Is this text about a refund legit?

Hi ​@bigchaoticgood ,

Analysis indicates this from is PayPoint acting on OVO’s behalf. You can proceed safely.

I had a different answer but I’ll go with

​@Blastoise186’s answer but you can get scammers using alternative characters that look like a valid site.

https://en.wikipedia.org/wiki/IDN_homograph_attack

While you are right to be cautious, I’ve run my own checks using my analysis tools - it appears this is legitimately from PayPoint acting on behalf of OVO.

The ultimate source of the text message was i-movo by PayPoint. The intention is that you would take the digital voucher to a PayPoint shop and cash-out there just like you would with a paper voucher. i-movo is deeply integrated into the PayPoint infrastructure and is used to process these vouchers in order to make a payout in cash format, or to top-up energy meters.

While I can’t reveal the details of my checks or tools, I can say that I’m pretty confident in them.

You’re welcome :)

I have been sent an email with a download link requesting that a third party company pay point be given access to my bank account to pay a goodwill gesture (for atrocious customer service). Ovo gave me no advance warning that this email would be sent from pay point and had told me that it would be sent via cheque. Is this a spam email. The download link says that pay point needs access to my account for a number of days, which seems a bit strange

Hi ​@Dcoop ,

It might help if you actually show us the email - with personal info redacted - so we can see what you’re talking about and give us a chance at better advice.

Thanks

If it looks like a scam and sounds like a scam, treat it like a scam.

It's difficult to say if it's a genuine payment or a scam. Sounds like a scam. However, PayPoint has an option when the energy company transfers some money to the customer. I would double-check with Ovo on their payment method. Until then treat it as a potential scam. It would really help if you could share the screenshot of the letter with us (remember to cover any sensitive information). 

It’s worth remembering that I’m a cybersecurity professional myself. My eye may well reveal something useful - that’s why seeing the email might help.

Hey ​@Dcoop 

I’m glad to see a few of our community members have already stopped by with some advice here.

I would recommend checking with the Support Team as they’d be able to see any corresponding notes/emails on the account to confirm this.

Do let us know how you get on.