Apple ID and iCloud phishing scams
Last verified:
Scammers send emails, texts, or calls claiming your Apple ID is locked, a purchase was made, or iCloud storage failed. Links lead to fake Apple login pages to steal credentials. Apple advises checking account status through Settings or appleid.apple.com — not through message links.
- Impersonated brand
- Apple
- Scam type
- Phishing
- Common delivery methods
- Email, SMS / text message, Phone call, Website
How this scam works
You receive a message appearing to be from Apple about a locked Apple ID, suspicious App Store charge, iCloud storage problem, or device find request. It may include a link to sign in and verify. The fake page is designed to capture your Apple ID password and may prompt for two-factor codes. Scammers may use access to make purchases, access iCloud data, or bypass device protections. Some versions include fake receipts for expensive items to create urgency.
Warning signs
- Unexpected Apple ID lock or purchase notifications you cannot verify in Settings.
- Links in email or SMS instead of checking your account through the device Settings app.
- Requests to approve sign-in codes you did not initiate.
- Phone numbers in emails or pop-ups for “Apple Support” you did not request.
- Poor grammar or sender addresses that do not match Apple’s official domains.
- Pressure to act within minutes to avoid account closure.
How to verify safely
- Do not click links in unexpected Apple messages.
- On iPhone or Mac, open Settings → [your name] to review Apple ID status and purchases.
- Visit appleid.apple.com by typing the address yourself if you need to sign in on the web.
- Review Apple’s guidance on identifying genuine Apple emails.
- If you receive a sign-in approval prompt you did not request, deny it and change your password.
If you received this message
- Do not share Apple ID passwords or verification codes with callers or linked pages.
- Enable two-factor authentication if not already active.
- Report phishing messages to Apple using forward-to addresses listed in Apple Support guidance.
- Remove remote access or unfamiliar devices from your Apple ID account list if present.
If you already clicked or paid
- Change your Apple ID password immediately if you entered it on a suspicious page.
- Review purchase history and payment methods in Settings.
- Contact Apple Support through official channels if unauthorized charges appear.
- Report to ReportFraud.ftc.gov and ic3.gov if financial loss occurred.
Official reporting guidance
- Forward phishing emails to reportphishing@apple.com per Apple Support guidance.
- Report to ReportFraud.ftc.gov.
- File with ic3.gov if credentials were stolen or money was lost.
- Report fake support numbers to your phone carrier if received by text.
Check a suspicious link
Paste a URL into Fraudly’s free checker for a structured trust review. Results are informational — not a guarantee.
Open free checkerAuthoritative sources
Fraudly resources
Related local alerts
- ActiveSMS phishing (smishing)
USPS smishing scam
Criminals send texts or emails claiming a USPS package could not be delivered, an address is incomplete, or a fee is owed. The messages are typically designed to steal payment details or personal information through fake tracking links. U.S. Postal Inspection Service guidance warns that unexpected delivery problem messages with links are a common smishing pattern — verify through usps.com rather than the message.
Impersonated brand: United States Postal Service (USPS)
Last verified:
- ActiveSMS phishing (smishing)
Toll road text scam
Scammers send texts claiming you owe unpaid tolls through programs such as E-ZPass, FasTrak, or SunPass. Messages may threaten late fees or registration suspension and link to phishing sites. FCC consumer guidance warns that legitimate toll agencies generally do not demand immediate payment through unsolicited text links.
Impersonated brand: E-ZPass, FasTrak, SunPass, and other U.S. toll programs
Last verified:
- ActiveGovernment impersonation
IRS impersonation scam
Scammers impersonate the IRS through email, text, social media messages, and phone calls. They may claim you owe tax, must verify an account, or are due a refund — often with links or QR codes to fake IRS sites. According to IRS guidance, the IRS does not initiate contact by email, text, or social media to demand payment or sensitive information.
Impersonated brand: Internal Revenue Service (IRS)
Last verified:
Apple sends legitimate receipts and security alerts for activity on your account. This alert describes impersonation. Fraudly cannot confirm whether a specific Apple message is genuine.
Related Fraudly resources
- Stay Safe OnlineClear answers on website trust, phishing, fake shops, and safer payments—tied to Fraudly’s checkers.
- Website scam checkerRun a free URL check for trust signals, scam patterns, and plain-language risk context.
- Latest checksBrowse recent public website trust snapshots from the Fraudly community feed.
- Intelligence HubEditorial guides on fake webshops, phishing, and warning signs before you pay or log in.