A text message scam targeting Apple Pay users falsely claims an $8,250 charge has already been processed and threatens an additional $8,250 transaction within 35 minutes. The aim is to create immediate panic and compel recipients to call a provided phone number.

One recipient, identified as Paul C. from Washington, D.C., received a text originating from a UK country code (+44) but instructed him to call a U.S. toll-free number with a case reference. The message falsely stated that his Apple Pay account had "hemorrhaged" money and that his contactless spending limit was "crushed to $0," while simultaneously warning of an impending duplicate charge.

Scammers often use dramatic language, claims of authority, and tight deadlines to manipulate individuals into acting without thinking. Red flags in such messages include:

  • Mismatched Numbers: The sender's number and the callback number do not align, with an overseas sender directing a U.S. recipient to an unrelated support line.
  • False Trust: The message uses the "Apple Pay" name and "Apple Pay Account Services" to appear official, but encryption only ensures message transit security, not sender authenticity. Legitimate alerts typically specify the bank or card involved.
  • Panic-Inducing Figures and Timers: Large amounts and exact deadlines are designed to create fear and discourage verification.
  • Unusual Wording: Phrases like "hemorrhaged" or "verbally kill the pending charge" are not typical of legitimate financial alerts, which usually use terms like "charged," "declined," or "pending."
  • Nonsensical Merchant Details: Vague descriptions like "an agricultural processing surplus in Stockton, CA" or "a payday lending chain in Modesto" lack the specificity of real merchant names.
  • Contradictory Information: Claims that a contactless limit is zero while simultaneously detailing an impending contactless charge highlight the scam's inconsistencies.
  • Exclusive Scammer Contact: All instructions lead back to calling the provided number, rather than directing the user to official channels like the Wallet app or the back of their bank card.

This type of scam works by luring victims into a phone call, where the scammer may request personal information, card numbers, or verification codes under the guise of canceling a fraudulent charge. Some scammers may also try to convince victims to install remote-access software or transfer money to a supposedly "safe" account.

To verify potential Apple Pay charges, users should avoid calling numbers from suspicious texts. Instead, they should open the Wallet app on their iPhone, select the relevant card, and review the transaction history. For a complete account history, checking the bank or card issuer's official app or calling the number on the back of the physical card is recommended.

If a user suspects they have received a scam text, they can report it to Apple by emailing [email protected] and forward the text to 7726 (SPAM). Reporting the message and blocking the sender can help prevent others from falling victim. The Federal Trade Commission (FTC) also provides a platform for reporting fraud at ReportFraud.ftc.gov.

In cases where a user has already contacted the scammer, immediate action is advised. This includes blocking the number, contacting financial institutions to secure accounts, changing passwords for compromised accounts, and monitoring credit reports if sensitive information like Social Security numbers was shared. If remote-access software was installed, disconnecting the device from the internet and running a security scan is crucial.