Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Apple Store Purchase Confirmation Phishing Scams
Apple Store Purchase Confirmation Phishing Scams

The email messages below which claim that you have ordered items from the Apple store are phishing or fake email messages sent by cyber-criminals to steal your Apple account username, password, financial and personal information. Remember, never click on a link in an email message or respond to an email message with your personal or financial information. Please see more samples of the phishing email messages in the comment section below.

The Fake Apple or Phishing Email Messages

You've bought a game "Nature Calling" from the Apple Store.

It may take a few moments for this transaction to appear in your account.

If you have not authorized this charge, log in as soon as possible to cancel the payment!

Apple Store Transaction Cancellation Form


When the payment will be canceled you will get a full refund.

Apple Store United Kingdom

Apple Store Purchase Confirmation

Thank you for purchasing the following item: TomTom

Order Number:

Receipt Date 29/12/2014

Order total GBP $4.99

Tranaction Cancellation Form

Confirm your personal and billing information in order to cancel the transaction

Although, the email messages appear as if they came from Apple, they were not. So, ensure that you never click on a link in an email message to sign into your Apple account or respond to emails like the ones above with your personal or financial information.

Only sign into your Apple account, confirm or update your information using following link:
https://appleid.apple.com/

The phishing scam is similar to:

102

Comment sectionComments / Answers (102)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 102

by an anonymous user from: Portland, Maine, United States

"Reminder : 【 E-Payment Receipt 】 your order has been success 【 Payment Information 】 Transaction has been Approved on : 09/03/2020. [FWD]
Thank You.
Please update your account payment if you dont buy anything on this application. Your billing setup could not be completed. More information please click our document.

Order Number : E-03669859
Order Date : Thursday, 3 September 2020 [EDT]

Item Price

VIP SMULE MAGIC (1 Month All Access Pass) $ 21.76

Tax: $ 0.00
Total: $ 21.76

Payment Method:
Card/Credit Card"

I have NO idea what Smule Magic is. Looked it up and I would never purchase a singing app. Checking my bank account.

Delete


by an anonymous user from: Raleigh, North Carolina, United States

I'm a Samsung user. Ignore, delete this purchase email with Adobe receipt? I don't have an Apple account.
Thoughts?

Delete


by an anonymous user from: Sydney, New South Wales, Australia

I got this one "Thanks ! Your Purchase of "Pathfinder Adventures" has been Paid on Tuesday, January 21, 2020 !
Open attached file to view your Purchase, manage or cancel your orders.

Delete


by info

"Hello. I have gotten a few of these emails. I didn't know what to do until I searched for it and clicked on the link. I will also be contacting Apple about this. I don't have an Apple account with them.
Asphalt 8 - Airbone #418238121.pdf 121 KB
Receipt-PokemonGO.pdf 42 KB
E-Receipt.January 4, 20.docx 47 KB"

Received via email.

Delete


by an anonymous user from: Milwaukee, Wisconsin, United States

I received the following email message which I believe is fraudulent, since I have not ordered anything recently from you.

We notify you of some one hαs been login α new device for α using your αccount.
thαt someone hαs used your Aρρ Store αccount for suspicious Trαnsαctions,

Trαnsαctions detαils :
Dαte αnd Time : 12/2/2019 5:44:01 PM.
Order number : #AP3PXD517F
Stαtus : in-Processing
Pαyment : CreditCαrd
Order Totαl : $66.06

Please email me at paul.rauterberg-att.net and tell me what, if anything, to do!

Delete



by an anonymous user from: Warminster, Pennsylvania, United States

This is the message I just received.

"We accepted your payment purchase 'Storage 5TB Plan ' on July 21 , 2019.

To view your orders, manage or request a cancellation, please download and open the attached PDF file.
As always, customer service is our number one priority.

If you have any questions or comments, please visit our support site."

I didn't open it or click on the link.

Delete


by an anonymous user from: Romeoville, Illinois, United States

"We accepted your payment purchase 'Villagers & Heroes' on July 10, 2019.

To view your orders, manage or request a cancellation, please download and open the attached PDF file.
As always, customer service is our number one priority.
If you have any questions or comments, please visit our support site.

Regards"

Received email on 7-10-19. I never ordered this game.

Delete


by an anonymous user from: Newark, New Jersey, United States

Just received a confirmation of an apple purchase for "Asphalt Extreme". A game when I don't play any games, so it's a fake.

