Identifying Phishing Scams in text messages

I just received a text message as an [Apple Security Alert] stating,

we have noticed that your Apple id was used at “APPLE STORE” for $143.95, paid by Apple Pay Pre Authorization.

This appears to be a phishing scam?


[Edited by Moderator]

iPhone 13, iOS 17

Posted on Aug 8, 2024 5:51 AM

Reply
Question marked as ⚠️ Top-ranking reply

Posted on Sep 16, 2024 1:19 PM

THANKS FOR POSTING THIS! I just got it too — assumed it was a scam — never had received anything like that before from Apple. But was immediately confirmed for me when I googled about the scam, and you'd put "$143.95" in your post, which is the same amount they had in my scam text. Another way the scammers try to get you: it says, "Failing [to call the number] may lead to auto debit and charge will not be reversed" So I went straight to all my payment accounts and there were no flags, no charges...then googled the number to see if it was legit — none of the prefixes matched the normal support numbers for Apple. I didn't click any of the links within the text, but typed the apple support url they had, separately into my browser, and that was the correct url, so we know clicking their link within the text would've given them what they wanted — remember, just because it says a legitimate url DOES NOT MEAN it links to a legitimate url, so NEVER click a live link within a suspicious text. Conclusion: sneaky, perhaps getting more subtle and clever, but just another scam, successfully dodged. I hit "delete/report" junk. And will now go update passwords next.

168 replies
Sort By: 

Jan 14, 2025 7:19 AM in response to TzTerri

I understand the temptation to call the number because it’s hilarious to mess with these scummy scammers. However I advise against calling or texting any number including the number that sent you the message because it lets the scammers know that your line is active. You will see an increase in scam attempts since they are aware that your line is active.

Reply

Jan 21, 2025 1:47 PM in response to jamesfromwinston salem

As stated above and in other replies in this thread, scam.


Messages listing an unauthorized purchase of anything from 1¢ to a billion dollars, the scammers can randomly select whatever amount they want you to to send them, same as they can make up the number of "viruses" they "found" "infesting" your system, and whatever random number of compromising photos and videos they claim to have "hacked", among many other scams.


Some write-ups on various scams:



Reply

Jan 22, 2025 1:22 PM in response to powerhouse3

powerhouse3 wrote:

... I just hope that individuals that 'use' Apple Pay do not fall for this.


You can be assured these scams work, or we wouldn’t need swimming in the messages, and with the various threads questioning the messages from those more wary among us.


Reply

Feb 12, 2025 12:00 PM in response to RooC9

I just got one that said

We detected some suspicious activity on our Apple Account as it was used at Apple Store for $243.80.If this is incorrect, Contact Apple Support 1-855-xxx-xxxx

so I called and hung up right away!! Obviously a scam. Heard lots of unprofessional stuff in background. Can they please get a life?? Do they have any idea how much this affects people, especially the older population. be safe out there and protect your stuff!



[Edited by Moderator]

Reply

Feb 18, 2025 6:53 AM in response to Heaven11-1

Heaven11-1 wrote:

What if I stupidly gave them my first and last name but then hung up


There is nothing you can do about that now.


They do have first and last name associated with an active telephone number (obviously), and they also have somebody willing to engage with them; with spammers and phishers. Which usually means more spam and more phishing.


That previous engagement combined with changes happening In the US including the reduction or removal of consumer protections and reductions and removal of enforcement and investigators, means the numbers and brazenness of spam, scams, and phishing that you (and the rest of us) will be receiving is likely to only increase, too.

Reply

Feb 22, 2025 6:11 AM in response to xusmico

xusmico wrote:

received a text at 1645 last night.
from 81961
you can now rest your apple password at (hyperlink in blue and underlined) apple.com/recover


Post a screenshot of the text message, please. Take a screenshot on iPhone - Apple Support


If you’re unable or unwilling to post a screenshot here, is the text of the SMS message: “You can now reset your Apple ID password at apple.com/recover Be sure to do this before {month}/{day}”, or maybe “You can now reset your Apple Account password at apple.com/recover Be sure to do this before {month}/{day}”, or similar?


This might well be a scam, or it might be a mistake, or it might be an account takeover attempt.


Or it might be entirely legitimate, depending on the text of the SMS message, as it might be a recovery contact request by someone that used you as their recovery contact.


