✕HoaxEnglish

‘We’ve Received Your Payment’ Apple Phishing Scam

Fact-check by Hoax-SlayerPublished 2 min read

The original site is no longer online; links go to the Internet Archive copy.

What the fact-checkers found

Yet another phishing scam is targeting Apple users. This version falsely claims that your Apple account was used to make a purchase on the App store from a location in Brazil.

The email claims that, if you did not make such a purchase, you should open an attached file and follow the instructions to cancel the order.

The attachment contains a fake Apple invoice complete with Apple logo and formatting.

If you click the “Dispute Transaction” button in the document, you will be taken to a fraudulent web page that has been made to look like the genuine Apple website.

Once on the fake page, you will be asked to log in with your Apple ID and password. Next, you will be taken to a bogus refund form which asks for you credit card numbers, your name and contact details, and other identifying information

After clicking the “submit” button on the fake form, you may see a message claiming that you have successfully reversed the transaction.

But, now, online criminals can use the information you supplied to hijack your Apple account, commit credit card fraud, and steal your identity.

Apple invoice phishing scams like this are very common. If you receive what looks like an Apple notification for a purchase that you know nothing about, do not click any links or open any attachments that it contains. It is always safest to log in to your online accounts by entering the address into your browser’s address bar or via a trusted app.

An article on the Apple website explains how to recognise and report such scam attempts.

The scam email:

Subject: [Notification] – We’ve received your payment

[ApplePay] – iTunes was used to purchase in App Store on Macbook Pro 13

Date and Time : June 5, 2017 7:02 PM GMT

Transaction ID : 9SA57818XL053022U

Order ID : 96782658

Operating System : OS X 10.12.4

Browser : Safari

Location : Erechim – RS, Brazil

If the information above looks familiar, you can ignore this email.

If you have not recently purchasing an Apps or In-Apps item(s) in a MacBook Pro 13″ with your Apple lD, please read our attached document and follow the instruction to cancel this transaction.

Sincerely,

Apple Account Department

Copyright @ 2017 Apple Inc. 2211 N 1st St, San Jose, CA 95131, United States. All right reserved.

The attachment:

Original source: hoax-slayer.netNo longer online, so this opens the Internet Archive copy.Open the archived copy
Pass it on

Got a similar message?

Paste it into the detector and see whether it matches a known hoax.

Check a similar message
Browse the archive →