Fake Apple ID Suspension Phishing
Scammers send emails or texts claiming your Apple ID has been locked or suspended, directing you to a convincing fake Apple sign-in page that steals your credentials and two-factor authentication codes.
Part of: Fake Suspended Account Appeal Scams
Last reviewed: 7 June 2026
Your Apple ID is the key to your iPhone, iPad, Mac, iCloud backups, App Store purchases, and Apple Pay. Because losing access would be genuinely disruptive, a message saying your account has been suspended triggers immediate anxiety — which is exactly what scammers count on.
Criminals craft emails that closely mimic Apple's clean, minimalist design language. They copy the apple.com footer, use the same font choices, and paste in genuine-looking order or case numbers. The goal is to get you to click before you think.
The fake sign-in page harvests your Apple ID email and password, then displays a fake two-factor authentication screen to capture your six-digit code in real time. With those two pieces, attackers can immediately log into the real Apple ID portal, change your recovery email and phone number, and lock you out of every device you own.
How this scam works on the Apple brand
Apple communicates with customers almost exclusively through email to the address registered on the Apple ID, and through push notifications or in-app messages on your trusted devices. Apple will never call you out of the blue about an account issue, and its legitimate emails always come from domains ending in @apple.com or @email.apple.com — no hyphens, no extra words.
The scam message typically claims your account was flagged for unusual sign-in activity, a billing problem, or a policy violation. It provides a timed urgency — 'your account will be permanently deleted in 24 hours' — and a prominent button labelled 'Verify Now' or 'Restore Account'. The link destination, if you look carefully, is something like apple-id-secure[.]support or appleid-verify[.]com rather than appleid.apple.com.
Once you enter your password, the fake site may show a spinning loader while attackers test your credentials live. Then it asks for your two-factor code, claiming it needs to verify your identity. After harvesting that code, the site often redirects you to the real Apple homepage so you assume the process worked.
Common red flags
- Sender address is not @apple.com or @email.apple.com — e.g. '[email protected]'
- Urgent deadline phrases like 'your Apple ID will be deleted in 24 hours' or 'act now to avoid permanent loss'
- Link URL contains 'apple' but the real domain is not apple.com — hover to check before clicking
- The sign-in page asks for your two-factor code immediately after your password, not via a push to your trusted device
- Poor grammar, inconsistent spacing, or generic greeting 'Dear Customer' instead of your name
- Message arrives by SMS — Apple does not send account-suspension alerts by text
How to protect yourself
- Never click links in emails about your Apple ID — open appleid.apple.com directly in your browser
- Check your Apple ID status in Settings > [your name] on your iPhone or iPad; a real suspension would show there
- Enable two-factor authentication on your Apple ID through official Apple settings, not through a link in an email
- Review trusted devices and recent sign-in activity at appleid.apple.com under the Security section
- If you entered your credentials, change your Apple ID password immediately and sign out of all unrecognised devices
- Use Sign in with Apple or a password manager so you are not retyping your password on unfamiliar sites
How to report it
- Forward the phishing email to [email protected]
- If you received a suspicious call claiming to be Apple Support, report it at apple.com/legal/privacy/contact
- Report the scam to the FTC at reportfraud.ftc.gov (US) or Action Fraud at actionfraud.police.uk (UK)
- If your Apple ID was compromised, contact Apple Support at support.apple.com to start account recovery
Frequently asked questions
Does Apple ever contact customers about account suspensions by phone?
No. Apple will not call you unsolicited about a suspended Apple ID. If you receive such a call, it is a scam. You can always initiate contact with Apple Support yourself at support.apple.com.
How do I tell a real Apple email from a fake one?
Genuine Apple emails come from @apple.com or @email.apple.com addresses. Check the actual sender domain, not just the display name. Real emails also address you by the name on your Apple ID account, not 'Dear Customer'.
I entered my password on a fake Apple page. What should I do immediately?
Change your Apple ID password at appleid.apple.com right away, then review and remove any unrecognised trusted devices. Also check that your recovery email and phone number have not been changed. Contact Apple Support if you are locked out.
Can scammers access iCloud backups if they get my Apple ID?
Yes. An Apple ID gives access to iCloud backups, photos, contacts, Messages stored in iCloud, and Apple Pay. This is why protecting your Apple ID with a strong unique password and two-factor authentication is critical.