Apple Pay is a mobile payment and digital wallet service developed by Apple Inc. It was launched in October 2014 and has since become one of the most widely used mobile payment platforms globally. Apple Pay allows users to make secure, contactless payments using their iPhone, iPad, Apple Watch, or Mac at participating merchants, both in-store and online.
This comprehensive guide will delve into common Apple Pay scams, how to spot them, and crucially, how to protect yourself.
According to Statista, Apple Pay has over 507 million users worldwide, and it is projected to account for 10% of global card transactions by 2025. The COVID-19 pandemic has further accelerated the adoption of contactless payment methods like Apple Pay, as consumers seek safer and more hygienic ways to make purchases.
Understanding how Apple Pay works
Before we dive into scams, let’s quickly recap how Apple Pay works:
- Digital Wallet: Apple Pay is a digital wallet that securely stores your credit and debit card information on your Apple devices.
- Contactless Payments: It allows you to make contactless payments in stores and online, simply by holding your device near a reader or clicking a button.
- Security Features: Apple Pay uses tokenization, encryption, and biometric authentication (like Face ID or Touch ID) to protect your transactions.
The Rise of Apple Pay Scams
One of the most recent and notable Apple Pay scams is the Apple ID loan scam in China. In this scam, fraudsters pose as Apple employees and contact iPhone users, claiming to offer them loans through Apple’s financing services. The scammers then convince the victims to share their Apple ID login credentials, which they use to access the victims’ accounts and steal their money. Chinese authorities have arrested over 40 people involved in this Apply Pay scam. They have tricked over 20,000 people and extracted over $181,000,00).
The Apple ID loan scam has led to significant financial losses for many victims in China. In response to this and other scams, Apple has taken proactive measures to protect its users. In 2023, the company reported that it had prevented more than 3.5 million stolen credit cards from being used to make fraudulent purchases on its platform. It also banned over 1.1 million accounts from making further transactions due to suspicious or fraudulent activity.
Sadly Common Apple Pay Scams You Should Know
Before getting to the list of scams, here are some posts from Redditors on how they are scammed on Apple Pay:
Crazy, right?
Here are a few scams that happen on Apple Pay;
Account suspension scam
Apple Pay suspended scam is a phishing attempt where scammers send fake emails or text messages claiming that your Apple Pay account has been suspended due to suspicious activity or other reasons. These messages often contain a link to a fraudulent website that asks for your personal information, such as your Apple ID login credentials or financial details, to “restore” your account.
Fraudulent Merchants
Some scammers set up fake online stores or pose as legitimate sellers, accepting Apple Pay for goods or services that are never delivered.
Apple ID Loan Scam
Scammers pose as Apple employees and trick users into sharing their Apple ID login credentials, which are then used to steal money from the victims’ accounts.
Unauthorized Charges
If a user’s Apple Pay details are compromised, scammers can make unauthorized purchases or transfer funds from the linked bank account or credit card.
Fake Refunds
Scammers may offer fake refunds to trick users into providing their Apple Pay details, claiming they need the information to process the refund.
How to spot and avoid an Apple Pay scam?
Being aware of these red flags can help you protect your financial information and avoid falling victim to fraudulent activities. Here’s what to look out for:
- Unsolicited Messages: Be wary of unexpected emails, SMS, or instant messages claiming to be from Apple or your bank, especially if they ask you to update your Apple Pay information or verify your account details. Forward fake emails and texts to Apple at [email protected].
- Suspicious Links: Scam messages often contain links to fake websites that closely resemble legitimate ones. These sites are designed to steal your login credentials and financial information. Always verify the URL before entering any sensitive data.
- Unusual Payment Requests: If you receive a payment request through Apple Pay from someone you don’t know or for a transaction you don’t recognize, treat it with suspicion. Scammers often pose as friends, family members, or legitimate businesses to trick you into sending money.
- Pressure Tactics: Scammers may try to create a sense of urgency or use scare tactics to pressure you into acting quickly. They may claim that your account will be suspended or that you’ll face legal consequences if you don’t comply with their demands.
- Poor Grammar and Spelling: Fraudulent messages often contain spelling and grammatical errors, as they may be written by scammers who are not native English speakers.
- Requests for Sensitive Information: Legitimate companies, including Apple and your bank, will never ask you to share your login credentials, full credit card numbers, or other sensitive information via email or text message.
- Unknown Callers: Be cautious of unsolicited phone calls claiming to be from Apple Support or your bank. Scammers may try to convince you to share your Apple Pay details or login credentials over the phone.
- Unfamiliar Apps: Be careful when downloading apps, especially those that claim to be related to Apple Pay. Stick to official app stores and read reviews before installing any app that requests access to your financial information.
What to do if you’re scammed?
If you fall victim to an Apple pay scam, follow these tips immediately as damage control measures:
- Contact your bank or card issuer immediately: They can help you dispute charges and potentially recover funds. Banks are often aware of these scams and can recommend safety tips and help secure your account.
- Report the scam to Apple Support: They can investigate and take action against the scammers.
- Change your Apple ID password: If you think your account is compromised, go to Apple ID online and reset your password. Make sure the email account linked to Apple ID has two factor authentication in place.
