Fake Apple scareware pop-up claims iPhone compromised in data breach to install malware
Impersonating: Apple
What is this scam?
A new wave of malicious pop-ups impersonating Apple appears after clicking suspicious links in phishing texts or social media ads, falsely claiming the recipient's iPhone details were exposed in a data breach. The pop-up presents buttons labelled 'Fix Now' or 'Protect Device' — clicking them installs malware rather than resolving any problem. Which? flagged this 'scareware' tactic in June 2026 as distinct from earlier Apple billing scams: it targets device security fears rather than payment credentials, and works on both iPhone and Android.
Example scam message
Red flags to look out for
- The message creates urgency — threatening a fine, missed delivery, or account closure.
- Links lead to unofficial domains that don't match the real company's website.
- You weren't expecting this message and can't verify the event it references.
- It asks you to confirm payment details or personal information via a link.
- The sender's number or email address doesn't match the company's official contact.
What to do if you receive this
- Do not call any numbers or click any links in the message.
- Log in to your account directly via the official website or app to check for any real alerts.
- Forward the message to 7726 or email report@phishing.gov.uk.
- Report it to Action Fraud at actionfraud.police.uk.
Not sure if your message is a scam?
Check it instantly with our free AI-powered detector.
Check a message nowSource: Which?