See -> Identify legitimate emails from the App Store or iTunes Store
Identify legitimate emails from the App Store or iTunes Store - Apple Support
⤵️
Update your account info safely
If you receive an email asking you to update your account or payment information, only do so in Settings directly on your iPhone, iPad, or iPod touch; in iTunes or the App Store on your Mac; or in iTunes on a PC.
To update your password for the Apple ID that you use for purchases, do so only in Settings on your device or at appleid.apple.com.
Learn more about security and your Apple ID.
If you received or acted on a likely phishing message:
If you received a suspicious email, please forward it to reportphishing@apple.com. If you're on a Mac, select the email and choose Forward As Attachment from the Message menu.
If you think you might have entered personal information like a password or credit card info on a scam website, immediately change your Apple ID password.
Check again: see the following Apple articles:
View your purchase history for the App Store, iTunes Store, and other Apple media services
View your purchase history for the App Store, iTunes Store, and other Apple media services - Apple Support
How apps, content, and subscriptions from Apple are billed
How apps, content, and subscriptions from Apple are billed - Apple Support
If you want to cancel a subscription from Apple
If you want to cancel a subscription from Apple - Apple Support
If the subscription that you want to cancel is not listed
If you want to cancel a subscription from Apple - Apple Support
If you see "apple.com/bill" on your billing statement
If you see "apple.com/bill" on your billing statement – Apple Support (UK)
If you see an unexpected charge
You can request a refund* for a purchase that you don't recognize, but you must pay for the purchase first. You can also cancel a subscription if you don't want to continue it.
*You must request the refund within the refund period. Refunds are not guaranteed. For more information, see the Terms & Conditions.
To keep your Apple ID account secure, see the following Apple articles:
Manage and use your Apple ID
Manage and use your Apple ID – Apple Support (UK)
👉 See who has access to your device or accounts
See who has access to your device or accounts – Apple Support (UK)
Recognize and avoid phishing messages, phony support calls, and other scams
Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support
Phony "tech support" / "ransomware" popups and web pages
Phony "tech support" / "ransomware" popup… - Apple Community
Identify and filter junk mail in iCloud
Report and block spam in iCloud mail - Apple Support
👉 If you think your Apple ID has been compromised
If you think your Apple ID has been compromised - Apple Support
Set up iCloud Keychain
Set up iCloud Keychain - Apple Support
Create a strong password for your Apple ID, It is best if your password consists of eight or more characters and include upper and lowercase letters, and at least one number. You can also add extra characters and punctuation marks to make your password even stronger.
Never provide your password, passcode, security questions, verification codes, recovery key or any other account security details to anyone else. Apple will never ask you for this information.
See also the following Apple articles:
About the 'Trust This Computer' alert on your iPhone, iPad, or iPod touch
About the 'Trust This Computer' alert on your iPhone, iPad, or iPod touch - Apple Support
Authorize or deauthorize your computer for iTunes Store purchases
Authorize or deauthorize your computer for iTunes Store purchases - Apple Support
Get a verification code and sign in with two-factor authentication
Get a verification code and sign in with two-factor authentication - Apple Support
Check your Apple ID device list to see where you're signed in
Check your Apple ID device list to see where you're signed in - Apple Support
- if you see devices that don't belong to you, delete from your account.
Don't jailbroken your iPhone.
My bank is refusing to refund the money.
If you have given an order to pay or have transferred money yourself, then the bank may refuse to reimburse your money.
Normally in case of incorrect payments, the bank can collect the amount back from that person within 30 days.
The bank knows who and when the amount was withdrawn from your account. Ask de bank and reporter to the police.