How do I know if my iPhone is compromised?

Checking out at a Dr office my phone was very close to the thing you put your credit card into. I got a text notification saying I had successfully verified my device. I figured it was just trying to scan my apple pay so ignored it and just payed with my credit card. At that point I got another message saying again that it had been validated. About 45 min later I got a text message saying I successfully updated my password. Then received an email from my bank saying my password was changed. How all of that was verified through 2 factor authentication without my phone is baffling. Thankfully all my money is still in my checking account which is linked to same password etc. How in the **** did this happen. Should I delete apple pay from my phone?



[Re-Titled by Moderator]

Posted on Mar 13, 2025 9:33 PM

Reply

Similar questions

5 replies

Mar 14, 2025 12:33 PM in response to brisablue

There’s a lot of assumptions going on that have no basis in facts or evidence. So, did you pay for your Dr. visit with a credit card? Did you swipe the card or insert the chip?


Your card details when you paid were likely skimmed. The skimmer’s used today can actually connect to the internet via the office’s WiFi and transmitted the information about your cards to the scammers.


The scammers then used the data to add the card to their Apple Wallet. The bank sent you the notification of verifying your device (iPhone) meaning the scammers.


Your bank does all the verification of your identity and the device. You’d have to ask the bank’s support team way they don’t use 2FA. Apple doesn’t verify your device. Your bank does.


Apple Pay is something you opt into, not out of. It’s a service offered by your bank because it’s more secure than swiping or using the chip. Apple Pay would have prevented your information being skimmed at the doctor’s office.

Mar 14, 2025 1:45 AM in response to brisablue

brisablue wrote:

Checking out at a Dr office my phone was very close to the thing you put your credit card into. I got a text notification saying I had successfully verified my device. I figured it was just trying to scan my apple pay so ignored it and just payed with my credit card. At that point I got another message saying again that it had been validated. About 45 min later I got a text message saying I successfully updated my password. Then received an email from my bank saying my password was changed. How all of that was verified through 2 factor authentication without my phone is baffling. Thankfully all my money is still in my checking account which is linked to same password etc. How in the **** did this happen. Should I delete apple pay from my phone?

If you feel an unauthorized person/app is remotely using, controlling or monitoring your device, then that is possible only if you have done one or more of the following Don'ts...


  1. Don't hand over an iPhone to kids or to a stranger without Enabling Guided Access
  2. Don't share Apple IDs
  3. Don't Jailbreak
  4. Don't share sensitive information pertaining to your device
  5. Don't give in to Phishing
  6. Don't plug in your device in Airports and Public places through third-party cables and trust the device. Beware of Juice Jacking. (Especially in India)
  7. Don't leave your iPhone unlocked and unattended in public places like offices, schools, malls, etc.


If one of the above is true then quickly change the Apple ID Password and Return iPhone settings to their defaults.



Mar 14, 2025 1:45 AM in response to croloriarc295

croloriarc295 wrote:

The only thing that 'compromises' the operation of your phone is ios updates.

I do not agree to this.


Was the device Jailbroken? If that's the situation, please be informed that attributing the issues to iOS updates may not be accurate.


I have been updating my devices ever since I bought my first device in 2009. iPhone 3Gs, 4S, 5, 6, SE (1st Gen), 7, 8 and iPhone 12 Pro, iPad Pro, iPhone 13, Macbook Air 2019, MacBook Pro 16"




I never had any issues with any iOS, iPadOS, or macOS updates to date.


I would personally recommend everyone update their devices instead of listening to rumors from people who may not have kept their devices free from any spurious software.


iOS / iPadOS devices cannot be hacked or infected with Virus / Malware / Spyware if it is updated to the latest iOS/iPadOS unless you have intentionally downloaded spurious software or unauthorized apps directly from the internet and installed them on your device or/and have Jailbroken



iOS updates generally aim to enhance user experience, boost security, and fix bugs rather than disrupt core features. Issues after updates might stem from underlying, unmentioned factors. Updates won't typically alter personal data but may refine settings or features. Backup before major updates for safety. Review Apple's update details and backup advice for a smooth process.


This seems purely coincidental so please check the Setting on your device.



See what each update does: About iOS 18 Updates, About iOS 17 Updates, About iOS 16 Updates, About iOS 15 Updates, About iOS 14 Updates, About iOS 13 Updates, About iOS 12 Updates, and so on...


Mar 14, 2025 1:47 AM in response to brisablue

brisablue wrote:

Checking out at a Dr office my phone was very close to the thing you put your credit card into. I got a text notification saying I had successfully verified my device. I figured it was just trying to scan my apple pay so ignored it and just payed with my credit card. At that point I got another message saying again that it had been validated. About 45 min later I got a text message saying I successfully updated my password. Then received an email from my bank saying my password was changed. How all of that was verified through 2 factor authentication without my phone is baffling. Thankfully all my money is still in my checking account which is linked to same password etc. How in the **** did this happen. Should I delete apple pay from my phone?

Keep the iPhone updated to the latest iOS always and never Jailbreak. That's it.


iOS / iPadOS devices cannot be hacked or infected with Virus / Malware / Spyware *** unless you have intentionally downloaded spurious software or unauthorized apps directly from the internet and installed them on your device or/and have Jailbroken


It (Hacking) also depends on how careful you are in sharing sensitive and valuable information pertaining to your iPhone such as Passcode, Password, etc with your friends and family members.


Be judicious when sharing the device's sensitive and valuable information with friends and family members.



**The primary reason for this is Sandboxing. All third-party apps are “sandboxed”, so they are restricted from accessing files stored by other apps or from making changes to the device. Sandboxing is designed to prevent apps from gathering or modifying information stored by other apps.


Security of runtime process in iOS and iPadOS - Apple Support



The sandbox on an iPhone is a security feature that creates a restricted environment for each app to run in isolation from other apps and the operating system. It is a core component of iOS's security architecture and plays a crucial role in making iPhones more secure.



If you doubt the authenticity of the information provided earlier, you have two alternatives:

  1. Report the hacking incident to local law enforcement authorities and actively pursue the case.
  2. Accept the credibility of the information; it is impervious to hacking. Just as some individuals hold unconventional beliefs, such as a flat Earth or moon landing denial, one has the freedom to believe in anything. The choice ultimately rests with you in this open and free world.


This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How do I know if my iPhone is compromised?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.