Safe to Tap

Is it really them?

Is this message really from Apple?

Updated November 3, 2026

Scammers pretend to be Apple because so many people use it. Here's what the real Apple does, what the fakes look like, and how to check a message yourself.

Apple's real websites

• apple.com
• icloud.com
• apple.news

A link can include "apple" and still not be theirs: look at what comes right before the first single "/". In apple.secure-check.example/login, the website is secure-check.example.

What the real Apple does

• Sign-in codes come only when you're signing in yourself, and say not to share them.
• Apple Support calls are normally ones you arranged; scammers can fake Apple's real phone number on caller ID.
• Account and purchase details are in Settings on your iPhone, under your name.

Fakes going around

• Calls or texts about a "break-in", a hacked iCloud account or Apple Pay charges you didn't make.
• A link to an Apple sign-in page that isn't on apple.com or icloud.com.
• Pop-ups saying your iPhone has a virus, with a number to call.
• Requests for your Apple Account password, a verification code or gift cards.

How to check

• Hang up on calls you didn't expect. If you're worried, contact Apple yourself through the Apple Support app or apple.com.
• Check your account in Settings on your iPhone instead of tapping a link.
• Email suspicious messages (a screenshot for texts) to reportphishing@apple.com.

Sources

• Apple: Recognize and avoid social engineering schemes
• Apple: About gift card scams