In short
Apple says it will never ask for your password, device passcode or two-factor authentication code, and will never ask you to enter them on a website. It also says it will never ask you to turn off any security feature on your device or account.
Most common fake: Fake App Store or Apple Music receipts for purchases you did not make.
Safest check: Check purchases and account details in Settings on your iPhone or iPad, or sign in at account.apple.com yourself.
What Apple says
Apple says it will never ask for your password, device passcode or two-factor authentication code, and will never ask you to enter them on a website. It also says it will never ask you to turn off any security feature on your device or account. Source: Apple
Common fake Apple messages
- Fake App Store or Apple Music receipts for purchases you did not make
- Pop-ups falsely warning that your device has a security problem
- Unexpected calls from people claiming to be Apple Support
- Fake promotions offering free Apple products
- Messages with links asking you to update your Apple Account details
Apple's real web addresses
Genuine Apple links and emails use these domains. Look at the part just before the first single slash: apple.com is real, but apple-support-center.com or apple.com.account-check.top are not.
- apple.com
- icloud.com
Scammers can also hide a fake link behind real-looking text. Learn how to read a web address.
How to check a Apple message safely
- Check purchases and account details in Settings on your iPhone or iPad, or sign in at account.apple.com yourself
- Genuine App Store receipts include your current billing address, which scammers are unlikely to have
- Check that the link address matches Apple's real website before tapping it
- If you get an unexpected call claiming to be Apple Support, hang up and contact Apple directly
How to report a fake Apple message
- Forward suspicious emails, or screenshots of suspicious texts, to reportphishing@apple.com. Official details on support.apple.com
- In the Messages app, tap Report Junk under a suspicious message. Official details on support.apple.com
Also report it to the official fraud service in your country. See the worldwide list.
If you clicked, paid or shared details
Act quickly. It makes a difference.
- If you entered card or bank details, call your bank now using the number on your card, and ask them to block the card.
- If you entered a password, change it on the real Apple website or app and turn on two-step verification.
- Expect follow-up calls or messages pretending to help. Never share one-time codes or move money to a "safe account".
- Report the scam, then delete the message.
More help: Phishing links and fake login pages and what to do after a scam.
Questions people ask
Does Apple send messages asking for payment or personal details?
Apple says it will never ask for your password, device passcode or two-factor authentication code, and will never ask you to enter them on a website. It also says it will never ask you to turn off any security feature on your device or account.
How can I check if a Apple message is real?
Check purchases and account details in Settings on your iPhone or iPad, or sign in at account.apple.com yourself. Genuine App Store receipts include your current billing address, which scammers are unlikely to have. Check that the link address matches Apple's real website before tapping it. If you get an unexpected call claiming to be Apple Support, hang up and contact Apple directly.
How do I report a fake Apple message?
Forward suspicious emails, or screenshots of suspicious texts, to reportphishing@apple.com. In the Messages app, tap Report Junk under a suspicious message.
I clicked a link in a fake Apple message. What should I do?
Don't enter anything else. If you typed card or bank details, call your bank now using the number on your card. If you entered a password, change it on the real website and turn on two-step verification. Then report the message and delete it.
Official sources and further reading
We check our pages against official advice from the organisations themselves and from government agencies.