the setting is available on your ASOS account.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
