Apple scam messages: how to spot a fake

In short

Most common fake: Fake App Store or Apple Music receipts for purchases you did not make.

Safest check: Check purchases and account details in Settings on your iPhone or iPad, or sign in at account.apple.com yourself.

Where to report it: Forward suspicious emails, or screenshots of suspicious texts, to reportphishing@apple.com.

Example · fake Apple messageIllustrative, links disabled

Apple: Your Apple Account has been locked for security reasons. Verify your details within 24 hours to avoid losing access: apple-id-unlock[.]support/verify

What Apple says

Apple says it will never ask for your password, device passcode or two-factor authentication code, and will never ask you to enter them on a website. It also says it will never ask you to turn off any security feature on your device or account. Source: Apple

Common fake Apple messages

These are the 5 shapes a fake Apple message usually takes. They are listed in the order we see them most often, and none of them is something Apple itself does.

Fake App Store or Apple Music receipts for purchases you did not make
Pop-ups falsely warning that your device has a security problem
Unexpected calls from people claiming to be Apple Support
Fake promotions offering free Apple products
Messages with links asking you to update your Apple Account details

Apple's real web addresses

Genuine Apple links and emails use these domains. Look at the part just before the first single slash: apple.com is real, but apple-support-center.com or apple.com.account-check.top are not.

apple.com
icloud.com

Scammers can also hide a fake link behind real-looking text. Learn how to read a web address.

How to check a Apple message safely

Check purchases and account details in Settings on your iPhone or iPad, or sign in at account.apple.com yourself
Genuine App Store receipts include your current billing address, which scammers are unlikely to have
Check that the link address matches Apple's real website before tapping it
If you get an unexpected call claiming to be Apple Support, hang up and contact Apple directly

How to report a fake Apple message

Forward suspicious emails, or screenshots of suspicious texts, to reportphishing@apple.com. Official details on support.apple.com
In the Messages app, tap Report Junk under a suspicious message. Official details on support.apple.com

Also report it to the official fraud service in your country. See the worldwide list.

If you clicked, paid or shared details

Act quickly. It makes a difference.

If you entered card or bank details, call your bank now using the number on your card, and ask them to block the card.
If you entered a password, change it at apple.com, typed into your browser yourself, and turn on two-step verification. Do not use any link from the message.
Expect follow-up calls or messages pretending to help, sometimes claiming to be from Apple security. Never share one-time codes and never move money to a "safe account".
Forward suspicious emails, or screenshots of suspicious texts, to reportphishing@apple.com, then delete the message.

More help: Phishing links and fake login pages and what to do after a scam.

How to protect yourself next time

Use a password manager

It only fills in your password on the real website, so a look-alike login page gets nothing. It also makes a different password for every account, so one leak doesn't open the rest.

Free: Bitwarden has a free plan, and even the password manager built into your phone or browser beats reusing one password everywhere.

NordPass Partner link Password manager with a free plan and a family plan for up to six people.

Turn on two-step verification, ideally with a security key

With two-step verification, a stolen password isn't enough on its own. A hardware security key goes further: it simply doesn't work on a fake site, so it can't be phished.

Free: Two-step verification is free. Switch it on in the security settings of your email, bank, WhatsApp and social media accounts today.

YubiKey (Yubico) Partner link A small USB or NFC key you tap when you log in. It will not work on a fake site.

Compare the tools that help, and what each costs

Links marked Partner link may earn us a commission, at no cost to you. It never changes our advice, and the free option always comes first. Affiliate disclosure.

Questions people ask

Does Apple send messages asking for payment or personal details?

How can I check if a Apple message is real?

Check purchases and account details in Settings on your iPhone or iPad, or sign in at account.apple.com yourself. Genuine App Store receipts include your current billing address, which scammers are unlikely to have. Check that the link address matches Apple's real website before tapping it. If you get an unexpected call claiming to be Apple Support, hang up and contact Apple directly.

How do I report a fake Apple message?

Forward suspicious emails, or screenshots of suspicious texts, to reportphishing@apple.com. In the Messages app, tap Report Junk under a suspicious message.

I clicked a link in a fake Apple message but did not enter anything. Am I at risk?

Opening a link is far less serious than filling one in. Close it, and if you need your account, reach it by typing apple.com yourself. Clicking does tell the sender your number is live, so expect more messages for a while: forward suspicious emails, or screenshots of suspicious texts, to reportphishing@apple.com.

Was this page helpful?

Have you had this one?

Tell other people what the message said and how it reached you. It helps someone recognise it before they tap.

Official sources and further reading

We check our pages against official advice from the organisations themselves and from government agencies.