If you clicked the suspicious ASOS notification link, close the page and do not enter information or follow any further links. Opening it alone does not prove your device or account was compromised. Take the next steps based on whether you entered a password or payment details, or downloaded a file.
What should you do first?
- Close the page. Do not reply to the notification, engage with its external link, or provide information. ASOS Customer Care’s instruction is to “disregard the unauthorised notification and do not click or engage with the external third-party link it contained.”
- Verify through ASOS directly. Open the official app or type the ASOS website address yourself, then use Customer Care if you have questions. Do not use the notification’s link to check your account.
- Choose the relevant action below. The response differs depending on what you did after opening the link.
ASOS said some customers received an unauthorised push notification and that it was investigating unauthorised activity involving third-party communication platforms. In its statement, ASOS said basic personal information, including names and contact details, may have been accessed. Based on what it knew at the time, it did not believe payment-card information or account passwords had been affected. ASOS also said it was not then asking customers to change passwords or take other action, and would contact affected customers if that changed. The NCSC repeated this assessment in an alert published on 6 October 2026. This is a time-specific update, not a guarantee about later findings. ASOS Customer Care · NCSC alert
As an Amazon Associate I earn from qualifying purchases.
What happened after you clicked?
If you only opened the link
Close the page and avoid interacting with it. A click by itself does not establish that your device is infected or that your ASOS account was accessed. If nothing was entered and no file was downloaded or opened, that alone does not make infection certain or make a password change mandatory.
If you entered your ASOS password
Go to ASOS through its official app or by typing its address yourself and change the password. Change it anywhere else you reused it, too, since a reused password can put those accounts at risk. Review your ASOS account activity for anything you do not recognise. The NCSC advises updating vulnerable passwords and using strong, separate passwords. NCSC password guidance
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
If you entered payment-card details
Contact your card issuer using the number printed on the card or the issuer’s official app or website. Review recent transactions and follow the issuer’s instructions. Do not use a phone number or link supplied by the suspicious notification.
If a file downloaded or you opened one
Update your existing security software and run a scan. The FTC makes this advice conditional: it recommends a scan if you clicked a link in an unexpected email, to look for viruses and malware. A scan is a sensible step when a file may have downloaded; it is not evidence that a link-only click infected your device. FTC phishing guidance
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
How can you verify an ASOS message?
ASOS says it contacts customers through an ASOS-branded email address or a verified social media account. That statement is useful when checking a message, but do not treat a sender name, a push-notification appearance, or a link destination as proof that a message is genuine. Navigate to ASOS yourself and use Customer Care to confirm anything that concerns you. The NCSC also advises staying alert to suspicious messages that may follow an incident. ASOS contact guidance · NCSC alert
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Where should you report the message?
United Kingdom
- Forward a suspicious text to 7726. GOV.UK says this reports it to your mobile provider.
- Forward a suspicious email to [email protected], which GOV.UK says routes it to the NCSC.
GOV.UK phishing reporting guidance
United States
- Forward a suspicious text to SPAM (7726).
- Forward a suspicious email to [email protected].
- Report the phishing attempt at ReportFraud.ftc.gov.
- If you gave a scammer Social Security, credit-card, or bank details, use IdentityTheft.gov for a recovery plan.
What to watch for next
Be cautious of follow-up messages that claim to resolve the incident, ask you to verify account details, or urge you to act through a link. Reach ASOS by opening its official app or typing its website address yourself. If the situation changes, rely on ASOS’s live Customer Care incident information and the NCSC’s alert rather than an unsolicited message.
Quick Recap
Best Value
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