Delete


by an anonymous user from: Venice, Florida, United States

Just received an Apple ID Summary
Terms of Sale
Privacy Policy
Copyright 2019 Apple Inc.
1 Infinite Loop
Cupertino, Ca 95014
Looks like an itune purchase for 39.99
Did not order

Delete


by an anonymous user from: Birmingham, Alabama, United States

Just received email showing I owed $54.30 for In-App Purchase. Looked legit but instructed to click on "Payment Resolution" link if I did not authorize the purchase. I deleted the email without clicking on anything.

Delete


by an anonymous user from: Caldwell, Kansas, United States

We just received an email saying we'd purchased an Ipad game for $59. All looked legit, until when clicking on the sign-in to Apple through the email, it asked for all our personal info plus credit card number and phone number, to cancel the order.

But I hadn't said anything about cancelling the order. Then I couldn't click out of that screen, so just deleted the whole email, assuming it was a scam. Scary!

Delete


by info

Here is another scam:

----- Original Message -----
From: Apple Support
To: orders-appstores.com
Sent: Monday, October 29, 2018 3:33 PM
Subject: RE : [ Thanks for order ] [ Mobile-Legend 500Diamond ] We are processing the order . Monday October29, 2018

Your AppleID just made an order item from App Store,please visit the attachment

Delete


by an anonymous user from: Cape Breton, Nova Scotia, Canada

FYI: Unfortunately I opened the email, then click on the attachment, on my iPhone. Immediately, but not soon enough I think, I deleted the email out of the delete file and turned off my phone. Also received the same email on my main computer, there I immediately deleted the email and then deleted it out of the delete file. Hopefully did not get a virus on my iPhone from investigating the email. Yikes!!

Delete


by an anonymous user from: Brandon, Florida, United States

Lookout for this e-mail scram: I don't even have an Apple or icloud acct. HA!!

"Apple
Subscription Confirmation

Premium Premium

InstaSize

Premium (1 month) Free Trial

Dear teguh-icloud.com,

You’ve purchased the following subscription with a 1 week free trial:

Subscription Premium App
InstaSize: Photo Editor, Picture Effects & Collage
Content Provider
Munkee Apps L.L.C.
Date of Purchase
November 02, 2018
Duration 1 month Trial Duration 1 week

Price $89.99
Payment Method

You won’t be charged for your free trial. Once it ends, your subscription will renew at $89.99 unless you cancel by Nov 02, 2019.

To learn more or cancel, review your subscription.

Regards,
The App Store team
For answers to frequently asked questions, visit Apple Support.
Privacy: We use a Subscriber ID to provide reports to developers.
AppleApple
Apple ID Summary • Terms of Sale • Privacy Policy
Copyright © 2017 Apple Inc.,
All rights reserved"

Delete


by an anonymous user from: New York, United States

I Keep on getting these kind of emails, it starts last September 6 when I receive the first email.

it says that I bought something from Apple App Store and all of purchase cost $99.99.

I already click the cancel button but it put me to unknown site.
I don't put anything on it.

am I already scammed? :(

Delete


by info

No, only if you enter your username, password and personal information.

Delete


by an anonymous user from: Montreal, Quebec, Canada

Sep. 25 2018, I received an Email from AppStore about a purchase made by Rhonda Lanyon.
I never made this purchase.
What do I have to do to cancel this purchase?

Delete


by an anonymous user from: Seattle, Washington, United States

It is a scam. I got the same email and actually called Rhonda Lanyon. Her voice mail said please don't leave a message regarding Apple purchase as it is a scam.

Do not cancel because there is nothing to cancel. Hover over the email address and you will see that it is NOT from Apple and it is part of a phishing/scam. DELETE.

Delete


by info

The email is a fake.

Delete


by an anonymous user from: Dover, Pennsylvania, United States

I keep getting these also!

Delete


by an anonymous user from: Winnipeg, Manitoba, Canada

APPLE CONFIRMATION ID: appleaszxx213.te21tytnz-com-buying-appstoreeid-7883.com


I think this is not a legitimate Apple website or email address. When I copied the email address and searched for it, it doesn't go the Apple website. This is a fraud I believe but please help me decipher this.

The email has an attached receipt dated Aug. 31, 2018 which shows that I purchased iCloud 800 GB Storage Plan for $91.99 and I didn't purchase any and I am not using iPad anymore or any iPhone.

Delete


by info

It is a scam, just ignore it.

