Is a text claiming my Apple ID is locked real?
Probably not. Apple ID lock texts are a widespread phishing tactic designed to steal your Apple credentials and personal information.
Last reviewed: 1 August 2026
Explanation
Phishing texts and emails impersonating Apple are among the most commonly reported. They claim your Apple ID has been locked, a new device has signed in, or suspicious activity has been detected, and direct you to click a link to verify your identity. The link leads to a convincing fake Apple sign-in page that captures your Apple ID, password, and sometimes payment or personal details. Apple does send genuine security notifications, but they direct you to appleid.apple.com — the domain you should type directly, not follow from a text. Real Apple security alerts also appear as trusted device push notifications in addition to email, and Apple never contacts you by SMS about account lockouts.
The value of an Apple ID explains the volume of these campaigns. One credential opens photos, messages, backups, saved passwords, and payment methods — and through device-tracking features, a hijacked account can even be used to remotely lock hardware and demand payment to release it. Phishing kits for this ecosystem are sold ready-made, complete with cloned sign-in pages and hosting, which is why the fakes are so uniform and so frequent.
A related phone variant is worth knowing: calls claiming to be Apple support about a 'compromised account', sometimes with spoofed caller ID, asking you to read back a verification code or approve a sign-in prompt. Those codes and prompts exist to confirm that you are the one signing in — reading one to a caller, or approving a prompt you did not initiate, hands over the account with your own hands. No legitimate support process anywhere involves you sharing a one-time code that was sent to you.
Common red flags
- Text about an Apple ID issue contains a link
- Link does not go to apple.com or appleid.apple.com
- Message creates urgency — your account will be permanently disabled
- Page asks for Apple ID, password, and payment details
- Sender number is unknown or looks like a regular mobile number
What to do now
- Do not click the link — go to appleid.apple.com directly in your browser
- Check your account status from within the verified Settings app on your device
- Report the phishing text to [email protected]
- Enable two-factor authentication on your Apple ID if you have not already
Frequently asked questions
What if I already entered my Apple ID and password on a suspicious site?
Change your Apple ID password immediately at appleid.apple.com, sign out of all devices, and review any charges on your payment method linked to the account.
I keep getting sign-in approval prompts I didn't request. What does that mean?
Someone has your password and is trying to get in — the prompt is your two-factor protection working. Deny the prompts, never approve one you didn't initiate, and change your password immediately from a device you trust.