Scam library · Tech support · Seniors
Apple 'iCloud locked' or 'iPhone hacked' pop-up scam
On a Mac, iPhone or iPad, a web page suddenly warns: 'Your iCloud has been locked', 'Your iPhone has been hacked' or 'Apple Security Alert: call Apple Support immediately.'
It's a web page pretending to be Apple. Apple says to treat unexpected pop-ups, calls and messages as suspicious, and it never asks for your password, security codes or gift cards.
What the message looks like
From: Safari page (apple-secure-icloud-help[.]site)
Subject: Apple Security Alert
Your iCloud has been LOCKED due to suspicious activity.
Your photos, contacts and banking information are at risk. Do not close this page.
Call Apple Support: 1-855-555-0127
How this scam works
The page may play an alarm, show your device model, or claim to have found viruses. The phone number reaches a fake Apple support line. The caller may ask for your Apple Account password and the code Apple texts you, which lets them take over your account and lock you out. Others steer you to buy Apple gift cards or to 'secure' your bank account.
On iPhone, another version is a fake calendar invitation or notification that keeps appearing with scary warnings. It comes from subscribing to a spam calendar, and you can delete the subscription in Settings.
Red flags
- A phone number in a pop-up or calendar alert.
- It appeared while browsing, often after tapping an ad.
- Claims that your photos, contacts or bank are 'at risk'.
- A request for your Apple Account password or a verification code.
- Any mention of paying with Apple gift cards.
How to tell it’s fake
- Close the tab. On iPhone, open the tabs view and swipe it away; on Mac, press Command+Q to quit Safari.
- Check your account yourself in Settings > [your name] on iPhone, or at account.apple.com.
- If you need Apple, use the Apple Support app or the number on apple.com, not one from a pop-up.
What to do if you clicked, paid or shared info
Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.
If you clicked a link or called back
- Close the page. If it was a calendar alert on iPhone, go to Settings > Apps > Calendar > Calendar Accounts and delete the unknown subscription.
- Forward screenshots of suspicious Apple messages to reportphishing@apple.com.
If you paid
- Call your bank or card issuer using the number on your card. If you bought gift cards, contact Apple and the store right away with the receipt.
If you shared personal info, a password or a code
- If you shared your Apple Account password or code, change the password now and review trusted devices. Apple's guide for compromised accounts walks you through it.
Where to report and get help (U.S.)
If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.
- Your bank or card issuer
Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account. - Federal Trade Commission (FTC) · ReportFraud.ftc.gov
Report the scam and get a step-by-step recovery plan. - FBI Internet Crime Complaint Center (IC3) · ic3.gov
Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details. - AARP Fraud Watch Network Helpline · aarp.org helpline
Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. - IdentityTheft.gov · IdentityTheft.gov
If you shared your Social Security number or someone opened accounts in your name.
How Gmork Scam Guard would warn you
On your Mac or PC, Scam Guard runs in Chrome and Edge and recognizes fake Apple security pages: the lookalike address, the phone number, the 'do not close this page' pressure. It tells you plainly that it's not Apple and shows how to close it. If an Apple message in your browser seems legit, it explains how to check through your real account.
Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.
Questions people ask
- Does Apple show pop-ups saying my iPhone is hacked?
- No. Apple doesn't warn about hacking through web pop-ups with phone numbers. Close the page.
- I called the number and gave my code. What do I do?
- Change your Apple Account password immediately, sign out unknown devices, and contact Apple through the Support app.
- Why do I keep getting scary calendar alerts?
- You probably tapped a spam calendar subscription. Delete it in your iPhone's Calendar settings and the alerts stop.