Apple Pay scam texts and emails: how to spot the fake alert
Quick answer
Texts, emails and calls that say Apple Pay was misused or your account is compromised are usually scams. Apple says it will never ask for your password, verification codes or passcode, or ask you to pay by Apple Cash. Don't tap links or call back; contact Apple directly.
- Comes by
- Text, Email, Phone call
- Pretends to be
- Apple
- Last updated
How it works
Scammers pretend to be Apple. Apple's support article on social engineering describes callers who claim your Apple Account was broken into or Apple Pay was misused, then push you to act right away. Caller ID can be spoofed to look like Apple's real number.
From there they send you to a fake website that looks like an Apple sign-in page, or ask you to turn off two-factor authentication or Stolen Device Protection, install screen-sharing software or send a test payment. Apple says it will never ask you to disable a security feature, and will never ask for your Apple Account password, verification codes, device passcode or recovery key. It doesn't request payment through Apple Cash.
The goal is your Apple Account login, card details or money.
Red flags
- A message or call saying Apple Pay was used or your account was compromised
- Urgency, so you don't stop to check
- A request for your password, verification code or passcode
- A request to turn off two-factor authentication or Stolen Device Protection
- A request to install screen-sharing software or send a test payment
Example message
Apple Pay alert: a payment of $[amount] was made from your account. If this wasn't you, sign in at [link] or call [phone number] to cancel it.
What to do
- 1
Don't tap or call
Don't click links or open attachments in unsolicited messages. Apple says to hang up and call a number you verified yourself.
- 2
Check your account directly
Open the Wallet app or your bank's app, or sign in at Apple's site by typing the address, and look for the charge.
- 3
If you entered a password, change it now
Change your Apple Account password and make sure two-factor authentication is on, as Apple advises.
- 4
If you sent money or card details, call your bank
Use the number on your card to dispute charges and replace the card. Our guide on what to do after a data breach covers the steps.
- 5
Report it
Forward suspicious emails to reportphishing@apple.com, screenshot texts and send them there too, and report calls to the FTC.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers rarely pick targets at random. Your name, number, address and email are sold by data brokers, listed on people-search sites and leaked in breaches, and that is what lets a message use your real details. Serus finds where your details are listed and requests removal, and alerts you when your data shows up in a breach, so fewer scammers can reach you.
More Apple scams
Frequently asked
Will Apple ask for my verification code?
No. Apple says it will never ask for your Apple Account password, verification codes, device passcode or recovery key.
Is a text about an Apple Pay charge real?
Treat it as suspect. Check your wallet or bank app directly, not through the message.
Where do I report an Apple scam?
Email suspicious messages to reportphishing@apple.com and report calls to the FTC.
I called the number in the message. What now?
Stop, don't install anything, and check your accounts. Change your Apple Account password and call your bank if you shared card details.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
