Apple Pay setup phishing

I just upgraded my iPhone 6 to iOS 10. After the upgrade was complete, I went through the post-upgrade 'walk-through'. As part of this activity, I was prompted to enter the CVV on credit card that I use with the App Store so that I could use it with Apple Pay. (I had not previously set up or used Apple Pay.) I completed this fine and finished the walk-through. This was all done on my iPhone as part of completing the iOS 10 upgrade.


Shortly after completing the upgrade, I received a welcoming e-mail from Apple Pay titled 'Learn how to get started using Apple Pay.' The sender was: Apple Pay <noreply@applepay.apple.***>. All is well and good. The e-mail introduces Apple Pay and how to use it; it was the kind of e-mail that I would expect to receive from Apple.

User uploaded file

Not more than 90 minutes later, I received another e-mail telling me that my Apple ID was suspended because my payment information couldn't be validated and that I needed to complete a verification procedure by clicking on an embedded link. I quickly recognized this as a phishing scam and didn't click on the link. The e-mail is titled 'Your Apple ID has been suspended [#194453]' and the sender is listed as: Apple < secure@apple.ssl.***>. The embedded link points to: http://net-e1<dot>com/ .

User uploaded file

My question is this: How did a communication from my iPhone to Apple as part of my iOS 10 upgrade get intercepted such that I was sent a phishing e-mail within 90 minutes? I've received random phishing e-mails before, but never one that is as targeted, as specific, and as closely tied to a communication that I've had with a vendor as this phishing e-mail is. How does this happen??? Given that the communication between my iPhone and Apple was intercepted, has my credit card information been compromised???

<Links Edited by Host>

iPhone 6, iOS 10

Posted on Sep 15, 2016 9:28 PM

Reply
4 replies

Sep 16, 2016 12:24 AM in response to RockieP

Hi


There is no indication or evidence that your iPhone's communication with Apple was intercepted or that the timing of the phishing email was anything other than coincidence.


Examples of the kinds of communications that you might receive if your Apple ID has been compromised - along with the steps that you should follow - are available in the following support article. If you remain concerned, follow the steps in the article, including changing your Apple ID password:


If you think your Apple ID has been compromised - Apple Support


To report the phishing attempt to Apple, follow the instructions here:


http://www.apple.com/legal/more-resources/phishing/


The following support articles may also prove helpful for future reference:


This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Apple Pay setup phishing

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.