Apple Approval Notice text message scam

[Apple Security Alert]


We have noticed that your Apple id was recently used at "APPLE STORE" for $143.95, paid by Apple Pay Pre Authorization. Also some suspicious sign in request and apple pay activation request detected. That looks like suspicious to us. In order to maintain the security and privacy of your account we have placed those request on hold. If NOT you? Please Call +1 850-85*-**** to talk to an Apple Representative. Failing may lead to auto debit and charge will not be reversed. Call +1 850-85*-**** immediately to cancel this charge.


Customer Support: +1 850-85*-****

Billing Support : Subscriptions and Billing - Apple Support


[Edited by Moderator]


iPhone 15, iOS 17

Posted on Aug 6, 2024 3:23 PM

Reply
Question marked as Top-ranking reply

Posted on Oct 21, 2024 10:20 AM

What if, like a fool, I called the number provided. I disconnected before there was even an answer. How bad did I mess up?


I will be reporting the phishing text immediately of course.

291 replies
Sort By: 

Feb 5, 2025 11:47 AM in response to Devinalford44

Devinalford44 wrote:

I agree, even though I am so tempted to call them and keep them on the phone for two hours and tie them up from scamming other people. I'm sure my number would get escalated on their call lists and I'd pay for the enjoyment of hassling these terrible people.

I have often had that urge myself, especially if I've already had a bad day.

Reply

Feb 10, 2025 1:32 PM in response to ronalee59

That's good, they are still making grammatical errors even in this age where various tools are available. It really makes our work easier to identify it as a scam.


People should avoid calling these numbers at all costs and do their research beforehand. A simple search would tell you that it's a big scam, and everyone is receiving these text messages. The best option is to ignore them and report them as spam.


My research also tells me that various types of scams are happening, and these scammers constantly change their methods, like claiming your 'Apple ID is suspended' or that 'you need to upgrade your Cloud ID.' They have tons of ways to scam you.


https://www.forbes.com/sites/daveywinder/2024/11/27/new-warning-for-2-billion-iphone-ipad-mac-users-your-apple-id-is-suspended/


This is the latest phishing scam designed to steal your Apple ID and password, allowing scammers to hack your account, steal your content, or trick you into buying expensive but useless software.


https://gadgetlite.com/2025/02/apple-users-beware-phishing-scam/



Reply

Feb 13, 2025 6:43 AM in response to Jennyzazs

Jennyzazs wrote:

This is not my charge I haven’t used Apple Pay please dispute this charge thank you


Some things to consider about these messages.

  • Be aware of social engineering and phishing. Folks trying to get payment info or Apple Account credentials or money directly. The sextortion “pervert” scam tries to get money directly. Well, that one tries to get cryptocurrency. Others pretend to be the Apple Account login portal to collect your credentials.
  • Most payment card fraud detection systems do not operate as this scam suggests. They don’t hold and then release a payment if you don’t call, they hold a payment and will only release if you call. Apple certainly doesn’t do the countdown-to-release, nor has any other payment card I’ve ever met. They all hold until you call and release.
  • As far as payment card companies are concerned, there is no such thing as a charge that cannot be reversed. Not if they can help it.
  • Apple will mention their Apple Card payment card if there are issues, and Apple won’t be contacting you about other payment cards. And nowhere here is the payment card or last four of the account listed.
  • If you are still concerned about a message like this, look up the number for Apple or whichever other payment card you’re using
  • We’re not Apple Support, we’re other users like you. We can’t access your Apple Card account, nor your Apple Account, your billing info, nor receive a fraud report. No more than can the senders of that spam scam.
  • Sending email addresses, and calling telephone numbers, and sending SMS numbers can all be faked.
  • Apple spelling, phrasing, and grammar is usually quite good. Messages from Biff’s Emporium and Pancake House might not be clearly worded or well-phrased, because Biff isn’t good at the grammars, but Apple usually is.
  • Apple doesn’t send SMS messages, they’ll send notifications, or they’ll display a message in Wallet app. Or both.
  • Apple and most other payment providers will typically use toll-free numbers.