Delete


by an anonymous user from: Seattle, Washington, United States

Received email:

"Thanking you for your order. Order nbr: K24692874. $100.00 app store & iTunes Gift Card -$100.
If you did not authorize this purchase, report this problem and make a transaction report in "REPORT TRANSACTIONS"

Verified that no one in my family had purchased an iTunes gift card.

I pressed the report transactions space on email. Next up popped a message from Window Defender Smart Screen with the message: This website has been reported as unsafe. We recommend that you do not continue to this website. Phishing Threat
website: storeappid-appserveirc.tahugejrot.net.

Tried looking up this website on google and no valid website came up.
Mike McDowell
Seattle, WA
mtmcdowell-hotmail.com (don't know how they found my email address.

Delete


by an anonymous user from: Totowa, New Jersey, United States

mail-id.purchaseapple.com

Received this- looks phishy
Deleted email
Be on the lookout

Be careful out there😊

Delete


by an anonymous user from: Mexico City, Mexico

I received a mail with a word document attached in which they said I purchase (from another computer) FIFA points. Should I open it? Here below is the mail who send me this:
app-fockerz.cintaditolakdukun bertindak22048-app-storepaymentorder.com

For me looks suspicious.

Delete


by info

The email address is a fake, so do not open the attachment because it may be malicious.

Delete


by an anonymous user from: Whitchurch, England, United Kingdom

I stupidly clicked on the link but did not go any further. I did not give any details or information. Have I inadvertently allowed hackers access? What can I expect?

Delete


by info

No, you are OK as long as you didn't submit your information or attempt to sign into the page that you were taken to.

Delete


by an anonymous user from: San Francisco, California, United States

Received this:

"Your receipt from Apple

Receipt

APPLE ID
BILLED TO
DATE Store Credit
Rhonda Lanyon TOTAL

Jun 22, 2018
210 smith st apt11 $99.99

ORDER ID DOCUMENT NO. Lowell, MA 01851-3829
USA
MMYX5D9MT8 119204351845

App Store TYPE PURCHASED FROM PRICE
DomiNations, In-App
Mountain of Crowns iPhone $99.99
Purchase
Report a Problem
Subtotal $99.99
Tax $0.00

TOTAL $99.99

If you didn't make this purchase or if you believe an unauthorized person is attempting to access

your account, Click Here to cancel your purchase.

Get help with subscriptions and purchases. Visit Apple Support. Learn how to manage your password preferences for iTunes, iBooks, and App Store purchases.

Apple ID Summary • Terms of Sale • Privacy Policy

Copyright © 2018 Apple Inc.

All rights reserved"

Delete


by an anonymous user from: Plano, Texas, United States

I just received the following email:

"Apple Invoice
Thank you for buying BILLED TO
Apple Store TOTAL
$55.00
INVOICE DATE
6/12/2018
ORDER ID
M2MNSYJ056 DOCUMENT NO.
175116838085
App Store TYPE PURCHASED FROM PRICE
2,500 Diamonds, Mobile Legends Mobile Legends, 2,500 Diamonds
Cancel Purchase Purchase In-App iPhone $55.00
TOTAL $55.00
If you did not authorize this purchase, please visit
iTunes Payment Cancellation Form

Apple ID Summary Purchase History Terms of Sale Privacy Policy
Copyright 2018 iTunes
All rights reserved

The reply URL was "hxxp://go2l.ink/sfdhsdjsdf"

Is this a scam, or is something else goind on?

Delete


by info

It is a scam.

Delete


by an anonymous user from: Worcester, Massachusetts, United States

I just received a notice from 191.154.81.22 reporting suspicious activity on my apple account. The notice said that I have 24 hours to respond before cancellation of the sale would be void. Did you send me this notice?

Delete


by info

It seems to be a phishing scam similar to the ones and a lot of people have been receiving.

To verify, sign into your iTunes account and check for the alleged purchase. If there is none, then the email is a phishing scam.

Delete


by an anonymous user from: Winnipeg, Manitoba, Canada

just got the email scam for Mobile Legends however I don't have an apple account so how would I ever have purchasesd this plus does this mean they have my credit card info or they are hoping I will respond with that info.

Delete


by info

The cyber criminals have a list of email addresses that they have stolen. They send their scams to all the email addresses on the list because they do not know who is an Apple customer and who is not.

They do this knowing some of the recipients maybe Apple customers who will anxiously click the link, which will take them to a phishing website.

Delete


by an anonymous user from: Osgood, Ohio, United States

What do I do since I clicked on the link in the phishing email...I didn't type in any of my personal info, but I did click on the link.

