9 common Apple Pay scams and how to protect yourself

If you’ve ever fallen for a scam involving Apple Pay, you aren’t alone. According to the Federal Trade Commission (FTC), there were about 5,000 reports of scammers impersonating Apple in 2023 alone, which led to total losses of around $17 million.

Keep in mind these numbers only represent a fraction of Apple Pay scams — many other ruses exist, including fake verification or security code messages, bogus refund offers, and attacks carried out over unsecured public Wi-Fi.

Read on to learn more about common Apple Pay scams, including how to identify and avoid them.

1. Customer support

Customer support and tech support scams occur when a criminal impersonates a member of Apple’s support staff. These scams often start with a claim that your device is compromised or your Apple Pay account has been "locked."

Next, cybercriminals may ask you to send payment for urgent repair services, transaction reversals, security upgrades, or regulatory fees. While there’s no single script, these requests are usually framed to sound plausible and tied to account recovery. ​​They may also try to extract sensitive information that could give them access to your Apple account.

Apple Pay customer support scammers commonly request:

• Payments via Apple Cash to “test” your device.
• Your Apple ID email address and password.
• That you disable security features like two-factor authentication (2FA) or Find My.
• Permission to remotely access your device (often via screen sharing).
• That you click a link to help “fix” an issue with your account.

Apple has strict policies against asking for personal information like user passwords and account information. Instead, Apple’s customer service team will send a notification to your device. Apple representatives also won’t ask you to share your screen or tell you to click unusual links, so ignore these requests and report them to Apple’s actual customer support staff.

2. Fraud alert texts

Fraud alert text scams involve criminals sending "urgent" SMS or smishing messages that mimic official bank or Apple notifications. In these scam text messages, attackers may claim to have detected a suspicious Apple Pay transaction and urge you to take immediate action. In reality, they want to collect payment to "cancel" the charge or sensitive information to "verify" your identity.

Fraud alert scammers often use these tactics to steal:

• Your Apple ID and password via a fake login page.
• Full credit or debit card numbers.
• Social Security numbers.
•  One-time passcodes sent to your device.

They often include a link to a spoofed website that looks like the official Apple website or a legitimate banking portal. Once you enter your credentials, the scammer captures them in real-time. Then, they’re free to hijack your account or make unauthorized purchases.

3. 2FA requests

Two-factor authentication (2FA) request scams happen when a scammer tries to steal authentication codes to access your account. These codes are usually sent to your email, phone, or authentication app (such as Google Authenticator). If you’re targeted in a 2FA scam, it often means criminals already have your password and only need the one-time verification code to complete the login and take over your account.

Scammers tend to rely on bots, such as automatic dialers and texting systems, to make fake authentication requests in bulk. In other cases, these authentication requests can be made through a fake website.

In extreme cases, scammers may attempt to hijack your number with a SIM swap attack, where they convince your phone provider to switch your number to a SIM card they control. If they’re successful, they can get direct access to text-based 2FA codes, compromising your account.

4. Security breaches

Apple Pay has strong security in place to protect your card numbers. However, you may still be at a higher risk of Apple Pay-related scams if the stores or online services you visit are hit by a data breach. When businesses are breached, information like your name, email, and partial transaction data can become exposed.

Scammers often use this stolen data in Apple Pay phishing and customer support scams, where criminals reference real purchases and account details to pressure targets into sending money or sharing verification codes.

To reduce the risk of having your personal information used against you following a data breach, limit the websites and businesses you share your personal data with. Subscribing to an identity theft protection service like LifeLock Advanced also monitors for fraudulent use of your personal information and provides robust restoration services if your money is ever stolen as a result of identity theft.

5. Gift cards

Gift card scams are when a fraudster tries to get you to pay them with gift cards, which are difficult to trace. They may suggest you use Apple Pay as a convenient way to purchase and send them an Apple Gift Card or other digital gift card.

Scammers often reuse the same stories to trick you into sending a gift card. Here are a few to look out for:

• Impersonating the IRS or another government agency and saying you owe them money and need to make an immediate payment.
• Pretending to be a company and claiming you need to pay them to fix a tech support issue.
• Impersonating a friend or family member who’s in trouble and needs money fast.
• Pretending to be your utility company and threatening to shut off your services unless you pay them immediately.
• Telling you that you’ve won a prize, but you need to pay fees through a gift card to claim it.

6. Stolen credit cards or fake check scams

Fake check and stolen credit card scams are both forms of overpayment scams — attacks where scammers “accidentally” send too much money and request an Apple Cash refund for the excess.

Here’s an example of this scam from a Reddit user:

Scammers may use stolen credit cards or counterfeit checks — not their own money — to send funds initially. They then pressure you to issue a refund before the payment fails to clear or the charge is reversed, ensuring they get your money before you realize the original payment was fraudulent.

