Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

"iTunes Order Verification Request" Scams

Apple customers are asked to be aware of fake email invoices like the one below, which claim that their iTunes accounts will be rejected and locked for security reasons because of significant changes in their account activity in the AppStore. The fake email invoices are being sent by scammers to frighten and trick the recipients into clicking on the links within them by claiming they need to do so in order to cancel the purchases and get a refund. But, once the recipients click on the link in the fake email invoices, they will be taken to a phishing website that steals personal, financial, and Apple credentials (usernames and passwords).

Advertisements

Therefore, Apple customers who have received email invoices appearing as if they were sent from Apple, should avoid clicking on the links in them. They should instead, sign directly into the iTunes Store on their iPhone, iPad, iPod touch, Mac, PC, or Apple TV and check their accounts.

Sample of an "iTunes Order Verification Request" Scam

From: iTunes Store noreply.3SDE9GSFDB1XJQXABF3J @ichigofargaitgatomaranai.com

Date: October 23, 2017 at 7:27:58 PM CDT

Subject: iTunes Order Verification Request

Notice to ,

Your account will be rejected because we've noticed significant changes ln your account activity. As your payment processor, we need to understand these changes better.

This account rejected will affect your ability to:

Buy App in AppStore

Rejected Payment

Also, you won't be able to:

Login to your iCloud and iTunes

Remove credit cards

Close your account

What to do next :

Download the attachment invoice files

Open it and verify that it is a transaction you made

If not the transaction you did follow the step in the pdf file

Dear Customer,

Your Apple ID was used to sign in to iCloud website and make a payment via iTunes Store .

This is detail your activity :

item : Space Qube

Order Number : HDH6YMK37

Order Total : $334.99

IP Address : 190.153.81.31 (31.81.153.190.net-uno.net)

Location : Valencia, Carabobo, Venezuela

Browser : Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5)

Platform : MacOS

Support team detect unauthorised person has accessed your account and now your account access has been locked for security measures, you must cancel this purchase from your Apple ID account page at:

Apple iCloudX001524:2441f301c061

Recipients of the email voices claiming that they have ordered a product they did not, and who have clicked on the link in them, should change their Apple password and contact Apple Support for help. And, the best protection against phishing scams is to avoid clicking on links in email messages, social media messages, and text messages to sign into online accounts.

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (9)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)