Delete


by an anonymous user from: Washington, District of Columbia, United States

Another example...didn’t even spell check...

"Reminder : [ Update Purchese Subscription ] Confirmation Order From Apple Store [ Status Paid ] #29125215

Dеаr Customer
Wе nоtіfу уоu оf уоur сurrеnt Τrаnѕасtіоn ( Ρауmеnt ID: АΡЅ-849285018F1S69),
thаt ѕоmеоnе hаѕ uѕеd уоur іСlоud ассоunt fоr ѕuѕрісіоuѕ Τrаnѕасtіоnѕ, Τrаnѕасtіоnѕ dеtаіlѕ :

Dаtе аnd Τіmе : 02 Mei,2018
Itеmѕ : GTA ( Game )
Οrdеr numbеr: АΡЅ-182738718А8R78
Ρауmеnt : СrеdіtСаrd
Οrdег Τоtаl: $ $107.99
whаt tо dо nеxt ?
The summary is attached in PDF format in this email."

Τhаnks.

Delete


by info

Here is another scam:

"From: Apple Support
Sent: Tuesday, May 1, 2018 2:39 PM
To: support-apple.com
Subject: #Alert : [ New ] [ Reminder ] You Have New Purchase Order Billing ID Invoice [532091] Need Confirmation

Dear Customer,

New Order Will Be Shipped Tomorrow But We Got Verify its You Make A Order,
Login New Device and Make Order

You have Detail Invoice In Attachment Please Confirmation To Re-Active Your Order

Please Verify If you did not Make this Order, please Do Not Reply this message

-Copyright 2018 Apple Service. All rights reserved."

Delete


by info

Here is another scam:

----- Forwarded Message -----
From: AppIe Receipt
Sent: Tuesday, March 6, 2018, 11:37:10 AM GMT 7
Subject: NOTICE: Thanks For Choosing NOAA Weather Radar Premium (3 months)

Dear Customer,

You won't be charged for your free trial. Once it ends, your subscription will renew at $100.00 unless you cancel by Maret 6, 2018.

Your order has been created and the lnvoice pdf. is attachment in this email.

Subscription Confirmation
NOAA Weather Radar
Premium (3 months)

Dear Customer ,

You've purchased the following subscription with a 3 month :
Subscription Premium

App NOAA Weather Radar - Weather Forecast & HD Radar

Content Provider IAC Search & Media Europe Ltd.

Date of Purchase Maret 6, 2018

Duration 3 months
Trial Duration 1 month
Price $100.00

Payment Method Credit Card

You won't be charged for your free trial. Once it ends, your subscription will renew at
$100.00 unless you cancel by Maret 6, 2018.

Check Subscription Conirmation

You can always use our app to get easy access to your Apple account information, or
use it as an electronic purchased confirmation instead of printing the attached PDF file.

Sincerely,
Apple
Apple respects your privacy.
Information regarding your personal information can be viewed
Copyright ©2018 Apple Inc. All rights reserved"

Delete


by an anonymous user from: Reading, England, United Kingdom

Here is another scam:

"From: App Store
Sent: 20 February 2018 07:06
To: support-itunes.com
Subject: Successfully Purchase iCloud: 8 TB Storage Plan

Thanks for updating your subscription
Subscription will renew on : Feb 20, 2018

We hase sent attachments or receipts [PDF].

Please click on cancel if you have never made this purchase if you do not confirm whitin 24 hours, your purchase can not be canceled again.

App Store Team"

Delete


by an anonymous user from: Fallon, Nevada, United States

I just received this email:

"Apple Subscription Confirmation
Tinder Plus
Tinder
Tinder Plus (1 year)
$54.99

Dear
This email confirms your subscription purchase:
Subscription Tinder Plus
App Tinder
Content Provider Tinder Inc.
Date of Purchase Feb 16, 2018
Price $54.99/year
Payment Method Credit Card
Your subscription will renew at $54.99 unless you cancel by Feb 18 2018.
If you believe someone has used your account without your permission, Please click button below :

Cancel / Refund Subscription

Regards,
The App Store Team
For answers to frequently asked questions, visit Apple Support.
Apple
Apple ID Summary • Terms of Sale • Privacy Policy
Copyright © 2018 Apple Inc.,"

Delete


by an anonymous user from: Chicago, Illinois, United States

I just received this notice:

