Apple Pay Scam UK: How Fraudsters Steal Your Money & What To Do
Fraudsters are using fake Apple Pay alerts to steal your card details and bank login information—but you can spot and stop them.
What is this scam?
Apple Pay scams are fraudulent attempts to steal your payment card details, bank credentials, or money by impersonating Apple or your bank. The scammer sends you a fake alert—usually via email, text, or a fake app notification—claiming there's suspicious activity on your account, an expired card linked to Apple Pay, or an urgent security issue. They then direct you to click a link or call a number, leading you to a fake website that looks identical to Apple's or your bank's login page. Once you enter your details, the scammer has everything they need to make fraudulent transactions, access your Apple Pay wallet, or drain your linked bank account. These scams are particularly effective because Apple Pay is widely trusted, and the fraudster's fake pages are often nearly perfect replicas. UK victims have lost thousands by falling for these convincing impersonations.
Warning signs to look for
- Urgent language about security, fraud alerts, or account suspension—real Apple rarely demands immediate action via text or email.
- A link in the message that takes you to a login page, especially if the URL doesn't match Apple's official domain (apple.com).
- Grammar or spelling errors, odd phrasing, or generic greetings like 'Dear User' instead of your name.
- Requests to verify your full card number, CVV, or PIN—Apple and your bank will never ask for these details via email or text.
- A phone number in the message that doesn't match your bank's official customer service line.
- Pressure to act immediately without time to verify, or threats of account closure.
- An email address that looks almost like Apple's but has a slight variation, such as 'applesecurity@gmail.com' or 'support-apple@domain.com'.
- A request to download an app or software update outside of the official App Store.
How this scam works step by step
The scam typically begins when you receive a text, email, or notification claiming to be from Apple or your bank. The message describes a security concern—perhaps an unrecognised purchase attempt, a card about to expire, or suspicious login activity on your Apple Pay account. It includes a button or link saying 'Verify Now', 'Confirm Identity', or 'Secure Your Account'. When you click it, you're taken to a fake website that mimics Apple's official login page or your bank's secure portal so convincingly that most people won't notice the difference. You're prompted to log in with your Apple ID or bank credentials, and you do so, believing you're protecting your account. The scammer now has your username and password. Some versions also ask you to enter your card details, full name, address, and even your mother's maiden name for 'verification'. Once the scammer has this information, they can access your Apple Pay wallet, make purchases in your name, reset your Apple ID password to lock you out, or sell your data to other criminals. Within hours, you may notice unauthorised transactions on your bank account or card.
How to verify if it is genuine
If you receive an Apple Pay alert, never click links or call numbers provided in the message. Instead, open a fresh browser window and navigate directly to apple.com by typing the address yourself, or open the official Apple Support app from the App Store. Log into your account and check for any alerts or notifications about your account status. Check your Apple Pay settings to see if there are any suspended cards or security issues listed. Next, contact your bank directly using the number on the back of your card or their website—not any number from the suspicious message. Ask them if they've flagged any activity on your account. Real Apple and your bank will never ask you to confirm sensitive details via email, text, or phone. If something feels urgent or threatening, that's often a sign it's fake. See our detailed guide on /guides/is-this-website-a-scam/ for instructions on checking if a website is legitimate by examining the URL, SSL certificate, and design closely.
What to do if you have already interacted
If you clicked a suspicious link or entered any details, act immediately. First, change your Apple ID password right now—go to appleid.apple.com directly and sign in, then update your password to something completely new that you've never used before. Next, check your Apple Pay wallet: open the Wallet app on your iPhone or iPad and review all linked cards and payment methods. If you see anything unfamiliar, remove it immediately by swiping and deleting it. Contact your bank without delay using the number on the back of your card. Tell them you may have compromised your login details or card information, and ask them to monitor your account for fraud and to cancel any cards if necessary. Enable two-factor authentication on your Apple ID if you haven't already—go to Settings > [Your Name] > Password & Security. Check your bank and card statements daily for the next 30 days for unauthorised transactions. If you've made any payments to the scammer directly, contact your bank immediately to see if the transaction can be reversed. Report the scam to Action Fraud and the NCSC (see reporting section below).
Reporting this scam in the UK
Report Apple Pay scams to Action Fraud immediately by calling 0300 123 2040 or visiting actionfraud.police.uk online. Provide as much detail as possible: the message you received, the link or phone number, when you were contacted, and any money you lost. If you received the scam via email, forward it to the NCSC's Suspicious Email Reporting Service at report@phishing.gov.uk. If it came as an SMS text, forward the message to 7726 (which spells SPAM). Your mobile network will then investigate and block the sender. Also report the fake website or app to Apple directly by visiting reportaproblem.apple.com and selecting the appropriate category. Contact your bank's fraud team on the number on the back of your card to report the compromise and request they monitor your accounts. If you're a citizen of the UK, you can also call Citizens Advice consumer helpline on 0808 223 1133 for further guidance on next steps and support. Keep records of all communications and reports for your own reference.
Frequently asked questions
Is Apple a legitimate company, or is Apple Pay always a scam?
Apple is a legitimate technology company, and Apple Pay is a safe payment service when used correctly. However, scammers frequently impersonate Apple to trick people. The key is to never trust alerts or requests sent to you via email, text, or phone—always verify directly by logging into your genuine Apple account or contacting your bank using their official number.
I already sent money to the scammer. Can I get it back?
Contact your bank or payment provider immediately—the faster you act, the better your chances. If you used a bank transfer, your bank may be able to freeze the scammer's account or reverse the payment if you report it within hours. If you used a card payment or Apple Pay directly, dispute the transaction as fraudulent with your card issuer. Report it to Action Fraud on 0300 123 2040 to create an official record, which may support your case. Recovery is not guaranteed, but prompt action significantly improves your odds.
What's the difference between a real Apple Pay security alert and a scam one?
Real Apple Pay security alerts will never arrive with a link to click or a phone number to call. Apple will notify you through your iPhone's Wallet app, the Settings app, or your Apple ID notification centre—not via email or text. If you're unsure, always log directly into appleid.apple.com yourself (never using a link from the message) or open the Settings app to check your Apple ID account status. When in doubt, contact your bank directly using the number on your card.
How do I report an Apple Pay scam text or email I received?
Forward suspicious emails to report@phishing.gov.uk (the NCSC's Suspicious Email Reporting Service), and forward SMS texts to 7726 (SPAM). Also report the incident to Action Fraud by calling 0300 123 2040 or visiting actionfraud.police.uk. Provide details of the message, sender, link, and any information you shared. If money was taken, also contact your bank immediately on their official number.