Is this security alert from Apple a scam?
No. Apple is one of the world's largest technology companies, and its devices and iCloud services are entirely legitimate. What is not legitimate is the steady stream of fake Apple ID lock emails, virus pop-ups and 'Apple Support' calls that borrow the name, because scammers know an Apple security warning gets opened fast. The good news: a few quick checks almost always tell a real Apple message from a fake.
Genuine Apple links lead to apple.com, icloud.com — but a link can be made to look real, so don't go by the link alone. Below is exactly what a real Apple message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real Apple message looks like
Genuine messages from Apple link to apple.com, icloud.com. Treat a link to any other address as a warning sign.
- Genuine Apple emails always come from an address ending in @apple.com or @icloud.com
- Apple never sends unexpected security alerts that ask you to click a link to unlock an Apple ID
- Real Apple communications never contain urgent threats about your device being locked or infected
- Apple does not display browser pop-ups or banners claiming your Mac has a virus
- Apple ID sign-ins only occur when you deliberately visit apple.com or icloud.com yourself, or open Settings on your device
What Apple will never do
- Send an unexpected security alert asking you to click a link to unlock or verify your Apple ID (sign in only by typing apple.com or icloud.com yourself, or through Settings on your device)
- Display a browser pop-up or banner claiming your Mac has a virus, or list a phone number to call for help
- Cold-call you about a security problem on your device; no legitimate tech company does
- Ask for your Apple ID password or verification codes through a link in an email or message
- Threaten that your account or device will be locked within minutes unless you act
Common Apple scams
- Emails claiming your Apple ID has been locked or suspended, with a link to 'verify' your details on a fake login page
- Browser pop-ups or ads claiming your Mac is infected and urging you to call a listed number for Apple Support
- Messages that direct you to enter your Apple ID password on a lookalike site to 'prevent account closure'
Red flags to watch for
- The message or pop-up shows a phone number and asks you to call Apple immediately
- The link domain does not end in apple.com or icloud.com
- You receive an urgent warning without having tried to sign in to your Apple ID
- The email or pop-up contains spelling errors or odd formatting that Apple would never use
- It pressures you to act within minutes or risk losing access to your account or device
Apple scam examples
These composed examples show how scams impersonating Apple typically read, with the tells that give each one away. Compare them against anything you've received.
Subject: Action required: your Apple ID has been suspended. Dear Customer, unusual sign-in activity means your Apple ID will be permanently disabled within 24 hours. Restore access now at appleid-restore[.]example before your iCloud photos and data are deleted.
What gives it away:
- The link is not apple.com or icloud.com; Apple never sends unexpected alerts asking you to click a link to unlock an Apple ID
- 'Dear Customer' is a generic greeting on a message that claims to know your account intimately
- The 24-hour deletion deadline exists to make you click before you think; a real account issue shows up in Settings on your device
A full-screen browser pop-up with an Apple logo declares 'Your Mac has been infected. Do not shut down your computer.' An alarm sound plays and an 'Apple Support' number is displayed, with a warning that your banking details are being stolen right now.
What gives it away:
- Apple does not display browser pop-ups claiming your Mac has a virus, and it never puts phone numbers in security warnings
- Calling the number connects you to a fake technician who will ask for remote access and payment
- The alarm and 'do not shut down' instruction are theatre; closing the browser ends the 'infection'
Apple: your iCloud storage payment failed and your account is frozen. Update your billing details today at icloud-billing-update[.]example to avoid losing your photos and backups.
What gives it away:
- The domain is not apple.com or icloud.com; billing and storage are managed in Settings on your device, never through a texted link
- A frozen-account threat paired with a same-day deadline is the classic pressure combination
- Entering card details on the linked page hands them straight to the scammer
Not sure about your message?
Paste the suspicious Apple text or email and get an instant scam verdict, free.
How to verify a message from Apple
- Don't tap the link, call the number, or reply to the message or pop-up
- Check your Apple ID yourself: open Settings on your iPhone, iPad or Mac, or type apple.com or icloud.com into your browser; any genuine account issue will be visible there
- Manage subscriptions, billing and storage inside Settings on your device, never through an emailed or texted link
- If a virus pop-up won't close, quit the browser entirely; a real Apple warning never appears as a webpage
If you have been scammed in Apple's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- If you entered your Apple ID password, change it immediately at apple.com or in Settings on your device, and turn on two-factor authentication if it isn't already on
- Change that password anywhere else you reused it
- If you shared card details or paid a fake 'support' fee, call your bank straight away to block the card and dispute the charges
- If you gave a caller remote access, disconnect the device from the internet, remove any software they had you install, and change your passwords from a different device; contact IDCARE (idcare.org) if identity documents were shared
- Report the scam to Scamwatch and ReportCyber using the links below, and forward scam texts to 7226 (spells SCAM)
Where to report a scam impersonating Apple
Received — or fell for — a message impersonating Apple? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Latest Apple scams in 2026
Campaigns using Apple's name cycle through a familiar set: emails claiming an Apple ID is locked or suspended, texts about failed iCloud storage payments, and browser pop-ups declaring a Mac infected while listing an 'Apple Support' number to call. The channel changes; the play does not. Every version needs you to act inside the message itself, whether that is tapping a link, entering your password on a lookalike page, or phoning a fake technician who asks for remote access and payment. The habit that beats all of them is the same: close the message, open Settings on your device or type apple.com yourself, and check there.
Frequently asked questions
I got an email saying my Apple ID is locked with a link — is it a scam?
Yes. Apple never sends emails that ask you to click a link to unlock your Apple ID. Go directly to apple.com or open Settings on your device instead.
How do I know if an Apple email or popup is real?
Check the sender address ends in @apple.com or @icloud.com, and only ever sign in by typing those domains yourself. Ignore any pop-ups claiming your device is infected.
What should I do if I clicked a suspicious Apple link?
Change your Apple ID password immediately at apple.com, enable two-factor authentication, and report the message at scamwatch.gov.au.
Apple says my Mac has a virus and gives a phone number — is that legitimate?
No. Apple does not display security warnings in browsers or provide phone numbers in pop-ups. Close the window and report it at cyber.gov.au.
What is Apple's real website?
Apple's only real websites are apple.com and icloud.com. The safest way to check anything about your Apple ID, subscriptions or iCloud storage is to open Settings on your iPhone, iPad or Mac, or to type those domains into your browser yourself. Never use a link or phone number supplied by the message you are trying to check.
How do I report an Apple scam email or text?
Report it to Scamwatch (scamwatch.gov.au) so the National Anti-Scam Centre can track the campaign, and forward scam texts to 7226 (spells SCAM) so carriers can block the sender. If you lost money or gave a scammer access to your device, also report it to ReportCyber at cyber.gov.au.
Related scam types
Scams impersonating Apple usually fit one of these patterns. Learn how each works:
Related brands
Other tech names scammers impersonate — check a message from one:
Sources
- Phishing scams: how scammers pose as trusted organisations (Scamwatch (National Anti-Scam Centre))
- Phone scams and fake tech support calls (Scamwatch (National Anti-Scam Centre))
- Report a cybercrime or cyber security incident (Australian Cyber Security Centre)
This guide is general information, not legal or financial advice — always verify with Apple through an official channel.