"iTunes Order Verification Request" Scams

Comments: 9
Views: 3,027
Updated: Oct 24, 2017 2017-10-24T00:05:00
Date: Oct 24, 2017 2017-10-24T00:00:36
Save
Online Threat Alerts (OTA)

Apple customers are asked to be aware of fake email invoices like the one below, which claim that their iTunes accounts will be rejected and locked for security reasons because of significant changes in their account activity in the AppStore. The fake email invoices are being sent by scammers to frighten and trick the recipients into clicking on the links within them by claiming they need to do so in order to cancel the purchases and get a refund. But, once the recipients click on the link in the fake email invoices, they will be taken to a phishing website that steals personal, financial, and Apple credentials (usernames and passwords).

Therefore, Apple customers who have received email invoices appearing as if they were sent from Apple, should avoid clicking on the links in them. They should instead, sign directly into the iTunes Store on their iPhone, iPad, iPod touch, Mac, PC, or Apple TV and check their accounts.

Sample of an "iTunes Order Verification Request" Scam

From: iTunes Store <noreply.3SDE9GSFDB1XJQXABF3J @ichigofargaitgatomaranai.com>

Date: October 23, 2017 at 7:27:58 PM CDT

Subject: iTunes Order Verification Request

Notice to ,

Your account will be rejected because we've noticed significant changes ln your account activity. As your payment processor, we need to understand these changes better.

This account rejected will affect your ability to:

Buy App in AppStore

Rejected Payment

Also, you won't be able to:

Login to your iCloud and iTunes

Remove credit cards

Close your account

What to do next :

Download the attachment invoice files

Open it and verify that it is a transaction you made

If not the transaction you did follow the step in the pdf file

Dear Customer,

Your Apple ID was used to sign in to iCloud website and make a payment via iTunes Store .

This is detail your activity :

item : Space Qube

Order Number : HDH6YMK37

Order Total : $334.99

IP Address : 190.153.81.31 (31.81.153.190.net-uno.net)

Location : Valencia, Carabobo, Venezuela

Browser : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5)

Platform : MacOS

Support team detect unauthorised person has accessed your account and now your account access has been locked for security measures, you must cancel this purchase from your Apple ID account page at:

Apple iCloudX001524:2441f301c061

Recipients of the email voices claiming that they have ordered a product they did not, and who have clicked on the link in them, should change their Apple password and contact Apple Support for help. And, the best protection against phishing scams is to avoid clicking on links in email messages, social media messages, and text messages to sign into online accounts.

Check the comment section below for additional information, share what you know or ask a question about this article by leaving a comment below. And, to quickly find answers to your questions, use our search

engine.

Click here help maintain Online Threat Alerts (OTA).

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Would you share this article with others? +

Yes (0)
No (0)

The comments, reviews or answers below do not necessarily reflect the views of Online Threat Alerts (OTA).

