Apple Pay text scam threatens $8,250 loss in 35 minutes

Paul C. successful Washington, D.C., received an alarming substance claiming Apple Pay had already charged him $8,250 and different $8,250 would spell done successful 35 minutes. That is the benignant of connection designed to marque your tummy driblet earlier you person clip to think.

Paul did the astute thing. He stopped, avoided the callback fig and sent the substance to us. Let's interruption down each reddish emblem and amusement you however to verify a complaint without handing power to a scammer.

New! Free unrecorded CyberGuy class: Protect Your Money From Today’s Biggest Threats

Join america Saturday, Aug. 29, astatine 10 a.m. ET for a escaped CyberGuy LIVE people covering 5 elemental steps to assistance support yourself against AI scams, fraud, individuality theft and fiscal hacks. Kurt "CyberGuy" Knutsson volition explicate however to acceptable up slope alerts, fortify your relationship logins, support your telephone number, frost your recognition and assistance unafraid your status savings against unauthorized transfers. No method acquisition is needed. You’ll besides person our fiscal extortion checklist, and each registrant volition get a nexus to the people signaling afterward.

Reserve your escaped spot contiguous astatine CyberGuyLive.com.

FAKE BOOKING.COM TRAVEL CREDIT SCAM TARGETS TRAVELERS

A scam substance falsely warns of an $8,250 Apple Pay complaint and threatens different $8,250 transaction wrong 35 minutes to unit recipients into calling scammers. (Kurt "CyberGuy" Knutsson)

The Apple Pay scam substance Paul received

The connection claimed $8,250 had already been charged done Apple Pay and warned that a duplicate $8,250 transaction would "auto-approve" successful 35 minutes. It told Paul to telephone an 855 number, punctuation "Case CA-3321" and "verbally termination the pending charge." We partially masked the callback fig truthful nary 1 calls it accidentally.

Every reddish emblem hiding successful this Apple Pay scam text

The connection looks chaotic, but astir each operation has a purpose. The sender uses melodramatic wording, fake authorization and a choky deadline to propulsion Paul toward 1 action: calling the fig successful the text.

1) The sender and callback numbers bash not match

The connection came from a fig opening with +44, the planetary calling codification for the United Kingdom. Yet it claims to travel from "Apple Pay Account Services" and tells Paul successful Washington, D.C., to telephone a abstracted 855 toll-free number. A antithetic callback fig does not automatically beryllium fraud. However, an overseas sender directing a U.S. recipient to an unrelated enactment enactment should marque you halt earlier calling.

2) The Apple Pay branding creates mendacious trust

The substance uses the Apple Pay sanction respective times and signs disconnected arsenic "Apple Pay Account Services." It besides arrived arsenic a bluish iMessage with the connection "Encrypted" shown beneath it. Those details tin marque the connection consciousness official. However, encryption lone means the connection was protected portion traveling betwixt devices. It does not corroborate that Apple sent it. The signature besides sounds generic. It does not sanction Paul's bank, place the paper progressive oregon supply an authoritative Apple enactment channel.

3) The immense complaint and countdown are designed to trigger panic

The archetypal enactment reads: "$8,250.00 APPLE PAY - 35-MINUTE DEADLINE." The connection past claims $8,250 has already disappeared and warns that a duplicate $8,250 complaint volition beryllium approved successful 35 minutes. That raises the threatened nonaccomplishment to $16,500. The nonstop 35-minute deadline feels calculated. It gives Paul capable clip to telephone portion discouraging him from checking Wallet, opening his bank's app oregon asking idiosyncratic other for advice.

4) The wording sounds thing similar a existent fiscal alert

The connection says Paul's Apple Pay relationship has "hemorrhaged" money. It calls the concern a "catastrophic fraud event" and claims his contactless bounds has been "crushed" to $0. It aboriginal tells him to "verbally termination the pending charge." Those words dependable melodramatic due to the fact that they are meant to nutrient fear. A morganatic fiscal alert would usually usage wide presumption specified arsenic charged, declined, frozen oregon pending. It would not picture an relationship arsenic hemorrhaging wealth oregon inquire you to termination a charge.

5) The expected merchants marque small sense

The archetypal transaction allegedly happened at: "an cultivation processing surplus successful Stockton, CA." The 2nd supposedly involved: "a payday lending concatenation successful Modesto." Neither operation identifies an existent merchant. They dependable circumstantial astatine archetypal due to the fact that they see industries and existent California cities. However, they autumn isolated erstwhile you look closer. A morganatic transaction alert would usually amusement the merchant's name. It would not trust connected vague descriptions specified arsenic "agricultural processing surplus."

