SMS Based scam impersonating Apple, leading victims to fake support numbers for social engineering
Take action: If you get unexpected SMS messages about Apple ID suspicious activity, never call phone numbers or follow links provided in the message - they're scams designed to steal your credentials and payment info. Log directly into appleid.apple.com to check your account, or call Apple's real support number from their official website.
Learn More
A combined SMS and voice phishing scam campaign is actively targeting Apple users. Users recieve SMS messages from unknown numbers that impersonate Apple Support and attempt to lead the victim to dial a fake support phone number.
The attack will lead to persuading victims to give payment card numbers, install malware on their computers or pay for "processing.
The scam starts as an SMS text message designed to look like an urgent security alert from Apple's billing team. The message warns of a suspicious transaction and an unauthorized "Apple Pay setup attempt" in California.
This is the full scam message (with the emoji that was part of the message):
Please verify this Apple ID activity now
Dear Customer,
We observed recent activity on your Apple ID and request verification.
Details of recent actions:
- Transaction amount: $143.95
- Location: Apple Store – CA
- Action: Apple Pay setup attempt
If this was not initiated by you, please call Apple Support at +1 833-608-3976.
Apple Support Contact Information
📞 Apple Billing Support: +1 833-608-3976
🌐 Billing Assistance: https://support.apple.com/billing
Apple will never ask for passwords or full payment info via email or phone.
Report suspicious communications to reportphishing@apple.com
Thank you for your vigilance.
Apple ID & Billing Security Team
Apple Inc. © 2025
The message uses Apple's style language and references legitimate Apple domain (support.apple.com/billing) to appear credible. It even includes real reporting email (reportphishing@apple.com) as a trust anchor as well as a copyright notice and formal department name. But the scam implies urgency and fear through the "suspicious transaction in progress" and command language: "Please verify this Apple ID activity now".
The message states "Apple will never ask for passwords" but is directing victims to call a number. It creates cognitive dissonance that makes victims less suspicious when the "support agent" asks for credentials. The victims think: "They warned me about scams, so this must be real"
If a user calls the fraudulent number +1 833-608-3976, they are connected to scammers impersonating Apple Support who will attempt to extract Apple ID credentials, get credit card numbers, CVV codes, and billing information, gain remote access to devices via screen sharing software, install malware or trick victims into purchasing iTunes gift cards for "verification"
The legitimate Apple Support number is 1-877-571-0223 (verified from support.apple.com), not the number in the scam message.
Comparison with Legitimate Apple Communications
| Element | Scam Message | Legitimate Apple |
|---|---|---|
| Delivery | SMS from unknown number | Push notifications, verified email from @apple.com domains |
| Phone Number | +1 833-608-3976 (FAKE) | 1-877-571-0223 (REAL) |
| Greeting | Generic "Dear Customer" | Personalized with your name |
| Call to Action | "Call immediately" | "Review in Settings" or "Sign in to your Apple Account" |
| Transaction Details | Vague location "CA" | Specific merchant name, date, time |
| Urgency Level | Extreme ("verify now") | Moderate, explains next steps |
| Verification Method | Phone call only | In-app review, account settings, official website |
How to Stay Safe
- Don't rush! Nothing is that urgent - especially if it claims urgency
- Verify independently - Log into your Apple account directly at appleid.apple.com (never from a link). Never dial a phone from the SMS message, call an official phone number from official website.
- Check transaction history in your Apple ID account settings
