Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

Apple iTunes Store Order Receipt Refund Request Phishing Emails

Apple customers are asked to be aware of fraudulent refund request email messages (see sample below), claiming that someone is trying to or have made purchases using their accounts. The fake email messages were sent by scammers to frighten and trick the recipients into clicking on the links within them by claiming they need to do so in order to cancel the purchases and get a refund. But, once the recipients click on the link, they will be taken to phishing website that steals personal, financial, and Apple credentials (usernames and passwords).

Advertisements

Therefore, Apple customers who have received email invoices appearing as if they were sent from Apple, should avoid clicking on the links in them. They should instead, sign directly into the iTunes Store on their iPhone, iPad, iPod touch, Mac, PC, or Apple TV and check their accounts.

A Sample of the Fraudulent Apple Store Refund Request Emails

From: "iTunes Store" ID-18998@store.apple.com
Subject: Order Receipt No. 31637629
Date: Mon, Nov 21, 2016 2:06 PM

Apple Store Refund Request #51925100.

We suspect that someone is trying to use your account. Confirm your personal and billing information in order to cancel the transaction above: I acknowledge that if I download this app within fourteen days of tapping, Buy I will no longer de eligible to cancel this purchase The subscription period will automatically renew unless you turn it off no longer than 24 hours before the end of the current period. To cancel auto-renewal or manage your subscriptions, click bellow and sign in.

https://support.apple.com/HT204030.

Case ID: #51925100

Sincerely,

Apple Support

Apple users who have been tricked by the fraudulent refund request email messages should change their Apple password and contact Apple Support for help.

Remember, the best protection against phishing scams is to avoid clicking on links in email messages, social media messages and text messages to sign into online accounts. Going directly to your online account’ service provider websites or using a legitimate app to sign into your online accounts will prevent you for falling victims to phishing scams that steal personal , financial and account credentials.

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (4)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)