an email asked me to send a copy of my credit card statement! SCAM?!!

i've bought an ipad from apple store malaysia yesterday, and i just received an email from apple ask me send a copy of my credit card statement to verify.. is it a scam????


the email content as below:


Dear Apple Online Store Customer,

Thank you for your recent order with Apple.

To protect the security of the cardholder, we need your assistance to

verify some details.

Please send any of the following documents to

JAPACORDERPROCESSING@APPLE.COM. You may wish to black out any

irrelevant, confidential information within the documents:

* Online Banking eStatement or scanned paper statement (.jpeg or .pdf

format)

* Any letter from the card issuing bank including the credit card

holder’s name, billing address and credit card number.

Alternatively, you can fax the statement to us via our secured toll-free

fax number at 1800 806 449.

If we do not hear from you within (6) calendar days from the date of

this email, your order will be cancelled.

Should you have any enquiries, please call me at 1800 806 447, from

Monday to Friday, 8:30am to 5:30pm (excluding Public Holidays).

Posted on Jul 21, 2013 12:22 AM

Reply
13 replies

Jul 21, 2013 12:59 AM in response to WebbieNiko

This sounds extremely dubious, though one wonders how scammers could know you'd just bought something. The telephone number given doesn't match that given on the Store page at http://store.apple.com/my which is 1800-80-6419 - you could ring that to ask about this. Don't send any information to the address given. It does have an apple.com extension, but even so you should be cautious.

Jul 21, 2013 11:43 AM in response to WebbieNiko

I think it's just coincidence you got this email after purchasing the same item it's asking about. But this is the dead giveaway:

* Any letter from the card issuing bank including the credit card

holder’s name, billing address and credit card number.

Everything a crook needs to start charging items on your card, in your name. Since you presumably bought the item with a charge card, Apple would already have this info and would have no reason at all to ask for it again.


The phone numbers you posted aren't even complete. At least not for the U.S.. Apple does not make these kinds of obvious mistakes in correspondence, especially not twice! If you do enter the numbers you posted in Google, they both turn up numerous complaints of fraud.


I would not respond to it, and would consider it a scam.

Jul 22, 2013 7:24 AM in response to WebbieNiko

As with any suspect communications from any vendor, the best thing to do is to call the Apple Store at the phone number published on their web site - not the one in the email - and ask. I've seen reports of legitimate requests for follow-up information from various Apple Stores, so it's not impossible this is legitmate, though I agree that it seems highly suspicious.


Regards.

Nov 15, 2013 5:15 PM in response to WebbieNiko

Hmm. Well, I am not convinced it's a scam. (As an aside: My situation was that I made an online order on thailand apple store, and this email came as they are processing the order. I sent them what they asked for -- the first option they asked for, which does not give credit card info, just a bank statement showing the correct address.)


1-- It's clear that these JAPACORDERPROCESSING emails have been sent to people, consistently, whenever they buy from apple asia stores.


2-- You only comply with this scam by sending an email directly to an @APPLE.COM email address. How does a scammer have access to an apple email address -- they've hacked apple DNS? And this situation has persisted from 2012 (as this issue is discussed in other posts on this apple board) through late 2013?


3-- I agree that the second option seems nuts to tell people to send a paper with the full credit card through the mail. Note that they do tell you to black out confidential info, but they should have said "all but the last four digits of the number." The first option, which I chose to send to them, gives them nothing. Or at least, gives them so little info they would need much more to rip me off.


4-- Someone above said something like "they already have this info, so it shows that this is a scam." not true. The scenario would be that they know "you" ordered an apple product, but they are trying to check that you did not simply steal the credit card from someone, through the net or something... and therefore they are asking for you to show a paper statement, which is something that a person that merely stole your card number somewhere would not be able to provide.


If you're still worried, call their number and confirm that they ask for that --- but apple store asia kept me on hold for one hour last week, I never even got through.


In short, though, what I sent in could not be used to rip me off, but still satisfied what they asked for. (Don't know if the order will go through right, incidentally, it was just yesterday I sent the mail.)


