Apple customers are asked to be aware of fake iCloud email invoices (see below), which claim that they have made an In-App Purchase, and if you did not authorize the purchase or payment they should click the link in it to cancel or view payment history. The fake email invoices are being sent by scammers to frighten and trick the recipients into clicking on the links within them by claiming they need to do so in order to cancel the purchases and get a refund. But, once the recipients click on the link in the fake email invoices, they will be taken to a phishing website that steals personal, financial, and Apple credentials (usernames and passwords).
Therefore, Apple customers who have received email invoices appearing as if they were sent from Apple, should avoid clicking on the links in them. They should instead, sign directly into the iTunes Store on their iPhone, iPad, iPod touch, Mac, PC, or Apple TV and check their accounts.
A Sample of an "iCloud Payment Cancellation" Phishing Scam
From: iCloud <purchases2.mail.applesupport.number-281034@noreplly.net>
Sent: Wednesday, April 4, 2018 4:59 PM
Subject: Re : Your receipt from iCloud. - [ Wednesday, April 4, 2018 ]
Dear Client.
Your iCloud has been used for In-App Purchase War Commander: Rogue Assault in the App Store from a web browser:
Date : 04 Apr 2018 6:51:39
Location : Australia
Browser : Safari 9
IP address : 1.132.107.9
Operating system : iPhone:
CPU iPhone OS 11.2.6 like Mac OS X
If the information mentioned above is familiar to you, you can ignore this message.
If you want to view your payment history or cancel your payment. Please find the PDF document attached at this email by following the instructions.
Recipients of the email voices claiming that they have ordered a product they did not, and who have clicked on the link in them, should change their Apple password and contact Apple Support for help. And, the best protection against phishing scams is to avoid clicking on links in email messages, social media messages, and text messages to sign into online accounts.