How to Protect Your Apple Pay From Security Breaches & Scams?
I strongly recommend taking the following steps to protect your Apple Pay from security breaches and scams:
Enable Two-Factor Authentication (2FA)
Always enable 2FA for your Apple ID and associated accounts. This adds an extra layer of security by requiring a verification code in addition to your password when signing in or making changes to your account.
Use Strong and Unique Passwords
Create strong, unique passwords for your Apple ID and linked bank accounts. Avoid using the same password across multiple platforms, and consider using a password manager to help you generate and store complex passwords securely.
Keep Your Devices Updated
Regularly update your iPhone, iPad, or Mac to the latest version of iOS, iPadOS, or macOS. These updates often include important security patches that protect against known vulnerabilities and threats.
Verify Payment Requests
Before sending money through Apple Pay, always verify the legitimacy of the request by contacting the recipient through a trusted channel, such as a phone call or in-person conversation.
Monitor Your Transactions
Regularly review your Apple Pay transaction history and linked bank statements for any suspicious activity. If you notice any unauthorized transactions, report them to Apple and your bank immediately.
Be Cautious of Unsolicited Messages
Never click on links or provide personal information in response to unsolicited emails, text messages, or phone calls claiming to be from Apple or your bank.
Avoid Public Wi-Fi for Sensitive Transactions
Refrain from using public Wi-Fi networks when making payments or accessing sensitive information through Apple Pay. If you must use public Wi-Fi, consider using a Virtual Private Network (VPN) to encrypt your data.
Use Biometric Authentication
Take advantage of Apple’s biometric authentication features, such as Face ID or Touch ID, to secure your Apple Pay transactions. This ensures that only you can authorize payments using your device.
Be Selective with Linked Cards
Only link credit, debit, or prepaid cards that you trust and use regularly to your Apple Pay account. This minimizes the potential impact of a security breach.
Educate Yourself
Stay informed about the latest Apple Pay scams and security threats by following trusted cybersecurity news sources and Apple’s official support channels. The more you know about potential risks, the better equipped you’ll be to protect yourself.
How to get money back from Apple Pay if you are scammed?
If you believe you’ve fallen victim to an Apple Pay scam, it’s crucial to act quickly to minimize the potential damage and protect your finances. As a cybersecurity professional, I recommend taking the following steps:
Contact the merchant
If possible, reach out to the merchant first and request a refund. If the merchant is unresponsive or unwilling to issue a refund, proceed with the following steps.
Contact Your Bank Immediately
Notify your bank or card issuer of the fraudulent transaction as soon as possible. They can help you dispute the charge, cancel your card, and issue a new one if necessary. Many banks have dedicated fraud departments that can assist you with the process.
Report the Scam to Apple
Contact Apple Support and inform them about the scam. They can investigate the incident, take appropriate action against the scammer, and provide guidance on securing your account. You can reach Apple Support through their website, the Apple Support app, or by calling their customer service line.
Change Your Apple ID Password
If you suspect that your Apple ID has been compromised, change your password immediately. Make sure to choose a strong, unique password and enable two-factor authentication (2FA) for added security.
Review Your Transaction History
Carefully review your Apple Pay transaction history and linked bank statements for any other unauthorized charges. If you find any, report them to your bank and Apple Support right away.
File a Police Report
If you’ve lost a significant amount of money due to the scam, consider filing a report with your local police department. While they may not always be able to recover your funds, having a police report can be helpful when dealing with your bank or credit agencies.
Report the Scam to the Relevant Authorities
In addition to contacting Apple and your bank, you can also report the scam to the relevant authorities, such as the Federal Trade Commission (FTC) in the United States or Action Fraud in the United Kingdom. These organizations collect information on scams and work to prevent future incidents.
Does Apple Pay refund money if I’m scammed?
Apple Pay itself does not offer direct refunds if you’ve been scammed. However, you may be able to recover your money through other means, depending on the type of card you have linked to your Apple Pay account and the policies of your bank or card issuer.
- Credit Cards: If the scammed transaction was made using a credit card linked to your Apple Pay, you can dispute the charge with your card issuer. Most credit card companies offer zero liability protection, which means you won’t be held responsible for unauthorized charges. Contact your credit card company as soon as possible to initiate the dispute process.
- Debit Cards: If the scammed transaction was made using a debit card linked to your Apple Pay, the process for recovering your money may be more difficult. While some banks offer zero liability protection for debit card transactions, others may have more limited protection policies. Contact your bank immediately to report the fraudulent transaction and ask about their dispute process.
- Apple Card: If you have an Apple Card and believe you’ve been scammed, contact Goldman Sachs (the issuing bank for Apple Card) directly to report the incident and initiate a dispute.
It’s important to note that the success of recovering your money may depend on how quickly you report the scam and the specific policies of your bank or card issuer. In some cases, you may need to provide evidence of the scam, such as screenshots of conversations with the scammer or proof of the unauthorized transaction.
Does Apple Pay protect against scams?
Apple Pay has built-in security features to protect users, but it cannot completely prevent scams. The best protection against Apple Pay scams is to be vigilant, only send money to trusted individuals and businesses, and immediately report any suspicious transactions to your bank and Apple Support.
