A few days ago I posted a message on this forum about my sim not having been delivered. Soon after, I got an email from someone called Irene Morgan, who claimed to be from ID customer service. She asked for a number where she could call me, which I promptly gave her. I was then on the phone with someone who claimed to be called Jason. He asked for my details, including my credit card, which was supposedly needed for a deposit. Well, today I got multiple payments taken from Pakistan. 
Just to say: beware of scammers. If you get an email from someone claiming to be from ID customer service, it’s probably not them. I have seen other people on this forum mention Irene Morgan, so it is not an isolated accident.