A review of clues of problems from some of the usual text of this spam scam:


We have noticed that your Apple id



Apple recently renamed “Apple ID” to “Apple Account”, and the spammers haven’t caught up with that.



was recently used at "APPLE STORE"


Yeah, most payment providers will offer more details about the attempted purchase. And Apple will usually use better grammar and formatting.



for $143.95, paid by Apple Pay Pre Authorization.


Apple Account balances can be used with the Apple Store, but not with Apple Pay, and “Pre Authorization” is meaningless word salad.


You’ll also find lots of discussions of $143.95 around the ‘net because the spammers have commonly been using that same sum for months, though they (or some other scammers spamming similar scams) have occasionally been using different amounts.


Also some suspicious sign in request and apple pay activation request detected.


Bad grammar, and word salad.


That looks like suspicious to us.


The “That looks like suspicious to us” is word salad.


In order to maintain the security and privacy of your account we have placed those request on hold. If NOT you? Please Call +1 850-85*-**** to talk to an Apple Representative.


If you search for that number (pr whatever other number the spammers are using right now), you’ll find it is not associated with Apple anywhere on the ‘net.


Failing may lead to auto debit and charge will not be reversed. Call +1 850-85*-**** immediately to cancel this charge.


More poor grammar, and more word salad.


Also not the way fraud detection works.


And again, “auto debit and charge will not be reversed” is not how payment cards work.


Want more info? There are twelve pages of discussions of this spam scam here, as well.


And as mentioned, look up contact info for Apple at the Apple website, and call them to confirm. Not the number in the spam. Here is a list of contact numbers posted at the Apple website:





As for the other reply here, I’m not sure what Syvarwolf is referring to with the region-related info.


Reply

Feb 20, 2025 12:50 PM in response to MrHoffman

Nope. As soon as he asked for my ID I was like, nah. I'll call Apple direct, not some number provided. He called back and when I said I'm gonna have to think about this (meaning I'm gonna check my bank) he hung up. Apple reps aren't rude and they don't hang up. 😂 that's when I knew.

Reply

Mar 3, 2025 7:59 AM in response to Seddy2765

re: Windows 11


Every possible telephone number in the US is known, and a computer can text them all.


Everybody gets scam text messages too, as VoIP servers get compromised, and as carriers can be slower than we’d all like to detect and block the resulting messages.


It becomes a game of whack-a-mole, with callback numbers blocked, and with VoIP servers getting re-secured, and other callback numbers and VoIP servers getting compromised.



re: “coffee shop” VPN services


On Apple platforms, the “coffee shop” VPNs are useful for geoshifting for website or CDN testing or such, but are largely otherwise useful for added overhead, and to the VPN vendor for purposes of personally-identified metadata collection for tracking and advertising.


Various purportedly-no-logging VPN services have been caught logging when their “non-existent” logs were found leaked onto the ‘net, too. And absent details such as responses to warrants, I’d assume all such “coffee shop” VPN services log data.


As for Windows 11 and “coffee shop” VPNs, I’d hope Microsoft has been encouraging app developers away from unencrypted traffic too, their fondness for app compatibility means old bugs can continue to bite. Put differently, an add-on VPN might be helpful, but I’d look to run my own (such as the Algo VPN server, or a firewall-based VPN server on my own network) if privacy was a concern.



TL;DR:


millions of these scam texts get sent out, and millions of scam emails such as “hey pervert” also get sent.


Reply

Mar 3, 2025 12:57 PM in response to ronalee59

Just received a similar phishing text message today:

The sender number was +63 953 301 ****

Country code 63 is the Philippines.


The messages always seem to contain similar content.

I suspect the scammers are the same or they cut and paste the same phishing messages.

