A
Apple Phishing Alerts
Apple ID, iCloud and Apple Pay impersonations designed to create panic and harvest credentials or payment details from NZ users.
Official indicators
A
Apple<no_reply@email.apple.com>
To: you@example.com
For your security, please Manage your Apple Account to complete this action.
Original URL: https://appleid.apple.com. Click or tap if you trust this link.
What real Apple messages look like
- Legitimate Apple emails come only from @apple.com, @id.apple.com, @email.apple.com, or @icloud.com
- Apple will never ask for your password, device passcode, or two-factor authentication code in an email or on a website
- Apple will never ask you to tap Accept on an unexpected two-factor authentication prompt
- Real receipts and purchase notifications are always available in your Apple Account at appleid.apple.com
- Apple will never ask you to call a phone number provided in an email to resolve a security or fraud issue
- Report suspicious emails to Apple directly at reportphishing@apple.com
Common spoof patterns
- "Your Apple ID has been locked" urgency emails driving you to a fake login page designed to harvest your credentials
- Fake App Store or Apple Pay purchase receipts claiming an unauthorised transaction, with a "cancel order" link that steals card details
- "Unusual sign-in detected" alerts pushing you to enter your Apple ID and 2FA code on a lookalike Apple page
- Phone callback scams: emails urging you to call a fraud prevention number where a scammer requests verification codes or payment
- Real Apple account-change notification emails weaponised as part of a social engineering flow
- iCloud storage warnings claiming your account will be suspended unless you verify payment details immediately