May 23, 2018 at 8:37 AM by an anonymous user from: Bratislava, Bratislavský, Slovakia
Received this:
"iTunes
beloved
You purchased a Starlight member on May 23, 2018 and confirmed that if you download or use this purchase within an app within 14 days of purchase, you will no longer be able to cancel the purchase.
(CANCEL PURCHASE)
Sincerely,
App Store"
remove
February 9, 2018 at 1:22 PM by an anonymous user from: Hicksville, New York, United States
Here is another scam:
"Hello,
We need your help resolving an issue with your account, we have temporarily lock your account.
We understand it may be frustrating not to have full access to your account. We want to work with you to get your account back to normal as quickly as possible.
This account locked will affect your ability to:
Buy App in AppStore
Rejected Payment
Also, you won't be able to:
Login to your iCloud and Itunes
Remove credit cards
Close your account
What to do next :
Download and review invoice we attach
Open and read carefully
If it is not you who do purchase please follow the steps that are in the invoice
If indeed you are doing this transaction just ignore this email
If The Information Above Looks Familiar, You Can Disregard This Email."
remove
January 13, 2018 at 1:23 AM by info
Here is another scam:
"Subject: [Unrecognized Charge #Case 18732140166655740316] iTunes Order Verification Request
On Sunday, December 17, 2017, iTunes Store <no_reply.email.apple.com_mailerid_KTIC69GLBUIMIYPFKBWG.support @robot-newsletter-sender.org>
Hello,
We need your help resolving an issue with your account, we have temporarily lock your account.
We understand it may be frustrating not to have full access to your account. We want to work with you to get your account back to normal as quickly as possible.
This account locked will affect your ability to:
Buy App in AppStore
Rejected Payment
Also, you won't be able to:
Login to your iCloud and Itunes
Remove credit cards
Close your account
What to do next :
Download and review invoice we attach
Open and read carefully
If it is not you who do purchase please follow the steps that are in the invoice
If indeed you are doing this transaction just ignore this email
If The Information Above Looks Familiar, You Can Disregard This Email."
remove
January 5, 2018 at 3:05 AM by an anonymous user from: Mumbai, Maharashtra, India
Received the following scam:
"Re: [Receipt Confirmation] Thank you for order #Apple MacBook Pro Retina A1398 Intel Core i7 2.60GHz 16GB-RAM 512GB-SSD 15
AS
Apple Support <secure@accountmaiilnboxfucusedmail390628010 outlookmail.goongkontolss-2.com>
This message was moved here because you only trust email from senders in your Safe Senders list. It's not spam | Show blocked content
Confirm your payment at Apple store
Hello,
Thank you for your purchase on Apple Store at January 02, 2018.
Here Detail Info :
Seller Name : Apple Store - iTunes
Seller Email : mac-support@apple.com
Transaction ID : 01414906XS919358#4#K
Date of original transaction : January 02, 2018
Item transaction : Apple MacBook Pro Retina A1398 Intel Core i7 2.60GHz 16GB-RAM 512GB-SSD 15"
Total Transaction : $859.99 USD (This amount will billing to your account)
To protect your account, we have temporarily locked your account until you confirm this payment.
This is not you?
Please verify your identiy and confirm this payment so we can unlock your account.
To cancel this payment please enter the link below :
Cancel this Payment
If you do not make a payment, let us know right away, It's important because it helps us make sure no one is getting into your account without your knowledge.
Sincerely,
Apple Store
Help | Security | Centre
Please do not reply to this email. To get in touch with us, click Help & Contact.
Copyright © 2018 Apple Store. All rights reserved.
Apple iCloudX001524:2441f301c061"
remove
December 20, 2017 at 9:29 PM by info
Here is another scam:
"From: iTunes Store <no_reply.email.apple.com_mailerid_SFLTAT6PI5XZFLCDMEXR.support@ secured-2code-app.org>
Date: December 20, 2017 at 3:38:18 AM CST
Subject: [Unrecognized Charge #Case 11585713074312817990] iTunes Order Verification Request
Hello,
We need your help resolving an issue with your account, we have temporarily lock your account.
We understand it may be frustrating not to have full access to your account. We want to work with you to get your account back to normal as quickly as possible.
This account locked will affect your ability to:
Buy App in AppStore
Rejected Payment
Also, you won't be able to:
Login to your iCloud and Itunes
Remove credit cards
Close your account
What to do next :
Download and review invoice we attach
Open and read carefully
If it is not you who do purchase please follow the steps that are in the invoice
If indeed you are doing this transaction just ignore this email
If The Information Above Looks Familiar, You Can Disregard This Email."
remove
- January 3, 2018 at 3:30 PM by an anonymous user from: Warren, New Jersey, United States
  I got the exact same thing on Monday 01/01/18 and again today 01/03/18.
  remove
November 20, 2017 at 9:24 PM by an anonymous user from: Manchester, New Hampshire, United States
'Dear Custome
your appIeID was used sign in to lcloud website and make a payment via lTunes Store.'
Is this a scam?
"Support team detect unauthorised person has accessed you ID access has been locked for security measures you must cancel this purchase from your AppIelD account page at:
Cancel This Purchase."
remove
- November 21, 2017 at 4:05 AM by info
  Yes, it is a scam.
  remove
October 25, 2017 at 2:59 PM by info
Here is another scam:
-Original Message-
From: iTunes Store <apple-account-disable@smtp-relay51.com>
Sent: Wed, Oct 25, 2017 10:19 am
Subject: Your receipt from Apple.
Apple Receipt APPLE ID BILLED TO Apple Store TOTAL $16.28
DATE Oct 25, 2017
ORDER ID ML5Z8DT9FQ DOCUMENT NO. 160142879609 iTunes Store TYPE PURCHASED FROM PRICE
We Built This City We Built This City
Starship
Write a Review | Report a Problem Song iPhone $1.29
App Store TYPE PURCHASED FROM PRICE
Speak & Translate － Live Voice and Text Translator Speak & Translate － Live Voice and Text Translator
Apalon Apps
Write a Review | Report a Problem iOS App iPhone $14.99
Subtotal $16.28
Tax $0.00
TOTAL $16.28
If you did not authorize this purchase, please visit iTunes Payment Cancellation
Click here to Cancel Payment
Apple
Apple ID Summary • Terms of Sale • Privacy Policy
Copyright © 2016 Apple Inc.
All rights reserved
remove

Show More Comments (8)

Show all Comments

Write Your Comment, Question, Answer, or Review

NB: We will use your IP address to display your approximate location to other users.

Enter comment, review or question.

Your post will be set as an anonymous because you are not signed in. Anonymous posts cannot be edited or deleted. Sign-in.