Multiple Faces Detected
February 25th, 2026
Your iPhone buzzes. Your screen fills with a warning. Apple Security has detected suspicious activity on your account. Call this number immediately or your data will be deleted.
Your heart rate spikes. You reach for the phone.
Stop. Before you do anything, read this first.
Fake Apple security alerts are one of the most widespread scams targeting iPhone and Mac users right now. According to the FBI’s Internet Crime Complaint Center, tech support scams, which include fake security alerts impersonating trusted brands like Apple, cost Americans $1.46 billion in 2024 alone. These scams are designed by professionals to trigger panic, and panic is exactly what gets people to hand over their passwords, their payment details, or remote access to their entire device.
If you received an alert and are not sure whether it is real, run the contact details through Social Catfish before you respond to anything. Knowing what to do in the first 60 seconds can be the difference between staying safe and becoming a victim.
What Is an Apple Security Alert?
A real Apple security alert is a notification from Apple designed to protect your device and account. Apple uses these alerts to notify you of things like software vulnerabilities, suspicious sign-in attempts, or passwords that have appeared in a data breach.
Where real Apple alerts appear:
- In the Settings app on your iPhone or iPad
- In System Settings on your Mac
- As a standard push notification through the iOS or macOS notification system
- At the top of your account page when you sign into account.apple.com
What real Apple alerts never do:
- Appear as browser pop-ups or in-page warnings
- Ask you to call a phone number
- Demand immediate payment or personal information
- Threaten to lock or delete your account if you do not act within minutes
- Ask for your Apple ID password or verification code via email or phone
If the alert you received does any of the things on that second list, it is almost certainly a scam.
How the Scam Works
Fake Apple security alerts are a form of tech support fraud. Here is how they typically play out:
Step 1: You see the alert. A pop-up appears in your browser, or you receive an email or text that looks exactly like an official Apple notification. It uses Apple’s logo, fonts, and design. The message claims your device has been hacked, your account has been compromised, or suspicious purchases have been made.
Step 2: Urgency is dialed up. The alert gives you a tight window to act. Phrases like “your device will be locked in 24 hours” or “your data will be permanently deleted” are common. The goal is to stop you from thinking clearly.
Step 3: You are directed to take action. The message will do one of several things: ask you to call a fake Apple support number, click a link that takes you to a phishing site, download an app or software update, or enter your Apple ID and password on a fake login page.
Step 4: The damage is done. If you call the number, a scammer impersonating Apple support walks you through steps that give them access to your device or account, and if you click the link and enter your credentials, they own your Apple ID. If you download anything, malware may be installed silently in the background.
How to Tell If an Apple Alert Is Real or Fake
Signs it is real:
- It appears in your device Settings or System Settings, not in a browser
- It does not ask you to call a number or click a link in the message
- It comes from an email address ending in @apple.com or @email.apple.com
- You can verify it by signing into account.apple.com and checking for notifications there
Signs it is fake:
- It appeared as a browser pop-up or a webpage warning
- It uses urgent language threatening account deletion, data loss, or device locking
- It asks you to call a phone number listed in the alert
- It requests your Apple ID password, verification code, or payment information
- The email sender address does not end in @apple.com
- It addresses you as “Dear Customer” rather than your actual name
- There are spelling mistakes, awkward grammar, or formatting that looks slightly off
Your Step-by-Step Action Plan
Step 1: Do not interact with the alert. Do not click anything, including the cancel or close button on a pop-up. On a Mac, use Command + Q to force quit the browser, or Option + Command + Esc to open Force Quit. On iPhone, swipe the browser app closed from the app switcher.
Step 2: Do not call the number. Any phone number included in a security alert pop-up or suspicious email is not Apple. Calling it connects you directly to a scammer. Hang up immediately if you have already called.
Step 3: Clear your browser data. On Safari, go to Settings, then Safari, then Clear History and Website Data. This removes malicious scripts that can cause pop-ups to reappear. Do the same on any other browser you use.
Step 4: Check your actual Apple account. Go directly to account.apple.com by typing it into your browser yourself. Do not use any link from the alert. Sign in and check whether any real notifications are waiting at the top of the page. If nothing is there, your account is fine.
Step 5: Change your Apple ID password if you entered it anywhere. If you typed your password or verification code into anything connected to the alert, change your Apple ID password immediately at account.apple.com and enable two-factor authentication if you have not already done so.
Step 6: Check for anything you may have downloaded. If you downloaded any app, file, or software update prompted by the alert, delete it immediately. On Mac, run a trusted antivirus scan to check for anything malicious. On iPhone, delete any app you installed during that session.
