Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Apple ID Account Alert Scam - How to Protect Yourself
Apple ID Account Alert Scam - How to Protect Yourself

Unsolicited text messages, emails, or phone calls claiming your Apple ID account is under "High Alert," locked, or facing unauthorized charges are phishing scams designed to steal your credentials and money. These fraudulent notifications often mimic official branding and demand immediate action to resolve a fake security breach.

Common Variations of the Scam

  • The "Apple Store - CA" Charge: A text claiming an unauthorized Apple Pay pre-authorization charge of $143.95 (or a similar amount) was made at a physical Apple Store. It urges you to call a fake helpline to reverse it.
  • The "Apple High Alert" Scheme: An aggressive social engineering tactic where targets receive a "High Alert" text. If you call the number, scammers pose as security agents, claim hackers have breached your bank, and trick you into wiring funds to a "secure account".
  • iCloud Deletion Threats: Phishing emails warning that your iCloud storage is full or your account will be deleted within 48 hours unless you verify your identity.

Red Flags to Watch For

  • Urgency and Fear: The message will threaten that "failure to act promptly will make charges irreversible" or result in data loss.
  • Requests for Codes: Scammers will ask for your Apple ID password, device passcodes, or two-factor authentication (2FA) codes. Apple will never ask for this information.
  • Requests to Lower Security: The fraudster may ask you to disable 2FA or turn off Stolen Device Protection to "fix" the issue.
  • Non-Apple Domains: Check the sender's address; fake alerts frequently come from standard Gmail, Outlook, or slightly misspelled domains rather than @apple.com.

How to Protect Yourself

  1. Never Click or Call: Do not click any links, tap "Accept" on unexpected 2FA prompts, or call the phone numbers listed in the message.
  2. Verify Independently: If you suspect a real issue, log into the official Apple Account Portal directly or check the Settings app on your iPhone. If an account is truly disabled, a notification will appear natively when you try to log in.
  3. Check Financial Statements: Use your banking app or the official Apple Wallet app to check your transaction history for actual charges rather than relying on a text notification.
  4. Report the Fraud: Forward suspicious emails or screenshots of scam text messages directly to Apple at reportphishing@apple.com.
waiting