Received an “AT&T address validation” email? Do not use the message itself to decide whether to provide information. Open the myAT&T app or type att.com into a new browser tab, sign in, and check your account or contact AT&T through a number on its official site. If the request is unexpected or you cannot confirm it, do not click the email's links or open its attachments. AT&T's phishing guidance recommends this cautious approach.
Is attaddressvalidation@amcustomercare.att-mail.com legitimate?
The address appears in searches for AT&T address-validation messages, but we could not find an AT&T support page confirming that exact mailbox. AT&T says its account emails use att-mail.com. That is useful context, not proof that a particular email is genuine: a displayed From address can be spoofed, and an attacker can use a lookalike address or a misleading reply path.
Do not treat a matching domain, logo, greeting, deadline, or screenshot as a pass/fail test. Check the request independently in your account or ask AT&T through an official support channel. If you cannot confirm it, report the message rather than replying.
What should you do with a suspicious AT&T email?
- Pause. Do not click links, download attachments, reply with personal information, or call a number supplied only in the email.
- Open AT&T independently. Type att.com yourself or use the myAT&T app. Check for any relevant account notice. If there is no matching notice, that alone does not prove the message is fake; contact AT&T through its official support site if the request matters.
- Treat requests for secrets as a warning. AT&T warns that fake emails can ask for account or payment information and link to imitation sign-in pages. Never give a password, one-time code, Social Security number, or payment details to a page reached from a suspicious message.
- Report it. AT&T says you can forward a suspicious email to abuse@att.net, ideally with full headers, or mark it as spam in AT&T Mail. Then delete it if you have no further need to preserve it.
If you already entered credentials on a suspicious page, go to AT&T directly, change the affected password, review account activity, and contact AT&T support. If you shared payment or identity information, follow the relevant bank or identity-theft reporting steps as well.
Are @att.net and @currently.com official AT&T email domains?
Yes. AT&T's support list names customer mailbox domains including @att.net, @currently.com, @sbcglobal.net, @bellsouth.net, @ameritech.net, @flash.net, @nvbell.net, @pacbell.net, @prodigy.net, @snet.net, @swbell.net, and @wans.net.
Those are domains people can use for their own AT&T Mail addresses. They are not a whitelist that authenticates a billing, security, or address-validation message sent to you. A message that displays one of these domains can still be fraudulent.
Can Verify Email authenticate an AT&T message?
No. Verify Email's address checker assesses address and deliverability signals. It does not authenticate an email's sender, inspect its headers or links, confirm an AT&T account request, or decide whether a message is phishing. For that decision, use AT&T's official account and support channels.