Cybercriminals are sending out fake Apple invoices like the one below to potential victims, in an attempt to trick them into clicking on the link in it. The link goes to a fake Apple website where visitors will be asked to sign-in. But, any attempt to sign-in will result in the visitors' Apple username and passwords being sent to the cybercriminals behind the fake invoices.
Therefore, Apple customers who have received email invoices appearing as if they were sent from Apple, should avoid clicking on the links in them. They should instead, sign directly into the iTunes Store on their iPhone, iPad, iPod touch, Mac, PC, or Apple TV and check their accounts.
A Sample of a Fake Apple Invoice Being Sent by Cybercriminals
From: "Apple Inc" <ymaxzhfp@frrsxdya.agonh>
Date: June 19, 2018 at 4:00:36 PM EDT
Subject: Your invoice from Apple #8LU6MSZ
Thanks for your purchase
12-inch MacBook 512GB
MacBook - Silver
EMAIL ADDRESS:
INVOICE DATE:
Tuesday, 19 June 2018, 08:00:36 PM
SHIPPING ADDRESS:
ORDER ID:
##NUMBER1####CHAR1####NUMBER10##/A
PRICE:
$1,949.00
Bag Subtotal: $1,949.00
Free Shipping: $0.00
$1,949.00
If you did not authorize this purchase, Please visit iTunes.
CLICK TO PAYMENT CANCELATION
Recipients of the email voices claiming that they have ordered a product they did not, and who have clicked on the link in them, should change their Apple password and contact Apple Support for help. And, the best protection against phishing scams is to avoid clicking on links in email messages, social media messages, and text messages to sign into online accounts.