I just received a text message as an [Apple Security Alert] stating,
we have noticed that your Apple id was used at “APPLE STORE” for $143.95, paid by Apple Pay Pre Authorization.
This appears to be a phishing scam?
[Edited by Moderator]
iPhone 13, iOS 17
THANKS FOR POSTING THIS! I just got it too — assumed it was a scam — never had received anything like that before from Apple. But was immediately confirmed for me when I googled about the scam, and you'd put "$143.95" in your post, which is the same amount they had in my scam text. Another way the scammers try to get you: it says, "Failing [to call the number] may lead to auto debit and charge will not be reversed" So I went straight to all my payment accounts and there were no flags, no charges...then googled the number to see if it was legit — none of the prefixes matched the normal support numbers for Apple. I didn't click any of the links within the text, but typed the apple support url they had, separately into my browser, and that was the correct url, so we know clicking their link within the text would've given them what they wanted — remember, just because it says a legitimate url DOES NOT MEAN it links to a legitimate url, so NEVER click a live link within a suspicious text. Conclusion: sneaky, perhaps getting more subtle and clever, but just another scam, successfully dodged. I hit "delete/report" junk. And will now go update passwords next.
ric153 wrote:
My wife got this text from a Hotmail accountApple Approval Notice
PLEASE, PLEASE read threads before posting a new message in a thread. By reading only a few posts you would have learned that MILLIONS of people get the same or a similar scam message every day.
Hepzi wrote:
This is an insulting message. Finding anything on the Apple website is like looking for a needle in a haystack--and there is no easy way to contact either. All dispersed over the various enterprises. I suspected a phish and tried to to do the responsible thing and find info from Apple--impossible!! Finally used Google--yes Google!! to search for info on YOUR site. For a company that wants to lend, process payments, etc you sure have lousy customer support, protections and information. YOu will soon be regulated like a bank and forced into responsibility.
This is a user-to-user technical support forum. No one participating here (unless they work for an actual bank) is going to be regulated as a bank. Nor does anyone participating here own or control this website.
If you want to let Apple know your concerns, you can use the feedback page:
joedygirl wrote:
Your Apple ID was used at "Apple Store" for $195.99…
Phishing.
Text including “billed” amounts will vary.
Also not how payment fraud detection works, either.
See previous replies for details of the tip-offs, clues, and errors in the text.
And previous replies for what to do if you’re still not sure it’s a fake phishing message.
lynnhost wrote:
I just got this text too. So, what passwords should I change for my protection? Or is it just my phone number that was used?
Spammers lie. Scammers lie. They build their lies to cause you to do what they want, too. Countdowns, percentages, timers, fear, titillation, greed, anything to get you to act, to act quickly, and to act before you think.
These particular scammers are phishing for your Apple Account credentials.
Other scammers such as the “pervert” sextortion want money.
Other scammers seek other valuables.
What do you need to do here? Nothing.
Since you didn’t expose anything to the scammers, there’s nothing to change.
There are things that can reduce your exposure to these and other scams, though.
Well, if you don’t have two-factor authentication enabled, turn that on. That’s a last-chance means of preventing account takeover, should some future phishing fool you. (Sooner or later, we’ll all get fooled, too.)
If you’re not already using a password manager such as Apple’s iCloud Keychain, consider enabling and using that too, as password managers won’t fill in your credentials on fake (phishing) websites.
Here are some of the many scams: Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Apple Support
TL;DR: you’re fine. Nothing wrong here, and nothing more to do.
Retirement2017 wrote:
I received this messageApple Approval Notice
We have noticed that your Apple iCloud id was recently used at "APPLE STORE - CA" for $143.95, paid by Apple Pay Pre Authorization. Also some suspicious sign in request and apple pay activation request detected. That looks like suspicious to us. In order to maintain the security and privacy of your account we have placed those request on hold. Your Photos, Data, Bank Information and Cards are at risk. If NOT you? talk to an Apple Representative. Failing may lead to auto debit and charge will not be reversed. Call +1808203**** immediately to cancel this charge.
Billing Department : Subscriptions and Billing - Official Apple Support
Have a great day!
[Edited by Moderator]
Literally (and I mean literally) MILLIONS of people have received this or similar scam messages. You are not alone. It is sent by bots installed on co-opted computers, mostly Windows PCs.
And NEVER, EVER click on a link in a message or call a phone number in a message.
Retirement2017 wrote:
I received this messageApple Approval Notice
We have noticed that your Apple iCloud id
It’s called an Apple Account, as Apple stopped using Apple ID a while back. Enjoy the brief interlude before the scammers catch up. It’s never been called an “Apple iCloud id”, though.
was recently used at "APPLE STORE - CA" for $143.95, paid by Apple Pay Pre Authorization.
Apple Pay Pre Authorization is word salad.
