Apple Store email scams: how to spot a fake receipt or account alert
Quick answer
An email, text or call that says it's from Apple about a purchase you didn't make, a locked account or full iCloud storage is often a scam. Apple doesn't ask for sensitive data by phone. Don't click or call back. Check your account in Settings and forward the message to reportphishing@apple.com.
- Comes by
- Email, Text, Phone call
- Pretends to be
- Apple
- Last updated
How it works
Scammers pretend to be Apple. The message looks like a receipt for an App Store purchase, a warning that your Apple Account is locked, or a notice that your iCloud storage is full. It gives you a link to "fix" it or a number to call.
The link leads to a fake sign-in page that collects your Apple Account password and verification code. The number connects you to someone who says they're from Apple support, then asks for remote access to your device, your card details or gift card codes.
Apple points out that genuine purchase receipts include your current billing address, which scammers are unlikely to have. Apple also says its staff won't call to ask for sensitive personal information.
Red flags
- A receipt or charge for something you didn't buy, with a number or link to dispute it
- A sender address that doesn't match Apple, or a link whose address isn't Apple's website
- Urgency: your account will be locked or your photos deleted unless you act
- A phone call or text from "Apple" asking for passwords, codes or card details
- Payment requested in gift cards
- No billing address on a receipt that should show yours
Example message
Apple Receipt: your Apple Account was used to buy a subscription for $[amount]. If you didn't make this purchase, call [phone number] or visit [link] to cancel and get a refund.
What to do
- 1
Don't click or call
Don't open links or attachments, and don't call the number in the message. Apple says to contact it through its official support channels instead.
- 2
Check your account yourself
Open Settings on your iPhone or go to Apple's website by typing the address, and look at your purchase history. A real charge shows up there.
- 3
Forward it to Apple
Forward the email to reportphishing@apple.com. For a text, email Apple a screenshot of it.
- 4
If you entered your password
Change your Apple Account password right away, then change it anywhere else you reused it and turn on two-factor authentication.
- 5
If you paid or gave card details
Call your bank or card issuer using the number on the back of the card, tell them it was fraud and ask them to block the card. If you bought gift cards, contact the card company.
- 6
If you let someone into your device
Disconnect from the internet, uninstall any remote access app they had you install and change your passwords from a different device.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers rarely guess. Names, phone numbers, email addresses and home addresses are sold by data brokers, listed on people-search sites such as Spokeo, and leaked in breaches, which is how a message can reach you with your name already on it. Serus finds the brokers that list you and removes your listings, and alerts you when your details turn up in a breach, so fewer scammers can build a convincing message about you. If you've already shared details, our guide on what to do after a data breach covers the next steps.
More Apple scams
Frequently asked
Is the Apple receipt email a scam?
If you didn't make the purchase and the message pushes you to call a number or click a link, treat it as a scam. Check your purchase history in your account instead.
Does Apple call people about problems with their account?
Apple says to hang up on unexpected calls claiming to be from Apple and contact it through official support channels. It also says it won't ask for sensitive personal information by phone.
What if I already entered my password on the page?
Change your Apple Account password immediately, then update any other account that used the same password.
Where do I report it?
Forward the email to reportphishing@apple.com and report it to the FTC at ReportFraud.ftc.gov.
Sources
Something wrong or out of date? Tell us and we'll re-check it.