If a message claiming to be from ASOS asks for personal or payment details, pushes you to click urgently, or offers something implausibly good, stop before interacting. Check ASOS through its official website or app, report suspicious email through the appropriate channel, and take account-security steps if you already shared information.
How to tell whether a message is really from ASOS
ASOS says it contacts customers through an ASOS-branded email address or a verified social-media account. Scammers may impersonate the retailer through fake Gmail accounts, WhatsApp, social media, or websites that look like ASOS. A convincing logo or familiar name alone does not prove a message is genuine.
As an Amazon Associate I earn from qualifying purchases.
- Look for pressure or an unlikely promise. Be cautious if a message demands personal details or offers something that seems too good to be true.
- Check the sender and channel. Compare the email address carefully, and on social media check for the platform’s verification mark. ASOS says it will never ask for your password or card details in a social-media direct message.
- Treat an email logo as one clue, not proof. ASOS uses BIMI, which can show its logo beside email in supported inboxes. Whether the logo appears depends on the email provider. ASOS advises caution if it is absent; don’t click links or open attachments when the logo is missing or authenticity is uncertain.
- Don’t share sensitive information publicly. Avoid posting your full address or card details in a public comment or post.
When you need to check an order or account, open the official ASOS website or app yourself rather than following a link in the message. ASOS’s guidance is on its Customer Care pages; the storefront and available contact options vary by country.
What to do with a suspicious ASOS email
- Don’t interact with it. Don’t click links, open attachments, reply, or provide information while you’re unsure whether it is genuine.
- Check with ASOS independently. Open ASOS through its official site or app, then find Customer Care there. Don’t use contact details or verification links supplied only in the suspicious message. ASOS directs people who suspect an impersonator to Customer Care.
- In the UK, forward suspicious email to the NCSC. The National Cyber Security Centre says to forward a suspicious email to its reporting service, even if you are not sure it is a scam. Emails already in your spam or junk folder do not need to be forwarded. The NCSC analyses submissions and linked sites, but says it cannot tell each person the outcome of its review.
- Use a crime-reporting route if you were harmed. The NCSC’s email-forwarding service is for suspicious messages, not crime reports. If you lost money or were hacked after replying, report it to Report Fraud in England, Wales, or Northern Ireland, or to Police Scotland if you are in Scotland. If you are elsewhere, contact your national cybercrime authority and email provider; the UK routes do not apply universally.
If you clicked, shared details, or lost money
If you entered an ASOS password or reused password
Go to ASOS and your other affected services by typing their official addresses or using their official apps. Change exposed passwords, and change any reused passwords on other accounts. ASOS recommends using unique passwords, especially for your email and ASOS accounts: access to your email can help someone reset passwords on other services.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
If you shared payment details
Contact your bank or card provider promptly using its official app, website, or the number on your card. If you shared your ASOS password as well, secure that account and any accounts where the same password was used.
If an ASOS transaction looks unauthorized
Contact ASOS through Help reached from its official site. Before reporting a charge, check whether it could be an ASOS Premier subscription, a purchase by another authorized user or associated card, or a pending transaction after a cancellation. For a suspected fraudulent transaction, ASOS asks for the date, time, amount and currency, and the last four digits of the card. Do not send a full card number or bank-account screenshots through ASOS email or live chat.
Rank #2
- Requires 3 "AAA" batteries (included)
- Unit auto-locks for 30 minutes after 5 consecutive incorrect PINs
Where to report: ASOS, the NCSC, or a crime-reporting service?
| Situation | Use | What it is for |
|---|---|---|
| Someone may be impersonating ASOS, or you have a question about an ASOS transaction | ASOS Customer Care | Contact ASOS through its official site or app; use the country storefront and contact options for your location. |
| You received a suspicious email in the UK | NCSC suspicious-email reporting service | Forward the email for analysis. This does not report a crime or provide an individual review outcome. |
| You lost money or were hacked after responding | Report Fraud (England, Wales, and Northern Ireland) or Police Scotland (Scotland) | Report the crime through the route for your UK nation. |
The NCSC page reports that it had removed 454.8 thousand scam URLs as of July 2026. That is a figure about the NCSC’s work, not an estimate of ASOS phishing messages or your personal risk. Its scam-email guidance was published on 26 November 2021 and reviewed on 5 September 2022; the reporting routes described here were checked on 7 October 2026.
Quick Recap
Rank #4
- FIDO-ONLY FUNCTIONALITY: Supports FIDO2 (passkeys) and FIDO U2F protocols for passwordless and second-factor authentication. Does not support OTP, TOTP, Smart Card (PIV), or other advanced features - upgrade to YubiKey 5 Series for extended functionality
- SECURE AND CONVENIENT: Passwordless MFA login with the YubiKey Bio authenticator and biometric information using a fingerprint, with a PIN as a fallback. Simply plug in via USB and use your fingerprint to authenticate
- DEVICE & OS COMPATIBILITY: Compatible with Windows, macOS, ChromeOS, and Linux. Works seamlessly with supported services like Google and Microsoft accounts, and major password managers. See the full compatibility list at "Works With YubiKey"
- DURABLE & RELIABLE: Resistant to tampering, water, and crushing. No batteries or network connectivity required, offering dependable authentication without any downtime. Securely manufactured in USA & Sweden
- Yubico Authenticator App - Fingerprint enrollment, passkey management and PIN configuration available via the app app - Upgrade to YubiKey 5 Series to generate one-time-passwords (OTP) via Yubico Authenticator and for advanced compatibility (OATH, PIV)
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