Reported it to reportphishing@apple.com



Apple Approval Notice


We have noticed that your Apple iCloud id was recently used at "APPLE STORE - CA" for $143.95, paid by Apple Pay Pre Authorization. Also some suspicious sign in request and apple pay activation request detected. That looks like suspicious to us. In order to maintain the security and privacy of your account we have placed those request on hold. Your Photos, Data, Bank Information and Cards are at risk. If NOT you? talk to an Apple Representative. Failing may lead to auto debit and charge will not be reversed. Call +1 802309**** immediately to cancel this charge.




Billing Department :  Subscriptions and Billing - Official Apple Support


Have a great day!


[Edited by Moderator]


Reply

Mar 4, 2025 7:01 AM in response to iLuvApples2

iLuvApples2 wrote:

Just got this same text and it’s still happening sent by fra****************41@gmail.com
spammed and reported!


Of course this scam still happening.


This scam will continue until it’s less profitable, and the scam text will get tweaked until profit improves.


As will continue the “hey pervert” and sextortion scams, cryptocurrency scams, romance scams, kidnapping or bail scams, loan re-payment scams, tax re-payment scams, arrest warrant scams, apartment rental scams, etc.

Reply

Mar 4, 2025 8:04 AM in response to iLuvApples2

iLuvApples2 wrote:

Well hopefully you noticed this is not
MY email but the frauds email so y’all can just block ahead of time. I wouldn’t share my own email in an open forum like this. I think that’s a given.

There is no point in blocking the email that sent you spam or a scam. There are an infinite number of email addresses, and the bad guys never reuse an email (or a phone number).


The plus side of this is that YOU can have an infinite number of email addresses using iCloud+ Hide My Email. It will create a new email address for every site you visit, so identity consolidators can’t trace you from one site to another. And it will also tell you which sites share your email address with other sites and businesses.

Reply

Mar 12, 2025 11:15 AM in response to nettiez123

nettiez123 wrote:

I just got a text from a ne****u@hotmail.com and they are using a different number. I was told to call +1-87*****91. Just some extra info to add. I am blocking and deleting now.

Deleting is good, blocking is wasted effort because they will never use that email address again.

Reply

Mar 17, 2025 10:53 AM in response to Jsmiley1214

Jsmiley1214 wrote:

It’s March 17, 2025 and I just received this text verbatim.

The same spam has been going on for many months now, with just the sending address being changed and sometimes the phone number to call. If one number gets shut down, they can insert another. As with any Spam you receive, it is what you do with it that matters. Never call a number or use a link to provide personal information from any email or message and you never have to worry about it. Just delete and move on with your day. If you get an email that appears to be from your bank or Apple or any other company, the recommendation still applies and you can use your own methods to contact them to verify the information without using any from the email/message.

Reply

Mar 20, 2025 9:27 AM in response to kenitech

kenitech wrote:

The crazy thing I just got this like 10 seconds after I clicked to download a free app in the App store on my desktop. Seems like an insane coincidence. But makes me a little nervous.

If you think about it, you would have been doing something 10 seconds before the message came in. You may have just navigated to a web page, made a purchase on a website, or just updated your OS and none of those would be related to the message either. It really is not that crazy.

Reply

Mar 20, 2025 9:35 AM in response to kenitech

kenitech wrote:

The crazy thing I just got this like 10 seconds after I clicked to download a free app in the App store on my desktop. Seems like an insane coincidence. But makes me a little nervous.


Millions of people get this scam spam.


Pick any situation, and somebody somewhere will be getting this scam spam during that activity.


The disconcerting part of this now-nineteen-page thread is how many new people are getting spammed (and then posting here), which unfortunately means the scammers are actively growing the sizes of their spamming lists.

Reply

Mar 21, 2025 10:39 AM in response to kenitech

kenitech wrote:

I probably download an app from the app store on my laptop maybe 5 times in a year. So yes, a really strange coincidence.

But coincidence it is. These scam messages are sent by the millions every day. You were not targeted specifically; the criminals behind it have access to all of the hundreds of data breaches that may have contained your email address. To get an idea if it has been compromised go to https://haveibeenpwned.com

Reply

Apple Approval Notice text message scam

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.