I received suspicious email related to setting up Apple Pay

Apple Pay is not tied to your phone number - it is tied to your Apple ID.

If you think your account is compromised, reset your password.

Change your Apple ID password - Apple Support

Otherwise, just delete the email and ignore it.

Your daughter had her account information shimmed or skimmed when she used the physical card someplace. It could have been online, or via swipe or chip read. The information is sold on the dark web and a fraudster purchased it bundled with other personal information. The fraudster then adds the card to an Apple device and proceeds to use Apple Pay either online or at merchants physical locations.

Apple doesn’t approve or decline cards for addition to Apple Pay, that’s a function of the issuing bank and the payment network operator (Visa, Mastercard etc.). If the bank and PNO issue the token, Apple adds the token to the wallet.

If you have concerns do nothing.

It’s impossible to comment on something I haven’t seen. There are certainly scammers using all sorts of tricks to commit fraudulent acts.

Did you recently buy a new Apple device with Apple Wallet (like an iPad)? I bought an iPad in late May. I just looked in Settings at the Apple Wallet and found my debit card was waiting to be verified. I'm guessing when I migrated everything over from the old iPad, I never verified that card. Just to be safe, I removed it and will probably add it back in at some point in the future.

Doing what without logging in? If someone has your credit card information they can attempt to add it to their Apple device. It’s still up to your bank to verify the account. If the bank verifies it, they’ll send the token to Apple Servers and then Apple will add the token to their Secure Element for use with Apple Wallet and Apple Pay.

I received a second email overnight (02:26 21 Aug) from Apple saying to "Finish setting up your debit or credit card in Wallet". I have no cards in my wallet needing to be verified. Should I discover one, I will immediately cancel the card and request a new one be issued.

TommyATX, watch that card very closely for suspicious activity. As I mentioned above, my daughter had someone clone her credit card into an Apple wallet and use it to buy $1,100+ of electronics at Best Buy. Because the charge was initiated/approved from an Apple wallet, the credit card issuer refused to acknowledge it as fraud.

It’s a legitimate Apple email and domain. I just posted about it in another thread with the same emails. The sub domain insideapple.apple.com is registered to Apple.

Screen shot, or copy and paste where it’s from. It’s almost impossible to confirm things I haven’t seen.

The issue is Apple Pay is already set up, I’ve been using it for years. A few months ago, my daughter (who also has been using Apple Pay for years) received a notice about adding a card to Apple Pay. Shortly after, fraudulent charges started rolling in. Her credit card company refused to accept an $1,100 charge at Best Buy as fraud because their systems showed it came from her iPhone/Apple wallet.

That’s legitimate. If you want to use Apple Pay and Apple Wallet, it’s an invitation to set it up. But there’s no extremely compelling reason to set it up. I’m happy to explain as much as I can and answer any questions you may have. I’m a former Apple Store manager and happy to explain and provide links to Apple Support articles or whatever you need.

I received the same email today and was wondering if it was a scam. It says one or more of your debt cards is not finished setting up. Looks real but, I don't have any cards that have not been setup. The email came from this email address:

**

It was sent to my correct Apple email address, not my phone number.

[Edited by Moderator]

I received the same email today (legitimately from Apple), but have not attempted to add any credit/debit cards to my Apple wallet. It immediately set off alarm bells for me. My daughter recently had someone apparently clone her iPhone’s Apple wallet and use it to purchase merchandise at Best Buy. When she contacted the credit card company, they refused to recognize it as fraud. Everything they could see from their end on the charge indicated it came from her iPhone and her Apple wallet.

I received this same email twice. 8/14/24 and 8/21/24 around 2AM. That is very suspicious. My account has not been compromised, I have not seen any 2FA requests. How could someone be doing this without logging in? And if it is not fraud, then why does it not have any details about the card that is trying to be added

how am I supposed to know which card is trying to be added to someone else’s wallet if there’s no information in the email? Haven’t seen any unauthorized transactions either. I noticed one of my cards in my wallet was requiring verification. I don’t know why because it was added to the wallet a while back. I reverified it. We’ll see if the emails persist.

Here's a similar email that I received: