A scam text received by a Daily Voice editor claims Apple Pay is confirming a $318.64 payment request submitted through an unverified device.
“Our records show a $318.64 request in Cupertino, CA submitted through a device that has not completed verification,” the message states.
It then asks, “Is this payment request yours?” Recipients who do not recognize the alleged charge are directed to call the phone number listed in the message. That number has been omitted from this report.
The text signs off as the “Apple Payment Confirmation Department” and includes a confirmation code to make the warning appear legitimate.
The message matches tactics outlined in Apple’s guidance on phishing and social engineering scams.
Apple warns that scammers impersonate trusted companies and claim unauthorized charges were made through Apple Pay. They then offer to stop or reverse the transaction.
The goal is to create a sense of urgency and persuade the recipient to surrender an account password, security code, financial information, or money.
Apple advises consumers to presume that an unexpected request for personal information is fraudulent. Anyone concerned about an account or payment should contact the company directly through its official support channels.
Recipients should not call a number included in a suspicious message. They should also not reply, open links, download attachments, or provide passwords or verification codes.
Apple says it never asks customers to disclose an Apple Account password or verification code to receive support. The company also will not instruct users to disable two-factor authentication or other security protections.
Consumers can check for unauthorized activity by opening the Wallet app or signing in through Apple’s official website.
Anyone who entered a password or other personal information on a suspicious website should immediately change the Apple Account password and confirm that two-factor authentication is enabled.
Suspicious texts impersonating Apple can be reported by taking a screenshot and emailing it to [email protected]. Users also can select Report Junk beneath the message, block the sender, and delete the text.
Scam calls can be reported to the Federal Trade Commission at ReportFraud.ftc.gov.
Check back with Daily Voice for the latest updates.
Click here to follow Daily Voice and receive free news updates.
