Apple security text scam: how to spot the fake alert
Quick answer
A text, email or pop-up saying your Apple Account is locked or your device has a security problem is a scam if it asks for a password, code or payment. Apple never asks for your password or verification codes. Don't tap the link. Change your Apple Account password if you did.
- Comes by
- Text, Email, Phone call, Website
- Pretends to be
- Apple
- Last updated
How it works
Scammers send a message that looks like it's from Apple Support: your account is locked, someone signed in, your device has a virus. Apple lists the common routes as fake emails and messages, misleading pop-ups, calls or voicemails that pretend to be Apple Support, and fake promotions.
The message pushes you to a page or a phone number. The page asks for your Apple Account sign-in and the verification code sent to your phone. The caller asks for the same, or asks you to pay with gift cards.
With your password and code, they can sign in to your account, lock you out and reach whatever it holds.
Red flags
- A message saying your Apple Account is locked or at risk, with a link to fix it
- A request for your password or the verification code sent to you
- A pop-up or call saying your device has a virus and you must call a number
- Payment by Apple gift card
- Pressure to act right away
- A pasted command or script that the message tells you to run in Terminal
Example message
Apple Support: Your Apple Account has been locked because of suspicious activity. Verify your identity within 24 hours to avoid permanent suspension: [link]
What to do
- 1
Don't tap, call or reply
Leave the link alone and don't call a number from the message. Apple says to contact it through its official support channels instead.
- 2
Report it to Apple
Forward a suspicious email to the phishing address Apple lists on its support page. For a text, email Apple a screenshot of it. In Messages you can also tap Report Junk.
- 3
If you entered your password, change it now
Change your Apple Account password and make sure two-factor authentication is on. Apple says to do this right away if you may have entered your password on a scam site.
- 4
Don't use gift cards to pay anyone
Apple says Apple Gift Cards are never a way to pay another person. If you already bought cards for a caller, contact the card issuer with the card numbers and receipts.
- 5
If you gave out card or bank details
Call your bank or card issuer on the number on your card and report the fraud.
- 6
Report the scam
Report scam calls and texts to the FTC. Keep a screenshot until you've reported it.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scam texts go out to huge lists of numbers, but the ones that name you or your carrier read as more believable. Phone numbers and email addresses leak from people-search sites and breaches. Serus finds the sites that list your phone number and email, requests removal, and alerts you when your info shows up in a breach.
More Apple scams
Frequently asked
Does Apple send texts about account security?
Apple says to treat unexpected messages that ask for your password, security code or money as a scam, and to contact Apple directly instead. Don't use any link in the text.
Will Apple ask for my verification code?
No. Apple says it never asks for your password or verification codes to provide support.
I tapped the link but entered nothing. Am I OK?
Most likely, yes, if you gave nothing. Close the page, don't enter anything, and if you're worried change your Apple Account password and check that two-factor authentication is on.
Where do I report a fake Apple text?
Take a screenshot and email it to the phishing address on Apple's support page, then report it to the FTC.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
