Is this legit or a SCAM received 9/18/2019

[FlyingRCDD]

Reminder: Update your AT&T email settings today

info@service.comms.yahoo.net

Hi AT&T Yahoo Mail member,

Good news! There’s a new way to set up your AT&T email account in email apps that will keep your information even more secure. Please update or upgrade your email apps IMMEDIATELY. Failure to do so will interrupt your access to your email account.

Learn how to update your settings and apps.

Thanks for choosing us,
AT&T

[_xyzzy_ · Accepted solution]

Believe it or not, worded like it is, and with the suspicious looking sender link, I believe it is.  I did some investigation on that link and it appears it's taking a rather roundabout way to get you to the Use OAuth or secure mail key for email apps att article.

Why now?  The secure mail key and OAuth have been around since early 2018.

Why it's coming from a place called info@service.comms.yahoo.net and not att.net I don't know (other than yahoo is att's email service provider)?  And if your myAT&T profile contact email address is different than your att account address (and by the way I recommend it should be for account recovery purposes) why is it being sent directly to your account email address and not you att contact email address?

[angryoldgoat]

So it is legit?  Why now?  Why Immediately?  ALSO, what does immediate mean?  This change (if now) has been in process for at least one full year.  I got that message on all my email accts last night (18 Sept) and today (19 Sept).  If I don't change all my household email accts by (what date) will my email fail to send/receive??

[_xyzzy_]

I believe it's legit.  But now for the time being I am now recommending not clicking the link and just going to where that link takes you, i.e., att's Use OAuth or secure mail key for email apps doc (click the link I just supplied instead).  I am trying to get some official clarification particularly who is service.comms.yahoo.net and what's their official relationship with yahoo.com.

At any rate you should do what the OAuth doc says and switch to using a secure mail key in place of the account password (or using OAuth security if your email client supports it, your choice).  Don't know what "immediately" means since that "Use OAuth..." doc has been around since early 2018.  If the email is legit maybe they finally plan to enforce using the additional security measures.  If that's the case then your POP/IMAP/SMTP access will fail in your clients.

[SunButter]

This is NOT a legit email. This is a scam. Someone asked on Twitter, and Yahoo replied that it didn't come from them. Source: https://twitter.com/charlesmentor/status/1169914649594253313

Delete delete delete this.

[angryoldgoat]

Thanks!  Maybe I can sleep tonight!

Ha!

[ATTHelpForums · Accepted solution]

Hi Community,

Thank you for your feedback and thank you to @_xyzzy_ for chiming in earlier with the correct information. We can confirm this email is legitimate. We will work to make the emails more clear going forward. 

David, AT&T Community Specialist

[angryoldgoat]

This still does NOT answer my "immediate" question.  How long before my email will NOT function? 

Tomorrow, next week, next month,

OR as past experience with the OAuth/secure key "requirement" has shown, do I have another year???

[_xyzzy_]

@angryoldgoat 

This still does NOT answer my "immediate" question.  How long before my email will NOT function?

As you stated, when your mail client fails you'll know!  Or you could follow the recommendation that email made (i.e., "immediately") and change now and not have to worry when or if it becomes a requirement. 

[angryoldgoat]

Some of us are mere customers, paying for a service that is constantly changing and often unreliable.  Thanks for your advice.  I'll make every effort to update my email client when I have a moment or two.

[_xyzzy_]

@angryoldgoat 

Read my signature.  I'm a "mere customer" too.

[angryoldgoat]

I read your sig.  You obviously have more time than most of us!

OVER and OUT

[Opal45]

I'm sorry but I don't understand your answer. The question asked is this,  "is thiis legit or a scam?" Your answer was, " it is. "  Which is it? 

[davemize]

Re-read post #7 above.... ATTCustomerCare has confirmed that the original post is legit.

[Anonymous]

Grateful to those who spend time trying to answer your question would be nice.  Here's a thought:  since it regards a proposed settlement, through which, if you did read the email, you might benefit; would it not be a good idea for them to try to look like a scam email, so that you would not open it, and would just go away and have your own problems by yourself.