And that’s also not how payment networks and fraud detection works. If there’s fraud suspected, the transaction is blocked before payment, and only proceeds after explicit approval (from you) is received. The card-holder (you) doesn’t call to block payment, the caller calls to complete the payment, if fraud is suspected.
Also some suspicious sign in request and apple pay activation request detected.
Word salad. Also not how Apple reports issues.
You do have two-factor authentication enabled too, right? If not, go enable that Right Now.
That looks like suspicious to us.
Word salad. Poor grammar, too.
In order to maintain the security and privacy of your account we have placed those request on hold.
Not how this works. Also word salad. Also bad grammar.
Your Photos, Data, Bank Information and Cards are at risk.
That’s not how Apple Pay works. If your Apple Account is breached, sure, you’re headed for a Bad Day.
But you have two-factor enabled, right? That will show a verification code for every new and unexpected login.
If NOT you? talk to an Apple Representative.
“If NOT you ? talk to an Apple Representative” is word salad.
Failing may lead to auto debit and charge will not be reversed.
That’s not how payment networks work. Also not how fraud detection works. Also, bad grammar.
Call +1808203**** immediately to cancel this charge.
Yeah, because Apple is likely to use a number that isn’t toll-free; an 800, . And if you’re still not sure, search for the phone number, and see if it’s associated with shenanigans, or with Apple. And if you’re still unsure, look up the number for Apple in your Wallet or otherwise, and contact Apple.
Arcane technical details: ”Toll-free telephone numbers in the North American Numbering Plan have the area code prefix 800, 833, 844, 855, 866, 877, or 888. Additionally, area codes 822, 880 through 887, and 889 are reserved for toll-free use in the future. 811 is excluded because it is a special dialing code in the group NXX for various other purposes.”
Billing Department : Subscriptions and Billing - Official Apple Support
Word salad.
Have a great day!
Yeah, because Apple is going to use that “Have a great day!” as its closing, and particularly on a note claiming payment mayhem.
[Edited by Moderator]
Kinda wish here was a moderator for spammers, scammers, and phishers too, but here we are.
A few more of the many sorts of scams: Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Apple Support
And if you’re still unsure if this is real or a scam, look up the Apple-published telephone numbers on an Apple webpage, and contact Apple directly. Email sending addresses and calling numbers can be faked, too.
We get this same message posted regularly in this thread, dozens of times. This scam gets sent to millions of people.
Contact info for Apple, on an Apple webpage: Contact Apple for support and service - Apple Support
Hello~ Yes, it’s just scammers doing what scammers do. Delete it and move along . Don’t interact with it at all. Click on below and review…
Take care.
~Katana-San~
25th Floor wrote:
…The text was posted from “gon**************20@icloud.com”. I hope this does not mean they have hacked the iCloud email of someone…
Scams are illicit businesses, and harvesting insecure servers and insecure accounts is part of that.
One of the more common ways to gain account access is password re-use. One leak from some service somewhere, and the email and password is tried everywhere.
To see (some of) the breached services that have leaked your email and password, visit:
Phishing works well for gaining account credentials, too. There’s been some well-crafted AT&T “price increase” phishing ongoing.
Some few of many schemes:
charlnice wrote:
Why dose my App Store not work what if I don’t have a back account
Apple expects a payment method to be on file when using the app store, and expects to be paid any money they believe is owed them.
With no valid payment method or when Apple believes money owed them, Apple can block access to the app store.
If your App Store access is blocked, contact Apple Support: Contact Apple Support - Apple Support
That all entirely unrelated to then phishing scam messages discussed here.
I received the same yesterday.
Apple Approval Notice
We have noticed that your Apple iCloud id was recently used at "APPLE STORE - CA" for $143.95, paid by Apple Pay Pre Authorization. Also some suspicious sign in request and apple pay activation request detected. That looks like suspicious to us. In order to maintain the security and privacy of your account we have placed those request on hold. Your Photos, Data, Bank Information and Cards are at risk. If NOT you? talk to an Apple Representative. Failing may lead to auto debit and charge will not be reversed. Call +1******* immediately to cancel this charge.
Billing Department : Subscriptions and Billing - Official Apple Support
Have a great day!
[Edited by Moderator]
I recvd same message. Called-stated-What is going on? Recvd immediate-hang up-dial tone.
I got the same message. 10 minutes after I made a purchase on the Apple Store. Had all the other people on this thread recently made a purchase? It seems like too much of a coincidence.
Just got the same message with same exact amount of $143. The phone number itself looked suspicious but thought I’d google it anyways and came across this thread. Thanks for confirming it is a SCAM!!
SuzyQ4762 wrote:
I just got a text Apple alert recently use Apple Store for 154.95 and there is a phone number to call .
It is a scam. Do not call the number. Report the text as junk.
Go to Settings/Messages (Settings/apps/messages in iOS 18) and turn on Filter Unknown Senders.
you can also add a spam blocker such as NoMoRobo
Identifying Phishing Scams in text messages
