1.8 billion iPhone users warned of fast-growing bank account scam
- Replies 0
For the 1.8 billion people who rely on iPhones, security threats are nothing new, but the latest scam has experts raising alarms.
Criminals are now exploiting Apple’s own systems to send malicious calendar invites that look legitimate and bypass spam filters.
These invites often claim to be purchase confirmations, tricking users into panicking and calling fraudulent support numbers.
Once that happens, attackers can convince victims to download harmful software or share sensitive account information.
What makes this scam particularly dangerous is that the invites come directly from Apple’s email servers, meaning they won’t trigger the red flags people are used to spotting.
According to cybersecurity experts, scammers are embedding phishing text in the notes field of iCloud Calendar invites, making the messages appear trustworthy.
One real-world example included a fake PayPal charge of $599, followed by a phone number for “customer support.”
Unsuspecting users who call are then pressured into taking actions that expose their personal data or financial accounts.
Security analysts emphasize that this is a new twist on the long-running “callback phishing” method, with a more convincing disguise.
Jamie Akhtar, CEO of CyberSmart, explained, “Because these invites are sent from Apple’s legitimate servers, they pass authentication checks and appear trustworthy, making them far harder for traditional filters to block.”
Also read: Discover the smart scam alert that could protect your bank account!
This reality makes it more important than ever for iPhone users to pause before clicking or calling in response to sudden alerts.
The key to staying safe is maintaining a healthy dose of skepticism, even when a message appears polished, convincing, and seemingly legitimate enough to have truly come from Apple.
The advice from professionals is simple but critical. Javvad Malik, lead CISO advisor at KnowBe4, warned:
Also read: Elder fraud case: Personal assistant accused of stealing $10M—see the shocking thing she brought to court
“Ask if this communication was expected, is it trying to spike emotion, and is there an artificial time limit pushing you to act now? If the answer is yes to any, stop and self-verify via a known channel. And treat calendar invites with the same skepticism as email.”
Taking a moment to question whether a notification is legitimate can be the difference between keeping your money safe and becoming a victim.
Read next: Are you a PayPal user? Here's what you should know about the latest scam that could put your account at risk
Have you ever received a suspicious calendar invite or phishing message that looked surprisingly real? Share your experience in the comments below and let us know what tips you use to stay safe online.
Criminals are now exploiting Apple’s own systems to send malicious calendar invites that look legitimate and bypass spam filters.
These invites often claim to be purchase confirmations, tricking users into panicking and calling fraudulent support numbers.
Once that happens, attackers can convince victims to download harmful software or share sensitive account information.
What makes this scam particularly dangerous is that the invites come directly from Apple’s email servers, meaning they won’t trigger the red flags people are used to spotting.
According to cybersecurity experts, scammers are embedding phishing text in the notes field of iCloud Calendar invites, making the messages appear trustworthy.
One real-world example included a fake PayPal charge of $599, followed by a phone number for “customer support.”
1.8 billion iPhone users warned of fast-growing bank account scam. Image source: Arnel Hasanovic / Unsplash
Unsuspecting users who call are then pressured into taking actions that expose their personal data or financial accounts.
Security analysts emphasize that this is a new twist on the long-running “callback phishing” method, with a more convincing disguise.
Jamie Akhtar, CEO of CyberSmart, explained, “Because these invites are sent from Apple’s legitimate servers, they pass authentication checks and appear trustworthy, making them far harder for traditional filters to block.”
Also read: Discover the smart scam alert that could protect your bank account!
This reality makes it more important than ever for iPhone users to pause before clicking or calling in response to sudden alerts.
The key to staying safe is maintaining a healthy dose of skepticism, even when a message appears polished, convincing, and seemingly legitimate enough to have truly come from Apple.
The advice from professionals is simple but critical. Javvad Malik, lead CISO advisor at KnowBe4, warned:
Also read: Elder fraud case: Personal assistant accused of stealing $10M—see the shocking thing she brought to court
“Ask if this communication was expected, is it trying to spike emotion, and is there an artificial time limit pushing you to act now? If the answer is yes to any, stop and self-verify via a known channel. And treat calendar invites with the same skepticism as email.”
Taking a moment to question whether a notification is legitimate can be the difference between keeping your money safe and becoming a victim.
Read next: Are you a PayPal user? Here's what you should know about the latest scam that could put your account at risk
