Identifying Phishing Scams in text messages

I just received a text message as an [Apple Security Alert] stating,

we have noticed that your Apple id was used at “APPLE STORE” for $143.95, paid by Apple Pay Pre Authorization.

This appears to be a phishing scam?


[Edited by Moderator]

iPhone 13, iOS 17

Posted on Aug 8, 2024 5:51 AM

Reply
Question marked as Top-ranking reply

Posted on Aug 8, 2024 7:11 AM

phishing That's not an Apple telephone number.


Fraudsters are getting very good at imitating Apple messages and sometimes the only indication in an email is very subtle. Have a look at this thread. https://discussions.apple.com/thread/255639814 It can be very hard to tell from an email alone if it is authentic. The best way to check is to use an independent way through Apple's own resources to confirm what the communication claims. Scams (e-mail, text messages, and phone calls) are getting very good at closely imitating true Apple communications. Always be cautious. These support articles have some guidelines:


About identifying legitimate emails from the App Store and iTunes Store --> Identify legitimate emails from the App Store or iTunes Store - Apple Support


Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Apple Support


Avoid scams when you use Apple Cash --> Avoid scams when you use Apple Cash - Apple Support


About Gift Card Scams --> About Gift Card Scams - Official Apple Support


If you are uncertain about a message and a resource provided in that message, do not click on any links in the message. Try to use an Apple resource you know is valid to independently verify what the message is claiming. Go to a support article page on apple.com and use the instructions in the article to verify though Apple itself, or use an Apple device feature such as Settings or an Apple app. To ask Apple start at this web page: Official Apple Support


- Apple e-mails address you by your real name, not something like "Dear Customer", "Dear Client", or an e-mail address* However, having your actual name is not proof this isn’t phishing. Compromised databases may have your name and address in them.

- Apple e-mails originate from @apple.com or @itunes.com but it is possible to spoof a sender address. "Apple email related to your Apple ID account always comes from appleid@id.apple.com." - About your Apple ID email addresses - Apple Support

- Set your email to display Show Headers or Show Original to view Received From. Apple emails originate from IP addresses starting with "17.".

- Mouse-over links to see if they direct to real Apple web sites. Do not click on them as this just tells the spammer they have a working e-mail address in their database. If you are unsure, contact Apple using a link from the Apple.com web site, not one in an email.

- Phishing emails may include account suspension or similar threats in order to panic you into clicking on a link without thinking. They may report a fake purchase in order to infuriate you into rashly clicking on a false link to report a problem. March 2018 post by Niel There was a fraudulent order on my apple … - Apple Community - "Emails saying that your Apple ID has been locked or disabled are always phishing. If one actually gets disabled, its owner will be told when they try logging into it instead of through email."

- Apple will not ask for personal information in an e-mail and never for a social security number.

- Scams may have bad grammar or spelling mistakes.

- Apple will not phone you unless it is in response to a request from you to have them call you.


* Exception: I got email saying my ID is expired! Does… - Apple Community


Forward email attempts as an attachment (in MacOS Mail use the paperclip icon) to: reportphishing@apple.com then delete it.


If this is with regard to a supposed purchase, this Apple article has relevant information and web links for checking if you really have made a purchase or paid for a subscription: If you see ‘itunes.com/bill‘ or an unfamiliar charge on your bank, credit card, or debit statement - Purchases made under Family Sharing might be charged to the organizer's card but will not appear under the organizer's purchase history or subscriptions. Ask family members about those or check your receipts. --> If you see 'apple.com/bill' on your billing statement - Apple Support Apple will email a receipt to the Family Organizer if a purchase is made on a card held by the Family Organizer. This will have the Apple ID of the purchaser, which you should recognize, but won't have specific about what was purchased.






Similar questions

238 replies

Feb 5, 2025 8:44 AM in response to Hepzi

Hepzi wrote:

Please please make it easier to get Apple support for fraudulent activity!! It is an amazing baffle to get support at all thru Apple. And if Apple wants to stay in quasi banking business, you really need to up your game on fraudulent activity support. Amazing naivety and stupidity on Apples part….


Anybody that claims to offer scam-prevention services is quite possibly scamming you, and anybody claiming to help you recover money lost in a previous scam is likely scamming you.


And if you did get scammed, ~nobody will offer a refund, as that would result in fake scams scamming for refunds.


As mentioned, silence unknown texts, and/or use an app such as Bouncer to reduce the chatter.


Sending telephone numbers, sending text numbers, and sending email addresses can all be faked, too. This arising from the same reason why blocking scam-related numbers and services that claim to block those numbers doesn’t work.


If you can figure out a why how to reduce these scams, do let everybody know.


And no, licenses and submitting identify proof won’t work, and will backfire. It results in zillions of systems with sensitive info everywhere; a phisher’s dream situation. Yes, it’s been tried.

Feb 18, 2025 6:53 AM in response to Heaven11-1

Heaven11-1 wrote:

What if I stupidly gave them my first and last name but then hung up


There is nothing you can do about that now.


They do have first and last name associated with an active telephone number (obviously), and they also have somebody willing to engage with them; with spammers and phishers. Which usually means more spam and more phishing.


That previous engagement combined with changes happening In the US including the reduction or removal of consumer protections and reductions and removal of enforcement and investigators, means the numbers and brazenness of spam, scams, and phishing that you (and the rest of us) will be receiving is likely to only increase, too.

Mar 24, 2025 10:56 AM in response to JustMeinSD

JustMeinSD wrote:

🚩🚩🚩It is 3/24/25 and it must be going around again ..,



It’s still going around. It hasn’t stopped.


This and related scams have been going for a very long time, and it and its descendants will be going for the foreseeable future. Decades or more ahead, as this and similar scams are adjusted and tweaked to tune profits, and as new scams are created and tested.


Unfortunately too, the scammers are clearly adding new recipients, meaning this and other scams are continuing to propagate.



Jul 3, 2025 9:38 AM in response to RooC9

I received the same fraudulent text message this morning for a suspicious charge of 143.95. I have never used apple pay. I don't understand why these bad actors can't be stopped. Charged with the crime and go through the crimminal process . It's just getting worse all over. If these folks can steal titles from homeowners and get a way with it, hold businneses hostage until ransoms are paid, and on and on. this world is in a mess.

Jul 3, 2025 9:49 AM in response to Oceans47

Oceans47 wrote:

I received the same fraudulent text message this morning for a suspicious charge of 143.95. I have never used apple pay. I don't understand why these bad actors can't be stopped.

For the same reasons we still have muggers, drug dealers and shoplifters. It's even harder with these digital criminals because they are frequently in other countries.

Charged with the crime and go through the crimminal process.

Who are they going to charge? Who is going to do the charging? Which country?

If these folks can steal titles from homeowners and get a way with it, hold businneses hostage until ransoms are paid, and on and on.

That's a very different type of crime. Work with your local officials to put systems in place to make it more difficult to change a title (my city has done this). If you will be away from your house for an extended time, have a friend or relative make sure it stays looking lived in.

this world is in a mess.

I agree. But spam texts are so far down the list of things that are wrong.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Identifying Phishing Scams in text messages

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.