Scam would be the usual assumption, and — if this is the usual scam — the scammers will probably send a few more more messages over the next days, culminating in a message with a message containing a not-actually-Apple telephone number for “Apple Support” that they want you to call. That’s (obviously) a scam.


What this is trying to look like: How to use account recovery when you can’t reset your Apple Account password - Apple Support



What to do:


I’d immediately change your Apple Account password to a new and unique and robust password, in an abundance of caution.


Is your Apple Account configured for two-factor authentication? If not, go enable that right now, too.


Otherwise, ignore it.




PS: Password re-use is doom. A list if some of the services where your passwords may have been or were compromised:


Reply

Feb 27, 2025 11:55 AM in response to RooC9

I got the 2nd one today. The first one freaked me out and I ended up calling them and giving them way too much information. I had to completely change all of my banking. It took months to fix. Be diligent and report them to the FCC or any organization that can hurt them back!

Reply

Feb 28, 2025 5:39 AM in response to Heaven11-1

Oh my! They obtained your cellular phone number the moment you called them. Their computer software records your phone number and the recorded phone call, which includes your name. This information allows them to start calling and harassing you nonstop, as they know the phone number their software selected is valid. Many of these individuals also sell this information to information brokers, who may use it for illegal purposes.

Reply

Mar 5, 2025 8:47 AM in response to 25th Floor

25th Floor wrote:

I hope that adding to this thread heightens the awareness of Apple to this ongoing scam.

Apple is well aware of this and thousands of other scams, but there is nothing Apple can do because most of the scams originate from other countries (Myanmar, in particular).


The real issue is that anyone who uses the internet needs to be aware and alert to scams like this.


MrHoffman posted a link to Apple’s guide to scams.


Here’s another useful link: https://aarp.org/fwn, AARP’s fraud watch network tracking site; but you don’t have to be old to use the information in it.


Another site to follow is: https://krebsonsecurity.com/. Brian Krebs tracks scammers around the world.


For a more technical discussion of vulnerabilities there is Bruce Schneier’s Schneier On Security: https://www.schneier.com/

Reply

Mar 24, 2025 10:56 AM in response to JustMeinSD

JustMeinSD wrote:

🚩🚩🚩It is 3/24/25 and it must be going around again ..,



It’s still going around. It hasn’t stopped.


This and related scams have been going for a very long time, and it and its descendants will be going for the foreseeable future. Decades or more ahead, as this and similar scams are adjusted and tweaked to tune profits, and as new scams are created and tested.


Unfortunately too, the scammers are clearly adding new recipients, meaning this and other scams are continuing to propagate.



Reply

Nov 26, 2024 12:55 PM in response to RooC9

I just received this text message today. Same amount. Here is the message and was sent from a Hotmail account (***@hotmail.com) that came through as a text. Obviously - hotmail would not be an official Apple message 🙄

=====


Apple Approval Notice


We have noticed that your Apple iCloud id was recently used at "APPLE STORE - CA" for $143.95, paid by Apple Pay Pre Authorization. Also some suspicious sign in request and apple pay activation request detected. That looks like suspicious to us. In order to maintain the security and privacy of your account we have placed those request on hold. If NOT you? talk to an Apple Representative. Failing may lead to auto debit and charge will not be reversed. Call +1 ** immediately to cancel this charge.


Billing Department : https://support.apple.com/billing

Have a great day!


[Edited by Moderator]



Reply

Jan 28, 2025 2:36 PM in response to ric153

ric153 wrote:

My wife got this text from a Hotmail accountApple Approval Notice


PLEASE, PLEASE read threads before posting a new message in a thread. By reading only a few posts you would have learned that MILLIONS of people get the same or a similar scam message every day.


Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams

Reply

Feb 5, 2025 11:46 AM in response to Hepzi

Hepzi wrote:

This is an insulting message. Finding anything on the Apple website is like looking for a needle in a haystack--and there is no easy way to contact either. All dispersed over the various enterprises. I suspected a phish and tried to to do the responsible thing and find info from Apple--impossible!! Finally used Google--yes Google!! to search for info on YOUR site. For a company that wants to lend, process payments, etc you sure have lousy customer support, protections and information. YOu will soon be regulated like a bank and forced into responsibility.

This is a user-to-user technical support forum. No one participating here (unless they work for an actual bank) is going to be regulated as a bank. Nor does anyone participating here own or control this website.


If you want to let Apple know your concerns, you can use the feedback page:


Product Feedback - Apple


Reply

Identifying Phishing Scams in text messages

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.