"iCloud Payment Cancellation" Scam

iCloud Payment Cancellation Scam

Would you share this Article with others?

Apple customers are asked to be aware of fake iCloud email invoices (see below), which claim that they have made an In-App Purchase, and if you did not authorize the purchase or payment they should click the link in it to cancel or view payment history. The fake email invoices are being sent by scammers to frighten and trick the recipients into clicking on the links within them by claiming they need to do so in order to cancel the purchases and get a refund. But, once the recipients click on the link in the fake email invoices, they will be taken to a phishing website that steals personal, financial, and Apple credentials (usernames and passwords).

Therefore, Apple customers who have received email invoices appearing as if they were sent from Apple, should avoid clicking on the links in them. They should instead, sign directly into the iTunes Store on their iPhone, iPad, iPod touch, Mac, PC, or Apple TV and check their accounts.

A Sample of an "iCloud Payment Cancellation" Phishing Scam

From: iCloud <purchases2.mail.applesupport.number-281034@noreplly.net>

Sent: Wednesday, April 4, 2018 4:59 PM

Subject: Re : Your receipt from iCloud. - [ Wednesday, April 4, 2018 ]

Dear Client.

Your iCloud has been used for In-App Purchase War Commander: Rogue Assault in the App Store from a web browser:

Date : 04 Apr 2018 6:51:39

Location : Australia

Browser : Safari 9

IP address :

Operating system : iPhone:

CPU iPhone OS 11.2.6 like Mac OS X

If the information mentioned above is familiar to you, you can ignore this message.

If you want to view your payment history or cancel your payment. Please find the PDF document attached at this email by following the instructions.

Recipients of the email voices claiming that they have ordered a product they did not, and who have clicked on the link in them, should change their Apple password and contact Apple Support for help. And, the best protection against phishing scams is to avoid clicking on links in email messages, social media messages, and text messages to sign into online accounts.

Note: Some of the names, addresses, email addresses, telephone numbers or other information in samples on this website may have been impersonated or spoofed.

Please share what you know or ask a question about this article by leaving a comment below. Check the comment section below for additional information, if there is any. Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com. And, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent. Also, to quickly find answers to your questions, use our search engine.

You can help maintain Online Threat Alerts (OTA) by paying a service fee. Click here to make payment.

Comments, Questions, Answers, or Reviews
(Total: 4)

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews.

The comments, reviews or answers below do not necessarily reflect the views of Online Threat Alerts (OTA).

  • November 21, 2018 at 5:14 AM by info

    The scammers are using this email address:

    558751634171-noreplyatuopuczanafosinterlnumber@ appsconfirmatepayment1.com


  • April 5, 2018 at 10:37 AM by info

    Here is anothers scam:

    "From: Transaction Orders <sdaewq31231312313@cadang6an.business>

    Date: March 29, 2018 at 4:16:20 PM EDT

    To: undisclosed-recipients:;

    Subject: [Summary iCloud Order]Receipt subscription renewal

    Thank you for Buying Gift Card App Store & iTunes.

    If you made this purchase, you can disregard this email.

    It was only sent to alert you in case you had not made this purchase yourself.

    If you not authorize this purchase, we recommend that you to open the [PDF]

    type attachment we sent,

    then click CANCEL ORDER. In the attachment section


    The App Store team"


  • April 4, 2018 at 4:52 PM by info

    Here is another scam:

    "Your receipt from iCloud

    Apple Support Wed, Apr 4, 2018 at 1




    Scott thomson

    6 Bronte Walk

    coventry, CV25HQ


    TOTAL $149.99

    INVOICE DATE 4 Apr 2018

    SEQUENCE NO. 1-1666526523


    DOCUMENT NO. 7384564023043


    War Commander: Rogue Assault- Bag of Gold

    Report a Problem


    Purchase iPhone $149.99

    TOTAL $149.99

    If you didn't make this purchase or if you believe an unauthorized person is attempting to access your account. click here to cancel your purchase.

    Learn how to manage your password preferences for iTunes, iBooks and App Store purchases.

    To cancel your purchase within 5 days of receiving this invoice, report a problem or contact us.

    Learn more about your right of withdrawal

    Apple ID Summary • Terms of Sale • Privacy Policy

    Copyright © 2018 Apple Distribution International

    All rights reserved

    Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Ireland VAT Reg No. IE9700053D"


  • April 4, 2018 at 4:50 PM by info

    Here is another scam:

    "From: Apple <purchases2.mail.applesupport.number-802022@applesecurity.club>

    Sent: Thursday, 5 April 2018 3:28 AM

    Subject: Re : Your receipt from Apple. - Doc. 98456432304 - [ Wednesday, April 4, 2018 ]"


 Show More Comments (4)
Write Your Comment, Question, Answer, or Review

Write your comment, question, answer, or review in the box below to share what you know or to get answers. NB: We will use your IP address to display your approximate location to other users.

Your comment, question, answer, or review will be posted as an anonymous user because you are not signed in. Anonymous posts cannot be edited or deleted. Sign-in.

"iCloud Payment Cancellation" Scam