Suspicious Apple account charge emails

I received two suspicious emails from two different email addresses telling me they’re from Apple support that my account has been charged from somewhere in California. All I’m trying to do is get support from Apple and that seems impossible.




[Re-Titled by Moderator]

Posted on Nov 27, 2024 9:45 AM

Reply
Question marked as Top-ranking reply

Posted on Nov 27, 2024 10:02 AM

It is good that you are cautious but I would avoid advice provided on this forum that has you jumping the gun. Apple will email you receipts for purchases charged to your account. You can check your purchase history but don't forget that if you are a Family Sharing Organizer, those purchases won't appear in your purchase history even if the family member let the charges roll over to your payment method (a card of some kind). Do you see the charges on a card you have?


Read this support article for directions about how to see your purchase history in the App Store or iTunes Store [mobile device, computer, or web] --> View your purchase history for the App Store and other Apple media services - Apple Support


Criminals are getting very good at imitating Apple messages and sometimes the only indication in an email is very subtle. Have a look at this thread. Someone registered an Apple ID with my em… - Apple Community It can be very hard to tell from an email alone if it is authentic. The best way to check is to use an independent way through Apple's own resources to confirm what the communication claims. Scams (e-mail, text messages, and phone calls) are getting very good at closely imitating true Apple communications. Always be cautious. These support articles have some guidelines:


About identifying legitimate emails from the App Store and iTunes Store --> Identify legitimate emails from the App Store or iTunes Store - Apple Support


Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Apple Support


Avoid scams when you use Apple Cash --> Avoid scams when you use Apple Cash - Apple Support


About Gift Card Scams --> About Gift Card Scams - Official Apple Support


If you are uncertain about a message and a resource provided in that message, do not click on any links in the message. Try to use an Apple resource you know is valid to independently verify what the message is claiming. Go to a support article page on apple.com and use the instructions in the article to verify though Apple itself, or use an Apple device feature such as Settings or an Apple app. To ask Apple start at this web page: Official Apple Support


- Apple e-mails address you by your real name, not something like "Dear Customer", "Dear Client", or an e-mail address* However, having your actual name is not proof this isn’t phishing. Compromised databases may have your name and address in them.

- Apple e-mails originate from @apple.com or @itunes.com but it is possible to spoof a sender address. "Apple email related to your Apple ID account always comes from appleid@id.apple.com." - About your Apple Account email addresses - Apple Support

- Set your email to display Show Headers or Show Original to view Received From. Apple emails originate from IP addresses starting with "17.".

- Mouse-over links to see if they direct to real Apple web sites. Do not click on them as this just tells the spammer they have a working e-mail address in their database. If you are unsure, contact Apple using a link from the Apple.com web site, not one in an email.

- Phishing emails may include account suspension or similar threats in order to panic you into clicking on a link without thinking. They may report a fake purchase in order to infuriate you into rashly clicking on a false link to report a problem. March 2018 post by Niel There was a fraudulent order on my apple … - Apple Community - "Emails saying that your Apple ID has been locked or disabled are always phishing. If one actually gets disabled, its owner will be told when they try logging into it instead of through email."

- Apple will not ask for personal information in an e-mail and never for a social security number.

- Scams may have bad grammar or spelling mistakes.

- Apple will not phone you unless it is in response to a request from you to have them call you.


* Exception: I got email saying my ID is expired! Does… - Apple Community


Forward email attempts as an attachment (in MacOS Mail use the paperclip icon) to: reportphishing@apple.com then delete it.


If this is with regard to a supposed purchase, this Apple article --> If you see 'apple.com/bill' on your billing statement - Apple Support has relevant information and web links for checking if you really have made a purchase or paid for a subscription. Purchases made under Family Sharing might be charged to the organizer's card but will not appear under the organizer's purchase history or subscriptions. Ask family members about those or check your receipts. Apple will email a receipt to the Family Organizer if a purchase is made on a card held by the Family Organizer. This will have the Apple ID of the purchaser, which you should recognize, but won't have specific about what was purchased.