Step 7: Review your payment methods. Check your Apple account for any unauthorized purchases and review the payment method on file. If anything looks wrong, contact your bank or card provider immediately and dispute any charges.
Step 8: Report it
- Report phishing emails to Apple at [email protected]
- Report fraud to the FTC at ReportFraud.ftc.gov
- Report to the FBI’s Internet Crime Complaint Center at ic3.gov
What Scammers Are After
Understanding the end goal helps you recognize what they are really trying to do.
Your Apple ID credentials: With your Apple ID login, a scammer can access your iCloud photos, contacts, emails, and any saved payment methods. They can lock you out of your own account entirely.
Remote access to your device: Some scams instruct you to download apps like AnyDesk that allow the scammer to control your screen while you watch. From there, they can access your banking apps, take screenshots, and transfer money.
Direct payment: Some fake alerts tell you that your account will be charged unless you pay a fee to remove the threat. They may request payment via gift cards, wire transfer, or cryptocurrency, all of which are irreversible.
Your personal information: Phone calls with fake Apple support agents often involve detailed questioning about your identity, address, Social Security number, and financial accounts under the guise of verifying your account.
How to Protect Yourself Going Forward
Enable two-factor authentication: This adds a second layer of security to your Apple ID. Even if a scammer gets your password, they cannot access your account without also having access to your trusted device.
Never call a number from a pop-up or email: If you ever genuinely need Apple support, go to support.apple.com directly and use the contact options listed there.
Use an ad blocker: Many fake Apple alerts are delivered through malicious ads on otherwise normal websites. A browser-level ad blocker prevents a significant number of these pop-ups from ever appearing.
Keep your software updated: Running the latest version of iOS and macOS closes known security vulnerabilities that scammers can exploit to trigger fake alerts or install malware.
Be skeptical of urgency: Apple does not threaten you with account deletion or data loss through a pop-up. Any message that creates that kind of pressure is designed to make you act before you think. Slow down.
Verify phone numbers and emails before you trust them. If someone contacts you claiming to be Apple support, do not take their details at face value. Run the phone number or email address through Social Catfish before engaging further. A phone number lookup can reveal whether the number belongs to who they claim, whether it is tied to a known scam, or whether it has no verifiable owner history at all. An email search can surface what accounts and identities are connected to that address, often exposing mismatches between who the person claims to be and what the records actually show.
Check If Your Email Has Been Compromised
If you received a fake Apple security alert, your email address may have already been exposed in a data breach before the scammer ever contacted you.
What to do:
- Use Social Catfish’s breach checker to scan your email address against known data breaches
- If your email has been compromised, change your passwords immediately, starting with your Apple ID
- Sign up to receive ongoing security tips and alerts so you are notified if your information surfaces in future breaches
Knowing whether your email is already out there gives you a clearer picture of your exposure and helps you take the right steps before more damage is done.
Work with a search specialist if you need to dig deeper. If you spoke to someone claiming to be from Apple support and something felt off, but you cannot pin down exactly what, Social Catfish search specialists can investigate on your behalf. They can look into the contact information provided, cross-reference it against known fraud patterns, and give you a clear picture of who you were actually dealing with. This is especially valuable if you shared personal information during the call and want to understand the full extent of your exposure before taking further steps.
Frequently Asked Questions
Yes. Real alerts appear in your device Settings or at account.apple.com after you sign in. They do not appear as browser pop-ups, and they never ask you to call a phone number or enter your password in response to the alert.
Do not give them any more information. Change your Apple ID password immediately, check your payment methods for unauthorized charges, and report the number to the FTC at ReportFraud.ftc.gov.
iPhones are highly secure but not immune. Malware is rare on iOS, but it can occur through malicious apps or profiles. The bigger risk is phishing, where scammers trick you into handing over your credentials rather than actually infecting your device.
Change it immediately at account.apple.com and enable two-factor authentication. Check for any devices you do not recognize under the Devices section of your Apple ID and remove them.
Forward phishing emails to [email protected]. Report fraud to the FTC at ReportFraud.ftc.gov and to the FBI at ic3.gov. You can also report suspicious texts by forwarding them to 7726 (SPAM).
The Bottom Line
A genuine Apple security alert will never appear in your browser, threaten to delete your data, or ask you to call a phone number in the next five minutes. If it does any of those things, it is a scam built on one thing: your panic in the first few seconds.
Close it. Do not call. Go directly to account.apple.com to check your actual account status. And if you spoke to someone claiming to be from Apple support before you realized something was wrong, do not wait. Run their phone number, email, or username through Social Catfish right now to find out who you were actually dealing with before they have a chance to use what you shared.
Staying calm is the most powerful thing you can do when an alert like this appears. The scam only works if you act before you think.
