Cybercriminals Take Advantage of Black Friday Shoppers With New Apple ID Scam
Fraudsters have become increasingly sophisticated, creating realistic and convincing scams that prey on the rush of holiday shopping.
With Black Friday fast approaching, the temptation to snag deals is at its peak, making consumers more vulnerable than ever.
As shoppers scramble to find the best offers, cybercriminals are seizing the opportunity, launching targeted scams aimed at Apple users.
These scams are designed to provoke fear and urgency, pushing people to act quickly without thinking, and ultimately tricking them into sharing sensitive information or making hasty, costly decisions.
This time, the hook is a simple yet alarming message:
"Your Apple ID has been suspended."
Why Apple Users Are Prime Targets for Scammers
Apple boasts over 2 billion active users worldwide, making them an obvious target for scammers seeking to exploit the tech-savvy and often affluent demographic that uses devices such as iPhones, MacBooks, and iPads.
This group of supporters is well-known for spending big, particularly during sales events like Black Friday, which heightens their vulnerability.
Previously, scams lured users by falsely claiming that their iCloud storage was full, prompting them to click on links offering bogus upgrades.
Now, fraudsters have ramped up their tactics, with a more pressing warning: an allegedly suspended Apple ID.
This new phishing scheme takes advantage of AI-generated fraud techniques that make the emails appear incredibly genuine, even mirroring the tone and design of legitimate communications from Apple.
These scams are expertly crafted to trigger a sense of panic and rush recipients into action.
Often, the email will state that suspicious activity has been detected on the recipient’s account or, worse, that the account has been hacked and requires immediate attention to secure it.
The call to action is designed to lead the unsuspecting victim to a fake site where their credentials can be stolen.
How Do These Scams Work?
These scams usually come via emails, texts, or fake websites that look like those from trusted sources.
They often use urgent language to pressure you into acting quickly, like warnings about account issues. .
As such, the email may claim that Apple has detected suspicious activity on your Apple ID, urging you to act now to prevent further issues.
This sense of urgency is key to manipulating users into clicking on the included link or action button.
Example of scam email
Once clicked, they’re led to a website that mimics the Apple login page, where they are asked to enter sensitive details, including passwords, security codes, or even two-factor authentication (2FA) codes.
Jake Moore, a global cybersecurity advisor at ESET, explained,
"Phishing scams like the Apple ID Suspended scheme are becoming increasingly prolific and under immediate urgency, and many people are still manipulated by the clever tactics used by criminal hackers."
The goal is to steal your information for identity theft, financial fraud, or to gain access to your online accounts.
Apple’s Advice on How to Spot a Scam
Apple has responded by issuing advice on how to identify and avoid phishing scams.
The company emphasises the importance of questioning any unexpected message that requests personal information such as passwords, phone numbers, or security codes.
Their advice is clear: if the request seems suspicious, it’s better to assume it’s a scam rather than taking any risks.
The Apple scam could also appear as a message about Apple Pay, tricking users into believing there's an issue with their account.
Apple warns that scammers often attempt to build trust by mentioning personal information, making their messages appear more legitimate.
They also create a sense of urgency, pressuring the recipient into acting quickly without considering the consequences.
One way Apple users can spot phishing emails is by checking if the email uses their real name instead of generic terms like 'customer.'
In many cases, scammers will ask for account information or security codes, claiming it is necessary to resolve the issue.
Furthermore, Apple clarifies:
"Apple will never ask you to log in to any website, or to tap Accept in the two-factor authentication dialog, or to provide your password, device passcode, or two-factor authentication code or to enter it into any website."
How to Report a Phishing Email to Apple
If you receive a suspicious email, forward it to Apple at [email protected].
On a Mac, you can select the email and choose “Forward As Attachment” from the Message menu.
If you believe you've entered personal information like a password or credit card details on a fake website, change your Apple Account password immediately.
The Importance of Verification
Jake Moore also offered an important reminder:
"It is important to verify the sender’s email address for any discrepancies and avoid clicking on suspicious links as this is where scams often begin."
If in doubt about an issue with your Apple ID, the safest course of action is to go directly to the official Apple website or contact their support team to check for any genuine issues.
As the pressure to secure Black Friday deals mounts, users should stay alert and mindful of these sophisticated scams, which thrive on urgency and fear.