Beware of "Invoice Payment and AppleID Disable" Phishing Scams

Updated: August 2, 2017 2017-08-02T14:33:35 - Posted: August 1, 2017 2017-08-01T14:17:40 - Views: 406 - Comments: 1 +

Donate

The fake email message below which claims that the recipients' Apple IDs have been disabled because they have made a lot of purchases from the App Store is a phishing scam. The fake email has links in it that go to a phishing Apple website which steals account usernames and password. The phishing website steals account credentials by asking visitors to sign-in with their Apple account usernames and passwords. Now, any attempt to sign into the fake or phishing website will result in the visitors’ Apple account credentials being sent to the cybercriminals responsible for the scam. Once the cyber crooks have gotten possession of the stolen account credentials, they will use it to hijack their victims’ Apple accounts and use the same accounts fraudulently.

Please continue reading below.

A Sample of the "Invoice Payment and AppleID Disable" Phishing Scam

From: Order Confirmation <no_reply@fraud-account-service.com>

Sent: Wednesday, August 2, 2017 11:23 AM

Subject: [New Statement Update] : Invoice Payment AppleID Disable

Apple Invoice

Thank you for buying BILLED TO Apple Store TOTAL $49.99

INVOICE DATE 30 JUL 2017

ORDER ID M2MNSYJ056 DOCUMENT NO. 175116838085

App Store TYPE PURCHASED FROM PRICE

Clash of Clans, Box of Gems Clash of Clans, Box of Gems

Report Problems Purchase In-App iPhone $49.99

TOTAL $49.99

You have purchased many gems until your AppleID account is disabled. please login to verify that this is you or not and login and verify to open your appleid account

Apple users should never click on a link in an email message to sign into their accounts. They should instead, go directly to https://appleid.apple.com/ and sign-in from there. If there is something wrong with their accounts, they will be alerted after signing in. Users who were tricked by the phishing scam, are asked to change their Apple account passwords immediately before their accounts are hijacked and used fraudulently. For those users who are unable to change their passwords, are asked to contact Apple Technical Support for help.

Please share what you know or ask a question about this article by leaving a comment below. Also, check the comment section below for additional information, if there is any.

Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com

Also, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent.

If you want to quickly find answers to your questions, use our search engine.

Remember to help us, help you, by donating. 🎁Click here to donate

Please continue reading below.

Comments, Questions and Reviews ✍

(Total: 1)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews.

Show More of the 1 Comments

Show all

Write Your Comment, Question or Review

Write your comment, question or review in the box below to share what you know or to get answers. Please revisit after an hour or more to view reponses or answers to you questions.

Your comment, question or review will be posted as an anonymous user because you are not signed in. Sign-in.

The comments or reviews below do not necessarily reflect the views of Online Threat Alerts.

Posted: May 10, 2018 at 10:57 PM by an anonymous user from or near: Chattanooga, Tennessee, United States
I received a similar message yesterday on May 9. I am reporting this because I had reset my password on May 8. In the message I had 24 hrs to cancel the monthly payment of $45.00 to Spotify Premium.

I know I did not order this and I do not know anything about Spotify Premium. I believe this is fraudulent. I will forward the message to the email address listed in the above info.
delete