Apple Scam: How to Spot Fake Apple Support, iCloud and Apple Pay Alerts

An Apple scam is any message, call or pop-up that pretends to come from Apple to get your Apple Account password, a verification code, remote access to your device or a payment. The common versions are fake “Apple Support” calls, fake iCloud or Apple Pay alerts, “your lost iPhone was found” texts and requests to pay with Apple Gift Cards. Apple says it will never ask for your password or verification codes to provide support. If you shared them, change your Apple Account password from a trusted device straight away and call your bank if you shared card details.

These scams are well made, often using real Apple logos, spoofed caller ID and convincing web pages. Falling for one doesn’t mean you were careless. It means someone professional put effort into fooling you.

How Apple scams work

Most Apple scams have one of three goals. The first is your Apple Account (formerly called Apple ID) sign-in, which opens your iCloud photos, messages, backups, payment methods and Find My. The second is money, usually through gift cards, a “refund” or a card number entered on a fake page. The third is control of the device itself, through remote access or by getting you to remove a lost iPhone from your account.

The method is nearly always urgency. Your account is “locked”, your storage is “full”, a charge is “pending”, your iPhone has been “found”. Each one is designed to get you to act before you think.

Common versions of the Apple scam

Fake Apple Support calls

A caller says they’re from Apple Support and that your iCloud account has been hacked or used for suspicious purchases. The caller ID may even show “Apple”. They ask for a verification code sent to your phone, your password, or permission to “secure” the account. Apple says that if you get an unsolicited or suspicious call from someone claiming to be Apple, you should hang up and contact Apple directly.

Fake iCloud and Apple Account alerts

An email or text says your iCloud storage is full and your photos will be deleted, your Apple Account is suspended, or someone signed in from another country. A link goes to a page that looks like an Apple sign-in. Anything you type there goes to the scammer. Our guide on how to spot a phishing email explains the tells.

Fake Apple Pay and purchase alerts

A message says your Apple Pay has been suspended, a card needs to be “verified”, or you’ve been charged for an app or subscription you don’t recognize. It gives a link or a number to call to “cancel”. The real place to check purchases and subscriptions is the Settings app on your iPhone or your account on apple.com, not the link in the message.

The “your lost iPhone was found” text

If you’ve lost an iPhone, you might get a text or email saying it has been located, with a link to see where it is. The link leads to a fake Apple sign-in page. The aim is to get your password so the device can be removed from your account and resold. Ignore the link and check the device’s location yourself in the Find My app.

Tech support pop-ups and remote access

On a Mac or iPhone browser, a page may claim your device is infected and give an “Apple Support” number. On the call, they ask you to install screen-sharing software. This works like the Microsoft scam, with a different logo.

Apple Gift Card requests

Someone asks you to pay a bill, fine, tax, fee or debt with Apple Gift Cards and read out the numbers. Apple says its gift cards can only be used for purchases from Apple, and that you should never use them to pay anyone else. Our guide to gift card scams covers this pattern in detail.

Warning signs it isn’t really Apple

• Anyone asking for a verification code. Those codes are for you to type, never to read to someone.
• A call you didn’t request, especially one warning your account is under attack.
• A link to sign in in an email or text, instead of telling you to check your device’s settings.
• Requests to pay with gift cards, crypto or a payment app.
• A request to remove a device from Find My or your Apple Account.
• Pressure and secrecy, such as “don’t hang up” or “don’t tell the bank”.
• Odd sender addresses, spelling mistakes or generic greetings, though good scams can look perfect, so don’t rely on these alone.

What to do right now if you responded

1. Stop contact. Hang up, don’t reply and don’t click anything else in the message.
2. Change your Apple Account password from a trusted device, in Settings, or at Apple’s official reset page, typed in yourself. Do this first if you shared your password or a code.
3. Check your trusted devices and phone numbers. Remove any device or number you don’t recognize. If you’re locked out or the scammer changed your details, follow our guide on what to do if your Apple ID is hacked, which covers Apple’s recovery process.
4. Call your bank or card issuer using the number on your card if you entered card details or made a payment. Ask them to block the card and dispute any charges.
5. Review purchases and subscriptions in your account settings, and report any you didn’t make through Apple’s official problem-reporting route.
6. Remove remote-access software if you installed any, and update your device’s software.
7. Don’t remove a lost device from Find My because someone asked you to. Keep it on your account until you’ve spoken to Apple or your carrier through official channels.
8. Save the evidence: screenshots of texts and emails, phone numbers, links, gift card numbers and receipts.

