How do scammers impersonate Apple with fake iPhone purchase emails?

Scammers send emails appearing to be from Apple's official domain, appleid@id.apple.com, embedding their phishing messages within legitimate Apple account change notifications.

What happens if I call the number on a fake iPhone purchase email?

Calling the provided number connects you directly to scammers who may try to steal your data or trick you into installing remote access software.

How can I protect myself from fake Apple purchase scams?

Verify unexpected account alerts by checking your financial accounts directly and avoid clicking links or calling numbers in suspicious emails.

Home / Technology / Beware: 'New iPhone' Email is a Phishing Trap

Beware: 'New iPhone' Email is a Phishing Trap

21 Apr

•

Summary

Scammers send fake iPhone purchase emails from Apple's domain.
They trick users into calling a number to 'cancel' a purchase.
The scam aims to steal personal data or install remote access software.

Beware: 'New iPhone' Email is a Phishing Trap

A sophisticated phishing scam is targeting Apple users by impersonating the company to trick them into contacting scammers. The fraudulent emails claim the recipient has purchased a new iPhone for $899 via PayPal, prompting them to call a provided phone number to cancel the transaction. These emails are crafted to look official, originating from Apple's own infrastructure via the appleid@id.apple.com address and passing security checks. This is achieved by exploiting Apple's account change notification system, where scammers manipulate recipient information to embed their phishing message within legitimate Apple alerts.