Has my iPhone been compromised?

Then your card is safe. Factory resetting removes any malware the app left behind. In theory apps are vetted to assure that they do not access any content that you haven’t authorized, but somehow this app slipped past some of that process. If you don’t want to factory reset go to Settings/General and scroll to the bottom. Tap on VPN and if there is a VPN app listed tap on i next to it and delete it. And of course turn it off.

Then go back one level to General and look just below VPN. If there is an entry for Profile open it and delete any profiles that were associated with the app.

Those two actions should render your phone clear of malware. The data at risk is anything that you sent or received while connected to the VPN rather than what is on the phone. If you didn’t use any apps or complete any financial transactions while connected you should be safe there also.

I’ve reported the app to the forum manager. He will kick it up to the App Store management team. This is the 3rd scam related app I’ve heard about recently. The first is gone, but I only reported the 2nd three days ago, and this one today. I’ll check again in a week.

One more thing: if your account was charged for the app or the subscription see this link—>Request a refund for apps or content that you bought from Apple - Apple Support

Sorry you fell for the scam. If you actually used the VPN all of your communications to and from your phone have been recorded by the scammer, so essentially your identity has been stolen. If you didn’t use the VPN you should be OK. But to be extra safe restore your phone to factory settings, and set it up again from scratch, or, if you have a backup made before this happened you can safely restore that.

What was the name of the app that you were asked to install? I want to report it. And you should also; there’s a “report a problem” link in the app store for the app.

You could do other users (and me) a favor; post a review reporting it as a scam, and also click on Report a Problem and mention that a popup said your phone was infected and directed you to get the app.

Your card is OK; when you buy something through the app store the app provider doesn’t see any part of the transaction, and can’t see your card number.

You don’t need a new Apple ID. You can log in with the same one. Be sure to cancel the subscription.

If it’s the card that is your default payment method on your Apple ID account then you are OK. As an extra check, see if it is listed in your Subscriptions and/or Purchase History. If it is then your card was not compromised. See these two links:

See or cancel your subscriptions - Apple Support

See your purchase history for the App Store or iTunes Store - Apple Support

if you paid in the App Store, no. If you entered the card number in the app, yes.

Logging into Wells Fargo using either the app or a browser uses SSL end-to-end encryption, so that would not compromise anything.