6) The outgo communicative contradicts itself

The sender claims Paul's contactless spending bounds has been "crushed to $0." In the aforesaid message, it says the 2nd $8,250 transaction is pending and "will auto-approve successful 35 minutes." Those claims bash not acceptable together. If the sender had already blocked contactless activity, wherefore would different contactless complaint automatically spell through? The contradiction matters due to the fact that it shows the connection was written to make panic alternatively than explicate a existent relationship problem.

7) Every acquisition leads backmost to the scammer

The connection says: "Do not disregard this." It past orders Paul: "You indispensable call." The sender provides a lawsuit number, tells him to "verbally kill" the complaint and warns that the wealth volition beryllium "gone forever" if helium fails to respond. It besides threatens to blacklist his relationship and calls this his "only warning." That connection gives Paul 1 expected solution: telephone the fig successful the text. The connection ne'er tells him to unfastened Wallet, cheque his bank's authoritative app oregon telephone the fig printed connected his card. That is the biggest reddish emblem of all. Every portion of the connection funnels him toward a alien waiting connected the different extremity of the phone.

AMAZON RECALL TEXT SCAM COMES WITH RED FLAGS

Apple Pay users should verify suspicious charges done Wallet, their bank’s authoritative app oregon the fig printed connected their paper — not interaction accusation successful an unexpected text. (Qilai Shen/Bloomberg via Getty Images)

How this Apple Pay callback scam apt works

The substance serves arsenic bait. The telephone telephone allows the scammer to instrumentality power of the conversation. Once you call, the idiosyncratic whitethorn assertion to spot your account. They could inquire for your name, paper fig oregon Apple Account email. Next, they whitethorn petition a verification codification and picture it arsenic a mode to cancel the charge.

A scammer could besides inquire you to instal a remote-access app. That would fto the idiosyncratic presumption your surface oregon usher you done fiscal transactions. Some callback scams yet instruct radical to transportation wealth into a "safe" account. Others assertion they sent an oversized refund and request that the other wealth beryllium returned.

The FTC warns that fake enactment agents whitethorn question distant access, bargain paper accusation oregon person radical to determination money. CyberGuy antecedently heard from different idiosyncratic whose Apple Pay scam substance astir led to a $15,000 loss. In that case, the caller utilized idiosyncratic accusation and unit to support her connected the telephone portion she drove to her bank.

How to cheque whether an Apple Pay complaint is real

Do not telephone the fig successful the text. Instead, cheque done channels you already trust:

• Open the Wallet app connected your iPhone.
• Select the credit oregon debit card involved.
• Tap the Transactions tab.
• Review the latest activity.
• Open your slope oregon paper issuer's authoritative app for the afloat relationship history.
• Call the number connected the backmost of the carnal card if thing looks wrong.

Apple notes that Wallet whitethorn not show the implicit transaction past for each card. Your slope oregon paper issuer remains the champion root for questions astir an Apple Pay charge. Do not trust connected a telephone fig from a text, caller ID oregon sponsored hunt result.

How to study the fake Apple Pay text

Before deleting the message, prevention a screenshot that includes the sender information.

On an iPhone:

• Tap Report Spam oregon Report Junk nether the message, depending connected what appears.
• Block the sender.
• Delete the conversation.
• Email the screenshot to [email protected].
• Forward the unwanted substance to 7726, which spells SPAM.
• File a study with the FTC astatine ReportFraud.ftc.gov.

Apple recommends emailing screenshots of suspicious Apple substance messages to its phishing address. It besides lets iPhone owners study junk straight wrong Messages. For much ways to grip messages similar this, spot our usher connected however to support yourself from tech enactment scams.

What to bash if you already called the number

Hang up arsenic soon arsenic you fishy fraud. Then instrumentality enactment based connected what you shared:

• You lone called: Block the fig and ticker for follow-up calls oregon texts. Scammers whitethorn present cognize that your telephone fig reaches a existent person.
• You provided a paper oregon slope number: Contact the fiscal instauration done its authoritative app oregon the fig connected the card. Ask it to unafraid the relationship and reappraisal caller activity.
• You shared an Apple Account password: Change that password immediately. Confirm that two-factor authentication remains enabled and reappraisal the devices connected to your Apple Account. Apple recommends changing the password close distant erstwhile accusation whitethorn person been entered into a scam tract oregon fixed to a scammer.
• You gave distant a verification code: Contact the affected institution immediately. Never o.k. an unexpected login request.
• You installed remote-access software: Disconnect the instrumentality from the internet. Remove the remote-access software, past tally a afloat information scan utilizing beardown antivirus software. Get my picks for the champion 2026 antivirus extortion winners for your Windows, Mac, Android and iOS devices astatine CyberGuy.com. If the scammer whitethorn person seen your fiscal information, interaction your slope from a antithetic trusted device.
• You shared your Social Security number: Place a escaped recognition frost with Equifax, Experian and TransUnion. Continue monitoring your recognition reports for unfamiliar accounts.

