Online Threat Alerts (OTA) - Alerting you to scams and frauds.

"Apple Order Notification Cancellation" Phishing Scams
Apple Order Notification Cancellation Phishing Scams

Apple customers are asked to be aware of fake "Apple Order Notification" invoices (see below), which claim that they have purchased products or make payments from the iTunes store, and if they did not authorize the purchases or payments they should visit iTunes Payment Cancellation. The fake email invoices are being sent by scammers to frighten and trick the recipients into clicking on the links within them by claiming they need to do so in order to cancel the purchases and get a refund. But, once the recipients click on the link in the fake email invoices, they will be taken to a phishing website that steals personal, financial, and Apple credentials (usernames and passwords).

Therefore, Apple customers who have received email invoices appearing as if they were sent from Apple, should avoid clicking on the links in them. They should instead, sign directly into the iTunes Store on their iPhone, iPad, iPod touch, Mac, PC, or Apple TV and check their accounts.

Sample of an "Apple Order Notification Cancellation" Phishing Scam

From: "Apple Team"

Sent: Wed, May 16, 2018 at 3:01 PM

Subject: Invoice Order Succes confirmed , order numЬег is [KEP3JV3251QZ2XN]

Apple Order Notification

Dear Customer,

We wish to inform that the payment relating to the transaction of 4:01, 17 May 2018 of $ 68.00 is paid.

The report below shows details of the transaction:

Cod. Order Product Payment Detail

211234 Apple Watch Series 2 Order With Apple Account ID

To Cancel Order :

Follow the link:

Login Account

This order was not carried out by you cancel this order.

If you have questions or need clarification, please contact us at: order@appleinfo.com

Recipients of the email voices claiming that they have ordered a product they did not, and who have clicked on the link in them, should change their Apple password and contact Apple Support for help. And, the best protection against phishing scams is to avoid clicking on links in email messages, social media messages, and text messages to sign into online accounts.

11

Comment sectionComments / Answers (11)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 11

by info

The scammers are using this email: no-reply-cc.apple-inc.com.switchsportivenot.business

Delete


by info

"From: lCloud Invoice Receipt
To: undisclosed-recipients:;
Date: June 24, 2019 at 11:32 PM
Subject: Your Order Subscription of "iCloud : 2TB Storage Plan" has been Completed !

Open attached file to view your orders, manage or cancel your orders, thanks again for choosing Apple.

Should you need to contact us for any reason, please know that we can give out order information only to the name and e-mail address associated with your account. Thank you again for shopping with us..."

Here is another scam.

Delete


by info

Here is another scam:

---------- Original Message ----------
From: їTunnes Payment Service
To: undisclosed-recipients:;
Date: June 5, 2019 at 4:05 PM
Subject: Thank You! Your receipt from 'Vector 2 Premium' has been sent to email.

We accepted your payment 'Vector 2 Premium' on June 5 , 2019.

To view your orders, manage or request a cancellation, please download and open attachment in email.

If you have any questions or comments, please visit our support site.

Thank You!

Delete


by info

Received the same scam, see below:

---------- Original Message ----------
From: ✉ ἉppIẹ Confirmation Purchase
To: undisclosed-recipients:;
Date: May 31, 2019 at 1:53 PM
Subject: Thank You! Your receipt payment 'Dawn of Titans' has been sent to email

We accepted your payment 'Dawn of Titans' on May 31 , 2019.

To view your orders, manage or request a cancellation, please download and open attachment in email.

If you have any questions or comments, please visit our support site.

Thank You!

Delete


by info

Received this scam:

"Subscription confirmation
HMA! Pro VPN
HMA subscription Apple 12M (1 Week)
Free Trial
Thank you!,

You have purchased the following subscription with a free 1-week trial:
Subscription Subscription Apple HMA 12M
Application HMA! Hotspot VPN y Proxy
Content provider Privax LTD
Date of purchase 15 Apr 2019
Introductory offer Free per week
Subscription price $ 83.88 Every year as of Apr 15, 2019
Payment method Credit card

You will not be charged for the free trial. After the free trial ends, your subscription will be renewed at $ 83.88 unless canceled before Apr 22, 2019.

Click here to learn more cancel, check your subscription .

Sincerely,
The application store team
For answers to frequently asked questions, visit Apple Support ."

Delete



by info

Here is another scam:

"Expéditeur: App Store
Date: 18 mars 2019 à 10:10:13 UTC−4
Destinataire: app-storeapple.com
Objet: Rép :⁨ [Successful Transaction] Your payment for the order "Biliard 8 Ball Pool ™ game ...". Monday, March 18, 2019 /[Review Purchase] Order Number QL37364463 We've Sent your order by App Store ."Monday, March 18, 2019. [FWD]⁩

Thank you customer

Open the document to continue the purchase or cancel the purchase.

App Store."

Delete


by info

Here is another scam:

"From: "Apple ."
Date: 08 December 2018 at 7:39:06 PM GMT-6
Cc: "received-payment5633-mail.apple.com"
Subject: Re: Payment for Luma Touch requires confirmation, LLC. (payment-apple.com) - on Saturday, 8 December 2018.

Saturday, 8 December 2018

Transaction ID: 5K4WC1I4BGLM2BG1BP

Dear Customer,

This message is to inform you that your Apple ID has made a payment via the App Store.

We recently saw that someone with a new device has used your Apple ID to buy something at the Apps Store, so we ask that you confirm that it is you or you can cancel the payment.

Open the attachment to cancel payment, if within 24 hours has not been canceled your purchase will be confirmed automatically.
This message is to protect your account payment.

Verify

Regards,
AppleID."

Delete


by info

Here is another scam:

"Da: AppIe Support Order
Inviato: mercoledì 17 ottobre 2018 05:10
A: noreply-appleorder.au
Oggetto: #Statement Update Account: [ Confirmation Verify Order.] 17/10/2018 Your Order: KEY2198763 Review the proof of purchase to view Reçu: KEY2198763.- Review Your Attachment.

Dear Customer
Before completing your purchase,please confirm your email address by pressing the following link in Attachment.
Team Order"

Delete


by an anonymous user from: Marshfield, Wisconsin, United States

I did not order an apple watch. I want to cancel the order and get a refund. Order #211234.

Delete


by info

Contact your bank and dispute the charge to have it refunded.

Delete


by info

Here is another scam:

----- Forwarded message -----
From: Apple Support
Sent: Monday, 21 May 2018, 6:32:09 am AEST
Subject: Your receipt from Apple : INV-R5825891674

Dear Customer,

Thank you for shopping at the Apple Store
This purchase was initiated from Argentina

If you made this purchase, you can disregard this email. It was only sent to alert you in case you did not make the purchase yourself

"You can find the details purchase on this following attachment if you want to cancel it"

Kindly Regards,
Apple

Delete


waiting