One last comment... let's not pretend that the forum posts above have "proven" anything... a few of you posters have said "as was determined here, it's a scam. Aren't you glad you came here?" Uh... let's remember, this is a forum board similar to counter at a coffee shop where 10 vaguely smart apple customers are airing ideas. We would love it if apple authorities would come in here and confirm things, but they don't do that. So -- we're all just doing our best to figure it out.

Nov 15, 2013 6:09 PM in response to estephan500

Hi folks -- one hour after I posted my above message, I got the following reply from the JAPACORDERPROCESSING thing. Doesn't prove anything, but it does indicate that they are not pumping me for more information or anything. But, you know guys, I think this JAPACORDERPROCESSING thing is legitimate. They are not wise about the way they ask for information -- they should tell you to black out part of your credit card number if you choose to send it... but that lapse on their part doesn't mean they are a scam.

=====

FROM: japacorderprocessing@apple.com

...


Dear Eric,


My name is Deon, and I'm following up on your email to Apple.

We are happy to inform you that your order has been processed.


Once your order is shipped, you will receive a Shipment Notification email with your order tracking information. To view your order details, please login with your Apple ID at http://store.apple.com/th/orderstatus.


Thank you for choosing Apple.




Sincerely,

Deon [Extension: 241350]

Apple Online Store

=====

Nov 16, 2013 10:41 AM in response to WebbieNiko

Should have done this the first time. The email address is most definitely owned by Apple.


Domain Whois record


Queried whois.internic.net with "dom apple.com"...


Domain Name: APPLE.COM

Registrar: CSC CORPORATE DOMAINS, INC.

Whois Server: whois.corporatedomains.com

Referral URL: http://www.cscglobal.com

Name Server: ADNS1.APPLE.COM

Name Server: ADNS2.APPLE.COM

Name Server: NSERVER.APPLE.COM

Name Server: NSERVER2.APPLE.COM

Name Server: NSERVER3.APPLE.COM

Name Server: NSERVER4.APPLE.COM

Name Server: NSERVER5.APPLE.COM

Name Server: NSERVER6.APPLE.COM

Status: clientTransferProhibited

Updated Date: 04-dec-2012

Creation Date: 19-feb-1987

Expiration Date: 20-feb-2021


>>> Last update of whois database: Sat, 16 Nov 2013 16:05:37 UTC <<<

Queried whois.corporatedomains.com with "apple.com"...


Registrant:

Apple Inc.

Domain Administrator

1 Infinite Loop

Cupertino, CA 95014

US

Email: domains@apple.com


Registrar Name....: CORPORATE DOMAINS, INC.

Registrar Whois...: whois.corporatedomains.com

Registrar Homepage: www.cscprotectsbrands.com


Domain Name: apple.com


Created on..............: Thu, Feb 19, 1987

Expires on..............: Sat, Feb 20, 2021

Record last updated on..: Tue, Dec 04, 2012


Administrative Contact:

Apple Inc.

Domain Administrator

1 Infinite Loop

Cupertino, CA 95014

US

Phone: +1.4089961010

Email: domains@apple.com


Technical Contact:

Apple Inc.

Domain Administrator

1 Infinite Loop

Cupertino, CA 95014

US

Phone: +1.4089961010

Email: Apple-NOC@apple.com


DNS Servers:


nserver6.apple.com

ADNS1.APPLE.COM

ADNS2.APPLE.COM

nserver2.apple.com

nserver.apple.com

nserver4.apple.com

nserver3.apple.com

nserver5.apple.com

Nov 19, 2013 12:57 AM in response to WebbieNiko

It might have been a phising/scam email, but it is NOT unheard of for Apple to request info like that. Like one of the other posters said, though, look up the Apple Store phone number on Apple's website (localized to you) and call them and ask.


I got a similar request once, called up Apple and it was COMPLETELY VALID. The reason is that you can put any name you want in the credit card info boxes, but seeing a statement will confirm that the name matches the account.


When I signed up to become an Apple developer, I even had to send them a copy of my driver's license, but again I called the appropriate number and spoke to someone to verify first.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

an email asked me to send a copy of my credit card statement! SCAM?!!

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.