Myattwg: why you are redirected to myattwg.att.com and what to do

What Myattwg is: an AT&T page, not a virus

Myattwg is myattwg.att.com, an address that belongs to AT&T, the American telecommunications company. It is not a program and not a browser hijacker: AT&T's own network sends customers there, and on 6 October 2026 the address forwarded us to AT&T's payment page, which says the broadband account is suspended because of an unpaid bill.

What it is

A web address on AT&T's own domain att.com, the one our 2020 guide named as myattwg.att.com/UverseAccount.html; on 6 October 2026 it forwarded to fastpay.att.com, titled "Pay without signing in"

Who runs it

AT&T: the page's certificate names AT&T Services, Inc. of Dallas (issued by DigiCert), and att.com has been registered since 25 April 1986

Why you see it

A restriction that sends every web address you open to this page, until the account is sorted out; AT&T's page names an unpaid bill

Who sees it

Readers on AT&T home internet; our 2020 guide listed Windows, Mac, Android and iPhone, because the redirect happens on the network, not on the device

What it is not

A virus, adware or something installed on your computer; there is nothing of this name to find or uninstall

1. 1

   You open any website

   Gmail, eBay, YouTube or a news page: our 2020 guide described readers who could not reach any of them, in every browser, on Windows and Mac alike.

2. 2

   The address bar changes

   Instead of the site you typed you land on myattwg.att.com or, today, on fastpay.att.com. The browser did not decide this and no program on the PC did: the answer came from the network.

3. 3

   The page tells you to deal with the account

   The 2016 version asked you to log in with your myAT&T ID or call a number. The 2026 version says the account is suspended for an unpaid bill and asks for an AT&T phone or account number and the billing ZIP code to pay.

Our test on 6 October 2026

We opened https://myattwg.att.com/UverseAccount.html in a clean desktop Chromium browser from Lithuania, with no extension and no account, and did not type anything into the page. We are not an AT&T customer and our connection was not restricted, so what we saw is what the address itself shows anyone who opens it.

What changed since our 2020 guide

1. April 1986

   The att.com domain is registered

   The registry record (RDAP) for att.com shows registration on 25 April 1986, expiry on 26 April 2027 and a last change on 22 April 2026; its status flags forbid transfer, update and deletion without the registrar (CSC Corporate Domains, Inc.). It is a very old company domain, not a throwaway address.

2. November 2016

   The first question we found

   A Windows user wrote on Microsoft's support forum that opening Windows Live Mail sent the browser to myattwg.att.com/UverseAccount.html. The page said "Important Message from AT&T. Your account needs immediate attention", gave a myAT&T login and two phone numbers, and did not mention a bill. The question shows more than 700 people with the same problem; the one answer calls it "a legitimate AT&T page".

   

3. April 2020

   Our first guide

   We reported it as a redirect that readers met on every site and in every browser, explained that the page belonged to AT&T and that an overdue bill was the cause, and listed ways to avoid unwanted programs. Readers had reacted in two ways: some took it for a scam because of the phone numbers and the urgent wording, and some tried new DNS settings, a browser reset, a malware scan and a router reset without effect, which fits a restriction applied by the provider.

   

4. September 2023 and April 2025

   AT&T's help pages describe the fix

   AT&T's article on restoring service after a nonpayment suspension (last updated 28 September 2023) says to pay the full past-due balance, either signed in or without signing in, and wait five minutes. Its article on late payment fees (last updated 30 April 2025) says AT&T may charge a late fee and suspend service until the balance is paid. Both are general billing articles; neither names the Myattwg address.

5. October 2026

   Our new check: a clearer page on a new address

   The address still works, but it now forwards to fastpay.att.com, and the page says outright that the broadband account is suspended due to an unpaid bill and that access is limited to the payment page. The 2016 and 2020 wording that confused readers, "your account needs immediate attention", is gone from what we saw. We cannot say whether every restricted customer sees the new page.

   

Why you land on it, and how to tell the real page

Because the redirect comes from the network, it hits every device and every browser in the house at once. A problem on one computer only is a different problem. Only the first row below is the AT&T restriction, and AT&T's own page names the unpaid bill as its reason.