If your iCloud data was accessed, our guide on what to do if your iCloud is hacked covers checking photos, backups and connected devices.

Where to report an Apple scam

• Apple: Apple asks people to forward suspicious emails that look like they’re from Apple to reportphishing@apple.com. For gift card scams, use the gift card scam guidance on Apple’s official website.
• Messages app: use the option to report junk on scam texts and iMessages, and forward scam SMS texts to 7726 (SPAM).
• The FTC: report at ReportFraud.ftc.gov.
• The FBI: report online scams to ic3.gov, with phone numbers, links and payment details.
• IdentityTheft.gov if they got personal details that could be used to open accounts in your name.

For a full explanation of each route, see our guide on how to report a scammer.

Getting your money back

How you paid decides what’s possible.

• Card payments: ask your card issuer for a dispute or chargeback as soon as possible. This is usually the best route.
• Apple Gift Cards: contact Apple through its official gift card scam guidance straight away, and keep the cards and receipts. Once the balance has been spent, it is often impossible to recover.
• Bank transfers, wires, payment apps and crypto: report them to your bank, the app or the exchange immediately. These are often hard or impossible to reverse, but reporting fast gives the best chance.

Be wary of anyone who then contacts you offering to get the money back for a fee, including people claiming to be Apple. That’s usually a follow-up scam. See our guide to recovery scams.

A worked example

This is an illustrative scenario, not a real case. A graphic designer loses her iPhone on a train and marks it as lost in Find My. Two days later, she gets a text: “Your lost iPhone has been located. View its location,” with a link. The page looks exactly like an Apple sign-in, and she enters her password.

That evening she realizes the link address wasn’t Apple’s. She:

1. Changes her Apple Account password on her Mac, in System Settings.
2. Checks her trusted devices and phone numbers and finds nothing new.
3. Keeps the lost iPhone on her account, so it stays locked to her.
4. Reports the text as junk and forwards it to 7726, then files a report with the FTC.
5. Changes the password on any other account that shared the same password.

Common mistakes

• Reading a code to a caller who says it’s to “verify you”. That code is often what lets them into your account.
• Calling the number in the message to cancel a charge you don’t recognize.
• Trusting caller ID. Numbers and names can be spoofed.
• Removing a lost iPhone from your account because a “buyer” or “finder” asked you to.
• Buying gift cards to fix a problem. No real company, bank or agency asks for payment this way.

How to protect yourself next time

• Keep two-factor authentication on for your Apple Account, and never share the codes.
• Use a unique password for your Apple Account, stored in a password manager or in Apple’s Passwords app.
• Consider Stolen Device Protection on iPhone, which Apple designed to add extra checks when your phone is away from familiar locations.
• Check your account in Settings whenever a message says something is wrong.
• Reach Apple only through apple.com, the Apple Support app or the Settings app, never a number from a text, email or search ad.

If someone is using your name, photos or business to scam others, see our guide on what to do if someone is impersonating you online. If that has spilled into search results about you, our personal reputation management team can help you see what can realistically be done.

Frequently asked questions

Does Apple call you about a hacked account?

Apple says that if you get an unsolicited or suspicious call from someone claiming to be Apple, you should hang up and contact Apple directly through its official website or app. Never give a caller your password or a verification code.

Is the iCloud storage full email a scam?

It can be real or fake. Don’t use the link. Open Settings on your device and check your iCloud storage there. If your storage isn’t full, or the email asks for card details, it’s a scam.

What should I do if I gave a scammer my Apple ID password?

Change it immediately from a trusted device, check your trusted devices and phone numbers, and review recent purchases. If you’re locked out, use Apple’s official account recovery process.

Can I get money back if I paid with Apple Gift Cards?

Sometimes, if the balance hasn’t been spent yet. Contact Apple quickly through its official gift card scam guidance, keep the cards and receipts, and report the scam to the FTC.

Where do I forward Apple phishing emails?

Apple asks people to forward suspicious emails that claim to be from Apple to reportphishing@apple.com. Forward scam texts to 7726 and report them as junk in the Messages app.