TL;DR: Octopus Energy says genuine emails come only from @octopus.energy, @octoenergy.com, @octoes.com, @octopusev.com or @octopusenergy.services, and it will never ask you to log in anywhere except octopus.energy/login or ask you to confirm your password. Fake “refund” or “compensation” emails asking for bank details are scams. Screenshot and send them to hello@octopus.energy.

Why energy companies are favourite disguises

Energy bills are big, refunds and credits are real, and price changes come every quarter. So “You’re owed £187.43 in credit” sounds plausible. Octopus, as one of the UK’s largest suppliers, gets copied a lot.

When energy bills spiked in 2022, Which? found scams mentioning the big energy firms rose 10% in the first quarter, with January up 27% year on year. The types it saw are still the ones to watch:

ScamHow it works
Refund phishingA "billing error" means you’re owed money; the link asks for bank details
Fake debt collectorsTarget ex-customers of collapsed suppliers, sometimes with real personal details
Fake grantsInsulation or heat pump "schemes" online, by phone or at the door
Cloned prepayment tokensCheap "£100 of credit for £50"; you end up paying twice
Fake energy bondsInvestment offers using a supplier’s name

Octopus’s own checklist

From Octopus Energy’s help page:

Real sender domains

Real login page: only https://octopus.energy/login/.

Never: Octopus will never ask you to confirm your password.

Warning signs: spelling and grammar errors, and offers of payment or compensation in exchange for usernames, passwords or bank details.

How to report

Record what you can (a screenshot, or the number that called you) and send it to hello@octopus.energy. Forward scam emails to report@phishing.gov.uk too. If you lost money, report to Report Fraud and call your bank or 159.

Octopus’s advice is pleasingly blunt: “If in doubt: give us a shout!”

Other energy scams

The same tricks hit British Gas, EDF and others: fake refunds, fake smart meter appointments, and fake “energy grant” texts. See British Gas scams and council tax refund scams, which use the same “you’re owed money” hook.

A free email exposure check shows if your email address is in breach data, which often explains why fakes find you.

Frequently Asked Questions

What email addresses does Octopus Energy use?

@octopus.energy, @octoenergy.com, @octoes.com, @octopusev.com and @octopusenergy.services.

Will Octopus Energy ask for my password by email?

No. Octopus says it will never ask you to confirm your password.

How do I report a fake Octopus email?

Screenshot it and send it to hello@octopus.energy, and forward it to report@phishing.gov.uk.

Is an Octopus refund email real?

Check your account by going to octopus.energy/login yourself. Don’t use links in the email.

Sources

Related Reading