That "Your iPhone Is Hacked" Pop-up Is Fake

Several people reported fake Apple security warnings in the same week. Some saw a full screen pop-up while browsing on an iPhone, saying "Apple has detected wiretapping" or "Your iPhone has been hacked, all your activity is being tracked," with a button to "run a test" or call support. Others got a text that looked like an Apple order notice for a purchase of more than $1,000 they never made, or an email saying their Apple Account password had been changed.

The goal is the same in every version: to scare you into tapping a link, calling a fake support number, or sharing your Apple Account login, a verification code or payment details. Once a scammer has those, they can take over your account, make purchases, or talk you into paying for fake "repairs" or "protection."

The individual reports on this page come from the public and have not been verified one by one. The scam itself is not new: fake security pop-ups and fake order messages are a well known type of tech support and phishing scam, and Apple describes them in its own guidance linked below.

What the fake messages look like

Illustrations made by The Scam Exposed for education. They are not real screenshots, and numbers and links are blanked out.

Why these messages look real

The pop-ups copy Apple's logo, colors and fonts. Some redirect pages make your browser vibrate or play an alarm sound. Fake order texts use a real looking order number and the name of a nearby Apple Store. Fake password emails may come from an address that includes "apple" but is not a real Apple domain.

What Apple says

Apple says pop-ups that warn of viruses are usually fraudulent, and that you should not call the number or follow the links in them. Apple also says it never asks for your Apple Account password or verification codes to provide support. You can read Apple's own guidance on how to recognize and avoid scams.

Step by step on iPhone (iOS 18 and later)

1. Close the fake pop-up

1. Swipe up from the bottom of the screen and pause in the middle to open the App Switcher. On iPhones with a Home button, double-click the Home button.
2. Find Safari and swipe it up off the top of the screen to close it.

2. Clear Safari so the page does not come back

1. Open Settings, tap Apps, then tap Safari. On older iPhones, Safari is listed directly in Settings.
2. Tap Clear History and Website Data.
3. Choose All history, leave Close All Tabs on, and tap Clear History.

If the Clear History and Website Data button is gray, there may be no data to clear, or web content limits may be turned on in Screen Time. Apple explains how to check this in its guide to clearing Safari history. If someone else set up Screen Time on your phone, ask them for help.

3. Check your real purchases

1. Open the App Store and tap your profile picture in the top right corner.
2. Tap Purchase History. You may need to use Face ID, Touch ID or your passcode.
3. If the charge from the text is not listed, the message was fake.

4. Check which devices use your account

1. Open Settings and tap your name at the top.
2. Scroll down to the list of devices signed in to your Apple Account.
3. If you see a device you do not own, tap it and choose Remove from Account.

Check who really sent an email

1. Open the email and tap the sender's name at the top, such as "Apple Support". The full email address will show.
2. A real Apple address ends exactly in apple.com, for example id.apple.com. Watch for lookalikes such as apple-support.net or apple.com.account-help.co.
3. Even if the address looks right, do not tap links in the email. Check your account yourself using the steps on this page.

5. If you shared your password or a code

1. Open Settings, tap your name, then tap Sign-In & Security.
2. Tap Change Password, enter your iPhone passcode, and choose a new password you do not use anywhere else.

6. If you shared card or bank details

1. Freeze or lock the card in your bank's app if it has that option.
2. Call the number on the back of your card and report the fraud. Never call a number from the pop-up or text.

7. Report it

1. Take a screenshot and email it to [email protected].
2. File a report with the FTC at ReportFraud.ftc.gov.

Menu names can change slightly between iOS versions. These steps match iOS 18 and later.

Who is most at risk

Older adults and people who are less comfortable with phones are often targeted, because the warnings use urgent language and loud alerts. If a parent or grandparent uses an iPhone, it is worth showing them what these fake warnings look like before they see one.

If you are not sure whether a message is real, close it and check your account yourself using the steps above. If nothing matches the message, it was fake.