These scams are commonly found on online marketplaces, such as Craigslist and Facebook Marketplace.

7. Unsecured Wi-Fi

Using Apple Pay or any digital wallet on unsecured public Wi-Fi networks increases the risk of unauthorized access to your personal information. Without security measures like VPN encryption, attackers on the same network can intercept data or monitor traffic, potentially exposing login credentials or information linked to your Apple ID.

Once compromised, attackers can exploit this access to initiate fraudulent transactions, launch phishing scams, or commit identity theft.

8. Fraudulent businesses

Fraudulent businesses may claim to be Apple-affiliated and offer large Apple Cash rewards to trick customers into entering their Apple Pay details. In these scams, fraudsters may request personal information like your Social Security number, address, full name, and Apple ID credentials.

While some banks and other companies do promote Apple Cash rewards, legitimate offers will never require you to provide your full Apple ID password, verification codes, or send money to claim the reward. If you do provide this information, it can lead to unauthorized access to your Apple Pay account, potentially resulting in financial loss.

Apple Pay scam warning signs

Apple Pay scams usually begin as suspicious texts or emails, and often:

• Come unexpectedly and unsolicited.
• Include an unexpected payment via Apple Pay.
• Request sensitive information like your Apple ID, password, or bank card.
• Create a sense of urgency by threatening legal action, financial penalties, or account suspension.
• Contain a link or attachment.
• Originate from an email address or phone number doesn’t match what’s listed on Apple’s official website.

If you suspect you’re being targeted by an Apple Pay scam, don’t respond. Clicking links can result in a malware infection and potentially compromise your personal information.

Instead, confirm any unusual requests by contacting Apple’s official customer support at (800) 275-2273.

Steps to take if you fall victim to an Apple Pay scam

If you fall victim to Apple Pay fraud, it’s important to take quick action to help limit the damage and re-secure your Apple Pay account. Here are the steps you should follow:

1. Contact Apple support to notify them of your account issue so they can temporarily lock your account.
2. Change your Apple ID password to something unique and strong.
3. Add 2FA to your Apple account if you haven’t already.
4. Freeze or replace bank cards linked to your Apple Pay account to prevent fraudulent transactions.
5. File a police report with local law enforcement through their non-emergency line if you’ve lost a significant amount of money.
6. File a complaint with the FTC by clicking the “report now” button on their ReportFraud page.
7. Monitor your accounts for any suspicious activity, including fraudulent payments, login attempts, and suspicious notifications.
8. Subscribe to a dark web monitoring tool to find out if any of your information has leaked onto the dark web.

Tips to help prevent Apple Pay scams

Here are tips to follow to implement proactive measures to help prevent Apple Pay scams before they happen:

• Don’t respond to unsolicited messages even if they appear to be from Apple.
• Only send money to individuals you know personally via Apple Cash.
• Verify the email and phone number of any communication claiming to be from Apple.
• Never share personal information unless you can verify the recipient's identity.
• Be cautious of threats involving legal action or account suspension.
• Ignore requests for personal information as they are likely phishing attempts.
• Use strong, unique passwords on all your accounts.
• Enable 2FA on your banking and Apple accounts for added security.
• Regularly monitor your linked Apple Pay cards for any unauthorized transactions.
• Don’t refund money from Apple Pay; the requester is most likely a scammer who’s used a fake or hacked account.

Protect yourself from mobile payment scams

You can do a lot to help protect yourself against Apple Pay scams, but it’s difficult to monitor for fraud all by yourself. That’s where a strong identity theft protection service like LifeLock comes in.

LifeLock keeps track of your personal information and financial accounts, monitoring† for potentially fraudulent activity. And, if you suffer identity theft, you’ll get live, U.S.-based assistance from dedicated restoration specialists. Help defend against Apple Pay fraud and strengthen your financial security today.

FAQs

Can someone steal your card info from Apple Pay?

Generally, no. Apple Pay protects your card number by displaying only the last four digits, keeping the rest hidden. That way, even if someone gains access to your account, they can’t see your full card number, adding an extra layer of security.

While it’s theoretically possible that a more sophisticated hacking attack could lead to complete card information being exposed, it’s unlikely due to Apple’s robust security measures.

Can I dispute an Apple Pay transaction?

Apple Pay functions as a digital wallet that securely stores your payment information, and like a physical wallet, it doesn't handle transaction disputes. You’ll need to contact your bank for refunds, chargebacks, and disputes.

Can my Apple Pay be hacked?

Yes, your Apple Pay account can potentially be hacked like any other online account. Apple devices and accounts are not immune to hacking attempts or stolen credentials.

Does Apple Pay have buyer protection?

No, Apple Pay doesn’t offer buyer protection. It’s a digital wallet, which means it’s a place to store and send payment information rather than process payments. However, some banks and card companies refund unauthorized transactions made through Apple Pay.