Yet another phishing scam is targeting Apple users. This version falsely claims that your Apple account was used to make a purchase on the App store from a location in Brazil.
The email claims that, if you did not make such a purchase, you should open an attached file and follow the instructions to cancel the order.
The attachment contains a fake Apple invoice complete with Apple logo and formatting.
If you click the “Dispute Transaction” button in the document, you will be taken to a fraudulent web page that has been made to look like the genuine Apple website.
Once on the fake page, you will be asked to log in with your Apple ID and password. Next, you will be taken to a bogus refund form which asks for you credit card numbers, your name and contact details, and other identifying information
After clicking the “submit” button on the fake form, you may see a message claiming that you have successfully reversed the transaction.
But, now, online criminals can use the information you supplied to hijack your Apple account, commit credit card fraud, and steal your identity.
Apple invoice phishing scams like this are very common. If you receive what looks like an Apple notification for a purchase that you know nothing about, do not click any links or open any attachments that it contains. It is always safest to log in to your online accounts by entering the address into your browser’s address bar or via a trusted app.
An article on the Apple website explains how to recognise and report such scam attempts.
The scam email:
Subject: [Notification] – We’ve received your payment
[ApplePay] – iTunes was used to purchase in App Store on Macbook Pro 13
Date and Time : June 5, 2017 7:02 PM GMT
Transaction ID : 9SA57818XL053022U
Order ID : 96782658
Operating System : OS X 10.12.4
Browser : Safari
Location : Erechim – RS, Brazil
If the information above looks familiar, you can ignore this email.
If you have not recently purchasing an Apps or In-Apps item(s) in a MacBook Pro 13″ with your Apple lD, please read our attached document and follow the instruction to cancel this transaction.
Apple Account Department
Copyright @ 2017 Apple Inc. 2211 N 1st St, San Jose, CA 95131, United States. All right reserved.