Impersonation Scams
Apple ID Scam Emails: How to Spot Them
Fake Apple receipts and account-locked warnings are built to make you sign in on the wrong page. Here is how to check safely.
Quick answer
Check any claimed purchase or account problem on your own device rather than through the email: on an iPhone or iPad, open Settings, tap your name, and review your account and purchase history, or visit reportaproblem.apple.com by typing it yourself. Apple does not ask for your password, verification codes, or payment details by email, text, or phone. If a message pressures you to sign in through a link or to call support, treat it as a scam.
Warning signs to look for
- A receipt for an app, subscription, or game purchase you did not make
- 'Your Apple ID has been locked' or 'disabled' with a link to unlock it
- A request for a verification code sent to your trusted device
- A pop-up saying your Mac or iPhone is infected, with a support number
- Sender domains that are not apple.com, such as apple-id-support.com
- An iCloud storage warning demanding immediate payment details
The purchase-receipt lure
The most common Apple phishing email is a receipt for something you did not buy, with a prominent link to cancel or dispute it. The point is not the purchase; it is the panic. The link leads to a copy of the Apple ID sign-in page, and once you enter your password, the page immediately asks for the six-digit verification code that Apple's real system has just texted to your device. Handing over that code lets an attacker into an account that can hold your photos, contacts, backups, and payment methods.
The account-locked and storage-full variants
Other campaigns claim your Apple ID has been locked for security reasons, that iCloud storage is full and your data will be deleted, or that a payment method needs updating. All of them create a deadline and offer a link. A related version skips email entirely: a browser pop-up claiming the device is infected and giving a support number, which connects you to a fake technician who wants remote access or a payment.
How to check safely on your own device
For purchases, open Settings, tap your name, then Media & Purchases, or type reportaproblem.apple.com into a browser yourself and sign in. For account security, open Settings, tap your name, then Sign-In & Security to review trusted devices and recent activity. Everything genuine appears there. If the email's claim is nowhere in your account, delete the message. Apple's own guidance also notes that legitimate receipts arrive from Apple and are always reflected in your purchase history.
What Apple asks you to do
Apple publishes guidance on recognising and reporting phishing and asks customers to forward suspicious emails claiming to be from Apple to reportphishing@apple.com. Suspicious iMessages can be reported with the Report Junk option, and unwanted texts can be forwarded to 7726. Apple states plainly that it will never ask you to provide your password or verification code to anyone.
If you already entered your Apple ID details
Change your Apple ID password immediately from a device you trust, then review trusted devices and remove any you do not recognise. Check that your recovery email and phone number have not been altered, and look at payment methods and subscriptions. If the account holds your photos and backups, also check for unfamiliar sign-ins. Report the incident at reportfraud.ftc.gov and change any other account that used the same password.
Not sure whether the receipt is real?
Forward the original email to check@spamcheck.com. SpamCheck will look at the sender and the link destinations and tell you in plain English whether it is a genuine Apple notification or a forgery, and what to do next.
SpamCheck is not affiliated with or endorsed by the companies mentioned in this guide. Brand names are used only to help consumers identify potential impersonation scams.
Frequently asked questions
- Apple sent me a verification code I did not request. What does that mean?
- Someone has your password and is trying to sign in. Never share the code. Change your Apple ID password immediately and review trusted devices.
- A pop-up says my iPhone has a virus. Is that possible?
- Web pop-ups cannot scan your device, and these warnings are always fake. Close the tab, do not call the number, and never install anything the pop-up recommends.
- How do I tell a real Apple receipt from a fake one?
- Real purchases always appear in your purchase history. Check reportaproblem.apple.com or Settings on your device rather than judging the email itself.
- Is SpamCheck affiliated with Apple?
- No. SpamCheck is independent and is not affiliated with, sponsored by, or endorsed by Apple. Apple, Apple ID, and iCloud are trademarks of Apple Inc., referenced here only to help identify impersonation.
Sources
SpamCheck provides informational risk assessments and cannot guarantee that any message is completely safe. When money or sensitive information is involved, independently contact the organization using a trusted phone number or website.
About SpamCheck
SpamCheck helps people understand suspicious emails by letting them forward the message to check@spamcheck.com and receive a plain-English analysis. This guide was published by SpamCheck and written and reviewed by the SpamCheck Editorial Team.
Related guides
Microsoft Account Scam Emails: How to Spot Them
Fake Microsoft security alerts and 'your PC is infected' pop-ups both lead to the same place. Here is how to check what is real.
Amazon Scam Emails: How to Spot Them
Fake order confirmations and Prime renewal notices are designed to make you call. Here is how to check any Amazon message in under a minute.
Is This Email a Scam? How to Check
You have a suspicious email open right now. Here is the fastest reliable way to decide whether it is a scam, without clicking anything in it.
I Clicked a Phishing Link — What Should I Do?
Clicking a phishing link is usually recoverable — especially if you did not type anything on the page that opened. Work through these steps in order.
How to Check If an Email Is Legitimate
Verifying a legitimate email is a different job from spotting an obvious scam. Here is how to confirm a message really came from who it claims.
Geek Squad Scam Emails: How to Spot Them
A Geek Squad invoice for a subscription you never had is one of the most common scam emails in circulation. Here is what it is really after.