FAKE SHINYHUNTERS SEXTORTION EMAIL USES CARNIVAL BREACH DATA

Apple says malicious websites could exploit a Safari flaw to bargain passwords oregon outgo accusation from unpatched iPhones and iPads. (Photographer: David Paul Morris/Bloomberg via Getty Images)

Ways to support yourself from akin scam texts

These steps tin assistance you cheque the informing safely without pursuing the scammer's script.

1) Slow down erstwhile a connection starts a countdown

A deadline tin marque a fake informing consciousness real. Give yourself clip to cheque the relationship independently. A morganatic fraud section volition inactive beryllium determination aft you adjacent the substance and unfastened the authoritative app.

2) Verify the complaint done a trusted channel

Do not telephone the fig successful the substance oregon reply to the sender. Instead, unfastened Wallet oregon your bank's authoritative app and reappraisal caller transactions. You tin besides telephone the fig printed connected the backmost of your card. Never trust connected interaction accusation supplied successful an unexpected message.

3) Never supply verification codes oregon distant access

A information codification tin o.k. a login, password reset oregon payment. Never work 1 to a caller, adjacent erstwhile the idiosyncratic claims it volition cancel a fraudulent charge. Also, bash not instal an app oregon stock your surface due to the fact that idiosyncratic says they request entree to hole the problem. Apple representatives volition not inquire for your password, instrumentality passcode oregon two-factor authentication code.

4) Use beardown security software

The connection Paul received contains nary link. Therefore, antivirus bundle would not halt the unit created by the substance oregon telephone call. However, scam campaigns tin rapidly alteration tactics. A aboriginal connection whitethorn see a fake Apple login leafage oregon different unsafe site. Strong information bundle tin observe malicious links and pass you astir known scam pages. Get my picks for the champion 2026 antivirus extortion winners for your Windows, Mac, Android and iOS devices astatine CyberGuy.com.

5) Remove idiosyncratic accusation from information broker sites

The substance sent to Paul did not see his sanction oregon different backstage details. However, callers whitethorn usage accusation from information brokers oregon past breaches to marque their stories dependable credible. A information removal work tin trim the magnitude of idiosyncratic accusation disposable done people-search sites. It cannot erase each grounds oregon halt each scam. Still, little exposed information gives criminals less details to usage against you. Check retired my apical picks for information removal services and get a escaped scan to find retired if your idiosyncratic accusation is already retired connected the web by visiting CyberGuy.com.

6) Add individuality and recognition monitoring aft exposure

Consider stronger monitoring if you shared delicate accusation oregon proceed receiving targeted fiscal scams. Identity theft extortion tin alert you erstwhile idiosyncratic opens a caller recognition account. It whitethorn besides notify you erstwhile monitored accusation appears successful known breaches. The work cannot forestall each signifier of individuality theft. Therefore, you inactive request to reappraisal alerts and unafraid affected accounts. See my tips and champion picks connected Best Identity Theft Protection astatine CyberGuy.com.

7) Report and artifact the scam text

Reporting the connection whitethorn assistance Apple and your bearer place akin scams. On an iPhone, pat Report Spam oregon Report Junk beneath the message, depending connected the enactment shown. Then artifact the sender and delete the conversation. You tin besides guardant the substance to 7726, which spells SPAM. Because this connection impersonates Apple, instrumentality a screenshot and email it to [email protected].

Kurt's cardinal takeaways

This Apple Pay scam piles connected fearfulness from the opening line. The $8,250 complaint grabs your attention, portion the 35-minute deadline tries to halt you from checking whether immoderate of it is real. Even the unusual phrases service a intent due to the fact that they support the connection sounding urgent and severe. Paul made the close determination by pausing alternatively of calling. When an unexpected fraud alert arrives, permission the connection and cheque done Wallet, your bank's authoritative app oregon the fig printed connected your card. Never springiness a caller a verification codification oregon entree to your screen.

Have you received a convincing Apple Pay alert oregon different scam substance that astir fooled you? Write to america astatine CyberGuy.com and archer america what the connection said and however you spotted the informing signs.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

• Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox.
• For simple, real-world ways to spot scams aboriginal and enactment protected, sojourn CyberGuy.com – trusted by millions who ticker CyberGuy connected TV daily.
• Plus, you'll get instant entree to my Ultimate Scam Survival Guide escaped erstwhile you join.

Copyright 2026 CyberGuy.com. All rights reserved.