New Apple Phishing Scam Uses Fake $899 iPhone Purchase Alert to Steal Credentials

What happened

In April 2026, cybersecurity researchers and multiple user reports confirmed a new phishing scam targeting Apple customers. The scam involves sending fraudulent emails that mimic official Apple purchase alerts, falsely claiming a recent $899 iPhone purchase on the recipient’s Apple account. The email urges users to verify the transaction via a link that leads to a convincing fake Apple login page designed to harvest Apple ID credentials.

This phishing campaign exploits the urgency and concern that users feel when notified of unexpected charges, increasing the likelihood of victims clicking the malicious link and entering their sensitive information.

Confirmed facts

• The phishing emails are crafted to closely resemble legitimate Apple purchase notifications, including Apple branding, sender addresses mimicking Apple domains, and realistic transaction details.
• The fake purchase amount is consistently $899, a typical price point for recent iPhone models, adding credibility to the alert.
• The phishing link directs users to a counterfeit Apple login page hosted on domains unrelated to Apple, designed to capture usernames and passwords.
• Once credentials are entered, attackers gain access to victims’ Apple accounts, potentially leading to further fraud, unauthorized purchases, and identity theft.
• The scam is widespread, with reports spanning multiple countries and affecting both individual consumers and small business Apple users.

Who is affected

Anyone with an Apple ID is a potential target, but the scam predominantly affects:

• Apple customers who have previously made online purchases and are familiar with Apple’s notification style.
• Users who may not be vigilant about verifying email sender addresses or the URLs they click.
• Individuals with saved payment information in their Apple accounts, increasing the risk of financial loss.
• Small businesses using Apple services who rely on email alerts for transaction monitoring.

What to do now

If you receive an unexpected Apple purchase alert, especially for $899 or similar amounts, take these steps immediately:

1. Do not click any links in the email. Instead, open a new browser window and navigate directly to apple.com or use the official Apple Support app.
2. Check your Apple purchase history directly through your official account settings to verify if the transaction occurred.
3. If you suspect your credentials were compromised, change your Apple ID password immediately. Use a strong, unique password.
4. Enable two-factor authentication (2FA) on your Apple ID if not already active.
5. Monitor your bank and credit card statements for unauthorized charges.
6. Report the phishing email to Apple by forwarding it to [email protected].
7. Delete the phishing email from your inbox and trash folders.

How to secure yourself

To protect against this and similar phishing scams:

• Always verify the sender’s email address carefully; legitimate Apple emails come from addresses ending with “@apple.com.”
• Hover over links to preview URLs before clicking; avoid links that do not lead to official Apple domains.
• Use Apple’s official apps or website to check account activity rather than relying on email links.
• Regularly update your Apple ID password and avoid reusing passwords across multiple sites.
• Enable two-factor authentication (2FA) on your Apple account to add an extra layer of security.
• Educate yourself about common phishing tactics and stay informed about new scams targeting Apple users.
• Use reputable antivirus and anti-phishing software on your devices.

FAQ

How can I tell if the Apple purchase alert email is fake?

Check the sender’s email address for authenticity (must end with @apple.com), avoid clicking on links, and verify purchases directly via your Apple account or official Apple apps.

What should I do if I clicked the link and entered my Apple ID?

Immediately change your Apple ID password, enable two-factor authentication, review your account for unauthorized activity, and contact Apple Support.

Can this phishing scam lead to identity theft?

Yes. If attackers gain access to your Apple ID, they can access personal information, payment methods, and potentially use your identity for further fraud.

Is two-factor authentication effective against this scam?

Yes. 2FA adds a critical security layer, requiring a second verification step that can prevent unauthorized access even if your password is compromised.

Has Apple taken steps to prevent these phishing emails?

Apple has implemented stronger email authentication protocols and provides resources to help users identify phishing, but user awareness remains essential.

Are there other scams similar to this targeting Apple users?

Yes. Attackers frequently use fake subscription renewal notices, account suspension warnings, and other purchase alerts to trick users.

How often should I change my Apple ID password?

It’s recommended to change your password periodically, especially if you suspect any compromise, and always use a strong, unique password.

What if I don’t have two-factor authentication enabled?

Enable it immediately to significantly reduce the risk of account compromise.

Can I report phishing emails to Apple?

Yes. Forward suspicious emails to [email protected] to help Apple take action against scammers.

Why this matters

This phishing scam highlights the evolving tactics cybercriminals use to exploit user trust in legitimate brands like Apple. With Apple IDs often linked to sensitive personal and financial data, successful phishing attacks can lead to significant financial loss, identity theft, and privacy breaches.

As Apple continues to be a dominant player in consumer technology, attackers will persist in crafting believable scams targeting its users. Understanding these threats and adopting robust security practices is essential to protect personal information and maintain digital safety.

Sources and corroboration

This article synthesizes information from multiple corroborating reports, primarily sourced from TechRepublic’s detailed coverage of the scam as of April 22, 2026. Additional insights are drawn from cybersecurity advisories and user reports collected through Apple support forums and security communities.

• TechRepublic: [New Apple Phishing Scam Uses Fake $899 iPhone Purchase Alert](https://www.techrepublic.com/article/news-apple-phishing-scam-fake-899-iphone-purchase-alert/)
• Apple Support Resources on Phishing and Account Security
• User reports from cybersecurity forums and Apple community boards