That Call or Text Isn’t Apple. Here’s What to Do.

You’re working, driving, or just relaxing when your phone buzzes or rings. The caller ID might show “Apple Support” or “Apple Security,” or you get an urgent text warning about a compromised iCloud account or suspicious activity on your Apple ID. The message is clear: you need to act now to prevent your account from being locked or your data from being stolen.

These communications are designed to trigger immediate panic and override your better judgment. But before you tap a link or share a single digit of your password, it’s critical to know this: Apple will never call or text you unsolicited to ask for your password, security code, or to request remote access to your device.

Recent alerts from consumer protection agencies, including warnings highlighted by AL.com and Forbes, underscore that these scam campaigns are persistent and evolving. They target the trust users have in the Apple brand. Your first and most powerful defense is recognizing the scam and knowing exactly how to respond.

Common Scam Tactics to Recognize

Scammers use a handful of reliable scripts. Knowing them removes their power.

  • The Fake Support Call: You receive an unexpected call, often from a spoofed number that appears legitimate (like “Apple, Inc.”). The caller, sounding professional, claims there’s a critical security issue with your iCloud or that your iPhone has been flagged for suspicious activity. They’ll insist you need to verify your identity by providing your Apple ID password or a two-factor authentication code sent to your device.
  • The Phishing Text (Smishing): A text message arrives, often from a short code or a number disguised as Apple. It will contain alarming language—“Your Apple ID has been locked for security reasons”—and include a link. This link leads to a convincing but fake Apple login page designed to harvest your credentials the moment you enter them.
  • The “iCloud Breach” or “Unauthorized Purchase” Scam: Similar to the above, these messages create urgency around a fictional problem, like a large App Store purchase you didn’t make or a claim that your photos are being uploaded to a public server. The goal is to get you to call a provided phone number (manned by the scammers) or click a link to “dispute” the charge or “secure” your account.

Key Red Flags: How to Spot a Fraud

No matter how convincing the message, these elements are almost always present in a scam:

  • Unsolicited Contact: Apple initiates contact for support only if you have explicitly requested a callback through their official channels.
  • Requests for Sensitive Information: Legitimate Apple representatives will never ask for your password, your passcode, or for any multi-factor authentication codes sent to your device.
  • High-Pressure Urgency: Language like “immediately,” “within the next hour,” or “your account will be permanently disabled” is used to rush you into making a mistake.
  • Suspicious Links: Hover over (or tap and hold on mobile) any link in a text or email. If the URL doesn’t lead to an official apple.com domain (like apple-support.com is fake), it’s a phishing attempt.
  • Requests for Remote Access: A caller asking you to download an app like AnyDesk or TeamViewer to “fix” your phone is a major red flag. This gives them full control of your device.

What You Can Do to Protect Yourself

Protection is a mix of good habits and using the security tools already built into your iPhone.

  1. Verify Independently, Never Use Provided Links or Numbers. If you’re concerned about an alert, do not engage with the message itself. Instead, go directly to the official Apple website (apple.com) or open the Settings app on your iPhone, tap your name at the top, and check your device and account status there. If you need support, contact Apple through their official support page or the Apple Support app.
  2. Fortify Your Apple ID. Enable two-factor authentication (2FA) if you haven’t already (Settings > [Your Name] > Password & Security). This adds a critical layer of security, making it exponentially harder for anyone to access your account, even if they get your password.
  3. Silence Unknown Callers. Go to Settings > Phone > Silence Unknown Callers. This sends calls from numbers not in your contacts, Mail, or recent outgoing calls straight to voicemail. Scammers rarely leave coherent messages.
  4. Filter Unknown Senders for Texts. In Settings > Messages, enable Filter Unknown Senders. This separates messages from unknown numbers into a different list, preventing scam texts from intermingling with conversations from people you know.
  5. Keep Your Software Updated. Install iOS updates promptly. These updates often include critical security patches that fix vulnerabilities scammers might try to exploit.

If You’ve Already Responded to a Scam

Don’t panic, but act quickly.

  • If you shared your password: Change your Apple ID password immediately via the official Apple website or your device settings. Review your account for any unauthorized changes.
  • If you provided a verification code: Change your password immediately, as the scammer may now have access.
  • If you downloaded an app or allowed remote access: Disconnect your device from the internet (Wi-Fi and cellular) immediately to cut off the scammer’s access. Uninstall the app they had you download. If you’re concerned about persistent malware, you may need to erase and restore your iPhone from a known-clean backup.
  • If you entered payment information: Contact your bank or credit card company to report potential fraud and monitor your statements closely.

A Final Word

Scammers rely on fear and our instinct to trust familiar brands. By remembering that Apple will not reach out to you first to ask for personal information, you can break the first link in their chain. Your vigilance is your best security feature. When in doubt, always hang up, delete the message, and go directly to the source yourself.

Sources & Reporting: If you encounter one of these scams, you can report it to help others. Forward phishing texts to SPAM (7726) and file a report with the Federal Trade Commission (FTC) at ReportFraud.ftc.gov. For more on the latest scam alerts, advisories from sources like the FBI, Forbes, and consumer groups like Which? provide ongoing updates on these evolving threats.