The address myattwg.att.com is public, so anyone can open it, as we did, without being a customer; seeing it on a visit you chose yourself says nothing about your account. It matters when it replaces every site you try to open. If you are not an AT&T customer and still land there on every site, the redirect is coming from somewhere else on your network, and the AT&T name should not be trusted until you have read the address bar.

The real risks, from most to least serious

The AT&T page is not a danger. The risks come from copies of it and from the panic it causes.

• High

  A fake copy of the notice

  Our 2020 guide said that the real page being legitimate did not stop someone from making a fake one where adware- or malware-infected users land. A copy can ask for a card number, a myAT&T password or a phone call. Check the address bar and open att.com yourself.

• High

  Calling a number from a message you did not ask for

  Fraudsters copy urgent bill messages and put their own phone numbers in them or in emails with links. Users who hesitated to call the number on the old page were right to be careful, and the safe number is the one printed on your bill or on att.com.

• Medium

  Adware that redirects to other sites

  If tabs open on other addresses or ads fill every site, a program or extension on the device is the likely cause, not AT&T. Adware can also change the start page or search engine and collect browsing details.

• Medium

  Losing access for longer

  A suspended connection stays suspended until the balance is paid. Time spent on virus scans and browser resets does not restore it, and waiting can add fees as AT&T's articles describe.

• Low

  Trackers on the payment page

  The page we opened loaded analytics and advertising hosts (listed below). That is common on large company sites; it is not a sign of infection, and we did not test what was sent.

What the AT&T page loaded in our test

The page we reached is a payment page, so it is worth knowing which outside services it contacted. The names below are the hosts the page requested in our one visit; their roles are judged by the host names and are not confirmed by AT&T.

How adware reaches a device

Our 2020 guide added a warning about potentially unwanted programs because readers who see redirects often suspect them. They are not behind Myattwg, but they are behind many other redirects, and they usually get in with the user's own click.

1. 1

   A free program is downloaded

   A converter, a player, a driver tool or a cracked program from a page that is not the maker's.

2. 2

   The installer hides a choice

   The fast path, named Recommended, Quick or Express, accepts extra apps, browser extensions and toolbars that were already ticked for you.

3. 3

   The extra program starts working

   It shows ads, opens tabs, changes settings and can watch what you browse. Even an annoyance of this kind is a privacy risk, and some adware has weakened the security of the computer it ran on.

Free software bundles are legal when the installer discloses them, which many do only in small print. A page that says your browser or Windows needs updating is the same trick, because a web page cannot update either.

What to do, in order

1. 1

   Read the address bar

   The page you are on should have an address that ends in .att.com, such as fastpay.att.com. If it ends in something else, do not type anything and go to the checks for an infection further down.

2. 2

   Check whether the bill is overdue

   Look at your latest bill or sign in at att.com yourself (type the address, do not follow a link). The old guide's advice stands: first make sure the internet is paid for. If you cannot reach att.com because of the restriction, use a phone or mobile data.

3. 3

   Pay the full past-due balance

   AT&T's help article on restoring service says to pay the full past-due balance, signed in or without signing in (have your account number and ZIP Code ready), and then wait five minutes. It adds that the next bill will contain a reconnection fee and that you may have to turn the device off and on again. That article is AT&T's general one for a nonpayment suspension, so a home line may differ in detail.

4. 4

   Restart the modem or gateway

   Unplug its power for half a minute and plug it back in. Our 2020 guide said to press the reset button; on many gateways that button restores factory settings, which can erase your Wi-Fi name and password, so keep it for the last, and read the maker's instructions first.

5. 5

   Call AT&T if it is still there after paying

   The old notice gave 1-800-288-2020 for residential customers and said to have the billing telephone number ready. AT&T's billing support page currently lists 800.288.2020 for internet, phone and TV. The old notice also gave 1-800-321-2000 for small business accounts; we did not confirm that number in 2026, so use the number on your bill or AT&T's business support. Call numbers from your bill or from att.com, never from an email or a pop-up.

6. 6

   Only then look at the PC

   If the redirect continues after the service is restored, or it leads to addresses that are not AT&T's, work through the section on what to check if you clicked an ad or ran a file, and the browser steps.