Apple will never ask for your PIN, sign-in codes, or two-factor authentication (2FA) details via text, email, or phone. Most "Apple Pay" text messages are phishing scams designed to steal your Apple ID, credit card information, or gain remote access to your device.
Text Scam Tactics
- Fake Unauthorized Charge Alerts: You receive a text about a large purchase (often around $300–$450) at an Apple Store, typically in Orlando, Florida, which you did not make.
- Suspended Account Threats: Messages claim your Apple Pay or Apple ID has been "temporarily limited" or "suspended" due to suspicious activity, urging you to click a link to restore access.
- Remote Access Requests: Scammers may ask you to download apps like Connect Wise Control or AnyDesk to "fix" your account, which actually grants them full control of your phone.
- Overpayment/Refund Scams: A "buyer" on a marketplace claims they overpaid you and asks for the difference back via Apple Cash.
Spotting a Scam
- Urgent/Threatening Language: Phrases like "your account will be locked in 30 minutes" or "your data is at risk" are used to create panic.
- Suspicious Sender: Official Apple messages often use short codes, while scams frequently come from international numbers (e.g., starting with +63) or random personal emails.
- Non-Apple Links: Links that do not lead to
apple.com or icloud.com (e.g., mappleapppay.com) are fraudulent. - Poor Grammar: Look for misspellings of "authorize" or unusual punctuation in location names.
Advertisements - Continue reading below
Steps if Targeted
- Do Not Click or Reply: Interacting can confirm your number is active or lead to malware.
- Report the Message:
- Take a screenshot and email it to reportphishing@apple.com.
- Forward the text to 7726 (SPAM) to alert your carrier.
- Tap Report Junk directly under the message in your iMessage app.
- Verify Independently: If you are worried, check your transaction history directly in the Apple Wallet app or sign in at appleid.apple.com.
If You Were Scammed
- Secure Your Apple ID: Immediately change your password and ensure Two-Factor Authentication is enabled.
- Contact Your Bank: If you shared card details or authorized a payment, call your bank to freeze your cards and dispute the charges.
- Remove Remote Software: If you downloaded any apps at the scammer's request, delete them immediately and run a security scan.
- File Official Reports: Report the fraud to the FTC at reportfraud.ftc.gov.