Gmork

Scam library · Email & phishing · Tech support

Fake Apple App Store subscription charge email

An email looks like an Apple receipt for a $99.99 subscription you don't remember buying. To cancel or get a refund, it says to click a link or call a phone number.

The email is fake. The link steals your Apple Account login, and the phone number connects you to scammers.

Last updated

What the message looks like

Email · example, not real

From: App Store <receipts@apple-billing-support[.]com>

Subject: Your receipt from Apple: Annual Subscription $99.99

Thank you for your purchase: Premium VPN Annual Plan, $99.99.

Didn't make this purchase? Call 1-888-555-0161 to cancel within 24 hours.

This is a made-up example. Real Apple receipts come from apple.com and don't ask you to call a number.

How this scam works

Fake receipts are designed to make you panic. Some include real app names, order numbers and your email address.

Callers may ask you to install remote access software to 'process the refund', then claim they refunded too much and ask you to send money back.

Apple says real purchases can be checked in your Apple Account's purchase history or in Settings on your device.

Some fake receipts are PDF attachments with phone numbers, a trick that avoids link filters.

If you really were charged, you can request a refund through Apple's official support site.

Treat any receipt with a phone number to call about cancellation as suspicious.

Scammers send these receipts in huge numbers, knowing that many people do have Apple subscriptions. The bigger and stranger the charge, the more likely you are to react quickly. That reaction is exactly what they're counting on.

To see your real subscriptions on an iPhone, open Settings, tap your name, then Subscriptions. On a computer, sign in to your Apple Account through Apple's official website. If the charge isn't listed there, the email is fake.

Once on the phone, fake 'Apple support' agents may say your account was hacked and ask you to move money or buy gift cards to 'secure' it. Real Apple support never asks for that.

Red flags

  • Receipts for purchases you didn't make.
  • Phone numbers to call for cancellation.
  • Senders not from apple.com.
  • Requests to install remote access software.
  • PDF receipts with phone numbers.

How to tell it’s fake

  1. Check purchases in Settings or your Apple Account.
  2. Request refunds through Apple's official site.
  3. Look at the sender's address.
  4. Never call numbers in suspicious receipts.
  5. Real Apple receipts list purchases you can also find in your account's purchase history.

What to do if you clicked, paid or shared info

Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.

If you clicked a link or called back

  • Don't call or click. Forward the email to reportphishing@apple.com.

If you paid

  • If you paid, contact your card issuer.

If you shared personal info, a password or a code

  • If you shared your Apple Account login or gave remote access, change your password and get your device checked.

Where to report and get help (U.S.)

If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.

  • Your bank or card issuer
    Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account.
  • Federal Trade Commission (FTC) · ReportFraud.ftc.gov
    Report the scam and get a step-by-step recovery plan.
  • FBI Internet Crime Complaint Center (IC3) · ic3.gov
    Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details.
  • AARP Fraud Watch Network Helpline · aarp.org helpline
    Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern.
  • IdentityTheft.gov · IdentityTheft.gov
    If you shared your Social Security number or someone opened accounts in your name.

How Gmork Scam Guard would warn you

Scam Guard in Chrome and Edge on your computer checks receipts in Gmail and Outlook on the web. It recognizes fake Apple pages and phone number traps. If a receipt seems legit, a scam expert can check it.

Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.

Questions people ask

How do I check Apple purchases?
In Settings or your Apple Account purchase history.
Do Apple receipts include phone numbers to cancel?
No. Use your account to manage subscriptions.
I gave remote access. What now?
Uninstall the software and get your device checked.
Where do I report Apple phishing?
reportphishing@apple.com.
What if the email has my real name?
Names and email addresses are easy for scammers to get from data breaches. A real name doesn't make a receipt real.

Sources

Related scams

Browse the full scam library · Scam-safety guides