Similar questions

3 replies
Question marked as Top-ranking reply

Nov 27, 2024 10:02 AM in response to Justme2304

It is good that you are cautious but I would avoid advice provided on this forum that has you jumping the gun. Apple will email you receipts for purchases charged to your account. You can check your purchase history but don't forget that if you are a Family Sharing Organizer, those purchases won't appear in your purchase history even if the family member let the charges roll over to your payment method (a card of some kind). Do you see the charges on a card you have?


Read this support article for directions about how to see your purchase history in the App Store or iTunes Store [mobile device, computer, or web] --> View your purchase history for the App Store and other Apple media services - Apple Support


Criminals are getting very good at imitating Apple messages and sometimes the only indication in an email is very subtle. Have a look at this thread. Someone registered an Apple ID with my em… - Apple Community It can be very hard to tell from an email alone if it is authentic. The best way to check is to use an independent way through Apple's own resources to confirm what the communication claims. Scams (e-mail, text messages, and phone calls) are getting very good at closely imitating true Apple communications. Always be cautious. These support articles have some guidelines:


About identifying legitimate emails from the App Store and iTunes Store --> Identify legitimate emails from the App Store or iTunes Store - Apple Support


Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Apple Support


Avoid scams when you use Apple Cash --> Avoid scams when you use Apple Cash - Apple Support


About Gift Card Scams --> About Gift Card Scams - Official Apple Support


If you are uncertain about a message and a resource provided in that message, do not click on any links in the message. Try to use an Apple resource you know is valid to independently verify what the message is claiming. Go to a support article page on apple.com and use the instructions in the article to verify though Apple itself, or use an Apple device feature such as Settings or an Apple app. To ask Apple start at this web page: Official Apple Support


- Apple e-mails address you by your real name, not something like "Dear Customer", "Dear Client", or an e-mail address* However, having your actual name is not proof this isn’t phishing. Compromised databases may have your name and address in them.

- Apple e-mails originate from @apple.com or @itunes.com but it is possible to spoof a sender address. "Apple email related to your Apple ID account always comes from appleid@id.apple.com." - About your Apple Account email addresses - Apple Support

- Set your email to display Show Headers or Show Original to view Received From. Apple emails originate from IP addresses starting with "17.".

- Mouse-over links to see if they direct to real Apple web sites. Do not click on them as this just tells the spammer they have a working e-mail address in their database. If you are unsure, contact Apple using a link from the Apple.com web site, not one in an email.

- Phishing emails may include account suspension or similar threats in order to panic you into clicking on a link without thinking. They may report a fake purchase in order to infuriate you into rashly clicking on a false link to report a problem. March 2018 post by Niel There was a fraudulent order on my apple … - Apple Community - "Emails saying that your Apple ID has been locked or disabled are always phishing. If one actually gets disabled, its owner will be told when they try logging into it instead of through email."

- Apple will not ask for personal information in an e-mail and never for a social security number.

- Scams may have bad grammar or spelling mistakes.

- Apple will not phone you unless it is in response to a request from you to have them call you.


* Exception: I got email saying my ID is expired! Does… - Apple Community


Forward email attempts as an attachment (in MacOS Mail use the paperclip icon) to: reportphishing@apple.com then delete it.


If this is with regard to a supposed purchase, this Apple article --> If you see 'apple.com/bill' on your billing statement - Apple Support has relevant information and web links for checking if you really have made a purchase or paid for a subscription. Purchases made under Family Sharing might be charged to the organizer's card but will not appear under the organizer's purchase history or subscriptions. Ask family members about those or check your receipts. Apple will email a receipt to the Family Organizer if a purchase is made on a card held by the Family Organizer. This will have the Apple ID of the purchaser, which you should recognize, but won't have specific about what was purchased.



Nov 27, 2024 9:49 AM in response to Justme2304

It seems like that these are scam mails. You can try and see if there are charges on your account via this way:


  1. To see your purchase history, go to reportaproblem.apple.com.
  2. Sign in with your Apple Account.
  3. A list of purchases appears. To see family members' purchases, select the Apple Account button and choose a family member.
  4. To see the full receipt including tax, tap or click the date. Multiple purchases, including subscriptions, might be grouped onto one charge.

If the charge is for a subscription that you no longer want, you can cancel the subscription. Find out where else you can view your Purchase History.


If you see no charges here, your account has not been charged

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Suspicious Apple account charge emails

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.