Apple Account scam emails: how to spot the fake security alert
Quick answer
An unexpected email claiming your Apple Account is locked or at risk, and asking for your password or a code, is a scam. Apple says to treat unexpected requests for your details as scams and never to share your password or verification codes. Don't click; go to Apple directly.
- Comes by
- Email, Text, Phone call
- Pretends to be
- Apple
- Last updated
How it works
Scammers pretend to be Apple and send a message about your Apple Account: a problem, a lock, a purchase you didn't make. The goal is to get your Apple Account password and verification codes, or to get you to call a fake support number.
Apple's own guidance says that if an unexpected message, call or request asks for personal information, it's safer to assume it's a scam and contact the company directly. Apple also says it never asks for your password or verification codes to provide support.
With your password and code, a scammer can try to take over your account, so the page they send you to is built to collect both.
Red flags
- An unexpected message about a problem with your Apple Account
- A request for your password or a verification code
- Pressure to act right now or lose access
- A link to sign in instead of going to Apple yourself
- A phone number in the message to call for support
Example message
Your Apple Account has been locked because of suspicious activity. Verify your details within 24 hours or your account will be disabled: [link]
What to do
- 1
Don't click or reply
Don't open links, call numbers or reply. Open Settings on your device or go to Apple's site by typing it yourself.
- 2
Never share your password or codes
Apple says it never asks for your password or verification codes to give support.
- 3
If you entered your details, change your password now
Change your Apple Account password right away and make sure two-factor authentication is on.
- 4
Check your account
Review your devices and recent activity in your account settings and remove anything you don't recognise.
- 5
Report it
Report the message to the FTC, then delete it.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers get names, phone numbers, addresses and emails from people-search sites and data breaches, which is how a message can feel personal. Serus finds the data brokers and people-search sites that list your details and removes them, and alerts you when your email or phone number shows up in a breach, so fewer scammers can reach you.
More Apple scams
Frequently asked
Will Apple ask for my password or verification code?
No. Apple says it never asks for your Apple Account password or verification codes to provide support.
What should I do if I already typed my password?
Change your Apple Account password immediately and make sure two-factor authentication is on.
How do I know if a message is really from Apple?
Don't use the links in it. Go to Apple's site or your device settings yourself to check your account.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
