You've just received an email saying there's a problem with your Apple ID. Maybe it's been "locked for security reasons." Maybe someone's made a purchase you don't recognise. Maybe your iCloud storage is "about to be deleted."
And now you're sitting there wondering: is this real? Because if it is, your photos, messages, and entire digital life could be at risk. But if it's fake, clicking that link could hand everything over to a scammer.
Let's figure this out right now.
Check the sender address
This is your fastest check. Look at the actual email address (not just the name that shows up), and compare it to these.
Legitimate Apple sender addresses:
@apple.com@email.apple.com@insideapple.apple.com@apple.com(for App Store receipts)@icloud.com(for iCloud-related notifications)@itunes.com(legacy, still used for some purchase receipts)[email protected](common for receipts and notifications)[email protected](for Apple ID notifications)
Common fake addresses:
@apple-security.com❌@apple-id-verify.com❌@appie.com(that's 'ie' not 'le') ❌@apple.com.account-verify.net❌@icloud-security.com❌@apple-support.co❌@app1e.com(that's a '1' not an 'l') ❌@apple-id.co.uk❌
The subdomain trick: [email protected] is legitimate. [email protected] is not — the real domain there is secure-login.xyz. Always look at what's immediately before the first / or after the last . before the /.
The most common Apple scam emails
1. "Your Apple ID has been locked"
The biggest one by far. Claims your account has been locked due to suspicious activity or too many failed sign-in attempts. Asks you to click a link to "unlock" your account. The link goes to a convincing fake Apple sign-in page. Real Apple ID lockouts require you to go to iforgot.apple.com directly — Apple doesn't send unlock links by email.
2. "Your iCloud storage is full / photos will be deleted" Claims your iCloud storage is full and your photos, files, and backups will be permanently deleted unless you "upgrade now." Often offers a suspiciously cheap deal ("Get 50GB for just £0.99 — limited time"). Apple does send iCloud storage warnings, but they direct you to Settings on your device, not to a website link in an email.
3. "Receipt for your recent purchase" A fake App Store or iTunes receipt for something you didn't buy — often an expensive app or subscription (£79.99 for a game, £149.99 for a subscription). Includes a "Cancel this purchase" or "Report a problem" link that goes to a phishing site. The goal: you'll panic about the charge and click without thinking.
4. "Your device has been found" Targets people who've lost an iPhone or iPad. Claims the device has been found and you can track it via a link. This one's especially cruel — it preys on people who are already stressed about losing their phone. Real Find My notifications come through the Find My app and iCloud.com, not email links.
5. "Apple ID password reset request" Claims someone requested a password reset on your Apple ID. If you didn't request it, this could be legitimate (someone might have entered your email by mistake) — but the email itself should only be informational. If it asks you to click a link to "cancel the reset" or "secure your account," it's fake.
What a real Apple email looks like vs a fake
Real Apple emails:
- Address you by your full name
- Include the last few characters of your Apple ID email if referencing your account
- For receipts: include specific details (app name, exact price, order number, billing address)
- Links point to
apple.com,icloud.com, oritunes.com(hover to verify) - Have clean, minimalist Apple design (consistent with their brand)
- Never include attachments
Fake Apple emails:
- Use generic greetings ("Dear Customer", "Dear Apple User", "Dear iCloud User")
- Contain subtle grammar errors ("Your account have been locked", "Please verified your identity")
- Create extreme urgency ("24 hours", "immediately", "permanent deletion")
- Links point to non-Apple domains when you hover over them
- May include attachments (Apple never sends attachments)
- Often have slightly "off" design — wrong fonts, odd spacing, low-quality Apple logo
The fake Apple sign-in page — how to spot it
If you do click a link (accidents happen), you might land on a page that looks exactly like the Apple sign-in page. Here's how to tell if it's real:
Check the URL bar. The real Apple sign-in page is at:
https://appleid.apple.comhttps://iforgot.apple.com
Fake pages will have URLs like:
https://appleid-apple.com-verify.net❌https://secure-appleid.com❌https://apple.com.login-secure.xyz❌
Look for the padlock. A padlock (HTTPS) alone doesn't mean a site is safe — scammers use HTTPS too. But the absence of one is an instant red flag.
If in doubt, close the tab. Don't enter anything. Go to appleid.apple.com by typing it directly in your browser.
What Apple will NEVER do by email
- ❌ Ask for your Apple ID password
- ❌ Ask for your full credit card number
- ❌ Ask for your Social Security / National Insurance number
- ❌ Send you an attachment to open
- ❌ Ask you to call a phone number in the email
- ❌ Threaten to delete your account if you don't respond immediately
- ❌ Ask you to provide personal information in a reply to an email
Your 30-second checklist
✅ 1. Check the sender. Is it from @apple.com, @email.apple.com, or another legitimate Apple domain? If not, it's fake.
✅ 2. Check the greeting. Does it use your real name? Generic = suspicious.
✅ 3. Hover over links (don't click). Do they actually go to apple.com? If the URL looks wrong, don't touch it.
✅ 4. Check your Apple ID directly. Go to appleid.apple.com (type it yourself) and sign in. If there's a real issue with your account, you'll see it there.
✅ 5. Check recent purchases. Open the App Store on your device, tap your profile picture, then "Purchase History." Compare against what the email claims.
How to report fake Apple emails
Forward suspicious emails to [email protected].
If you've received a suspicious iMessage or calendar spam, report it directly through your device.
If you've already entered your credentials on a fake site:
Go to appleid.apple.com immediately and change your password
Turn on two-factor authentication if you haven't already
Check your trusted devices and remove any you don't recognise
Contact Apple Support at support.apple.com