"Suspicius Payment received
Your payment of $100.00 was applied to Space Qube on Feb 07, 2018.
Invoice number: 3380215917
Order number: HY09YUOG87
Total order amount: $ 35.99
IP address: 191.154.81.22
Location: Valencia, Carabobo, Venezuela
Browser: Mozilla Firefox 6.0
Platform: KalI Linux 2.0

We recommended you to open our attached message for Report Current Transactions,
You have 24 hours to cancel the order, We will not accept the cancellation of your order if it passes the specified time limit.
HELP CENTER CONTACT US

Apple respects your privacy.
Information regarding your personal information can be viewed at https :// apple. com/support/itunes/store/"

Delete


by info

Here is another scam:

"Från: App Store
Skickat: den 8 februari 2018 00:58
Till: support-itunes.com
Ämne: Successfully purchase iCloud 8 TB Storage Plan

Thanks for updating your subscription

Subscription will renew on : Feb 07, 2018
We hase sent attachments or receipts [PDF].

Please click on cancel if you have never made this purchase if you do not confirm whitin 24 hours, your purchase can not be canceled again.

App Store Team"

Delete


by an anonymous user from: Brandon, Florida, United States

what to do if I clicked then opened iTunes to check if orded not there but did not google first

Delete


by info

If you attempted to sign into the page you were taken to after clicking the link, change your password. Else, just delete the message.

Delete


by an anonymous user from: Iloilo City, Western Visayas, Philippines

Just received a message stating that I've purchased Space Qube x total of $101.99 with the order number of MHDH6YMK37

Delete


by an anonymous user from: Brisbane, Queensland, Australia

Here is one I got today - I am an Android man, don't even use Apple anywhere!!

"АppIeID Sυbscriрtions
[bigoaccountconfirmation.dont-reply60-czwebsappsrefundorders7-jsb7hd.info]

BIGO LIVE - Live Streaming

The purchase of 2552 diamonds has been successful
Date of receipt: January 20, 2018
Order id: MQXVW3XH22
Order balance: $89.99

We believe that someone is trying to make a purchase without your permission.
We have sent attachments or receipts [PDF]."

Delete


by an anonymous user from: Quezon City, National Capital Region, Philippines

Here is another scam:

"[Action Required] : Your Apple ID Has Been Locked for Security Reason3
Yahoo/Inbox

Apple ID
To:felipe_alicia-yahoo.com
Jan 19 at 3:22 PM
Apple Store

[Billing Fraud] Apple Store Recently Purchase Confirmation

for purchasing the following item : Space Qube X

Order Number : MHDH6YMK37
Order Total : $101.99

- if you initiated this download , you can disregard this email , it was only sent to alert you in case you did not initiate the download yourself
- if you did not initiate this download , please cancel the transaction this purchase

To cancel this purchase Read your secure message by opening the attacment (pdf). you will be prompted to open (view) the file or save (download) it to your computer. for best results, save the file first, then open it in a Web browser.


Sincerely

Apple Support

Apple_Case.pdf 46.2kB"

Delete


by an anonymous user from: Ashburn, Virginia, United States

"Apple Store

[Billing Fraud] Apple Store Recently Purchase Confirmation

for purchasing the following item : Space Qube X

Order Number : MHDH6YMK37
Order Total : $101.99

- if you initiated this download , you can disregard this email , it was only sent to alert you in case you did not initiate the download yourself
- if you did not initiate this download , please cancel the transaction this purchase

To cancel this purchase Read your secure message by opening the attacment (pdf). you will be prompted to open (view) the file or save (download) it to your computer. for best results, save the file first, then open it in a Web browser.

Sincerely
Apple Support"


This was sent to me along with an attachment to log in Apple website, though I did not log in because I’m a very observant person. This email didn’t look like it was sent from Apple like the rest of Apple emails I’ve seen in the past. Just wanted to share some information so pls don’t log into that fake site.

Delete


by an anonymous user from: San Fernando, Central Luzon, Philippines

I got that too today:

"Apple Store

[Billing Fraud] Apple Store Recently Purchase Confirmation

for purchasing the following item : Space Qube X

Order Number : MHDH6YMK37
Order Total : $101.99

- if you initiated this download , you can disregard this email , it was only sent to alert you in case you did not initiate the download yourself
- if you did not initiate this download , please cancel the transaction this purchase

To cancel this purchase Read your secure message by opening the attacment (pdf). you will be prompted to open (view) the file or save (download) it to your computer. for best results, save the file first, then open it in a Web browser.

Sincerely

Apple Support"

Delete


waiting