Security after responding to spoof/phishing email

I have been a victim of phishing emails. I received an email asking me to verify my paypal account and unfortunately, I have provided sensitive information (account number, sort code, etc). It was very lame of me but I cannot do anything about it now. I have phoned paypal, the alert fraud team and my bank to address this. My concern now is do I have to restore the factory settings on my phone (iPhone 6)? Should I be worried about any virus and would it affect the other applications i use on the phone? How does it work really? Once I have provided such info? Is it likely my phone is going to get hacked? I hope you can give me some advice regarding this. Thanks very much!

Posted on Nov 9, 2016 1:33 PM

Reply
10 replies

Nov 9, 2016 1:51 PM in response to camille0822

Oh my, its certainly a vulnerable reason that your mistake would give the perpetrator more advances to your paypal account and thus something has to be done and insure your device is secure. To start by clearing your browser history: Clear your Safari browser history and set up content blockers on your iPhone, iPad, or iPod touch - Apple Support and hence a password & security question change basically as means to harden your device against hackers: Change your Apple ID password - Apple Support. All done and you should be alert of any changes based on expected behavior, security alerts designed by Apple to make sure your activities are well accounted.

Nov 10, 2016 5:02 AM in response to camille0822

Restore your iPhone, iPad or iPod touch to factory settings - Apple Support


You can also factory reset directly on the phone. Tap Settings - General - Reset - Erase all contents and settings. Do NOT do this yet. Read the next paragraph first.


We don't know how you're phished. I'm 99% sure that your phone is fine. You don't need to factory reset the phone. I'm guessing it is a social engineering trick to get you to follow a link and sign in to spoofed or fake Paypal website. Hacking a device requires serious tech skills. Creating an phishing email is so much easier and doesn't require tech skills. Scammers choose easy way to trick users and as you've experienced it yourself... it works.

Nov 9, 2016 2:30 PM in response to camille0822

camille0822 wrote:


I gave out my bank account details. Paypal advised me to go to Apple and have my phone checked for any virus. The bank, for some reason, recommended that I back up my data and restore factory settings. I do not want to go to all the trouble if it's not necessary. Thanks very much for responding.

Paypal doesn't know much about iPhones. Unless your iPhone was jailbroken it doesn't have a virus. And there's no point in backing up them restoring; it would just put back whatever was on the phone. Your phone data is safe. If you gave out your Apple ID and password, or a password that is the same as your Apple password, change it immediately. See: If you think your Apple ID has been compromised - Apple Support

But if you didn't reveal your Apple ID you are safe.


As a general rule, it's a good idea to have 2 factor authentication on any important account, including Paypal and your Apple ID. See: Frequently asked questions about two-step verification for Apple ID - Apple Support and Two-factor authentication for Apple ID - Apple Support. These are similar services, but each has advantages.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Security after responding to spoof/phishing email

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.