Defense Brief · Issue #002
Apple iCloud Phishing: Did Apple Just Text You? Look Closely
A text claims your iCloud account is locked and will be deleted unless you act within 24 hours. Here's how to spot the warning signs and check your Apple Account safely — without tapping the link.
· Red Flag Weekly
“Your iCloud has been locked due to suspicious activity. Verify your identity within 24 hours to prevent permanent account deletion: id-apple-security[.]net”
If a text like this landed on your phone, your heart probably skipped a beat. It looks official. It might include a case number. And it threatens your photos, backups and messages.
The FTC describes this exact pattern: an unexpected text, email or call that looks like it's from a company you know, like Apple, claiming there's a problem with your account and telling you to click a link right away. The goal is to steal your information. FTC, July 2023
Know the Signs
Three red flags of a fake Apple alert
- 1
A link to a look-alike website
The link goes to an address that isn't Apple's, often with extra words like "verify" or "security" around "apple." Apple's real account page is account.apple.com. Don't sign in through a link you didn't expect. Apple Support
- 2
A countdown clock
"Within 24 hours" and "permanent deletion" are meant to rush you. Scammers want you to react before you think. FTC
- 3
A request to "verify" your password or details
The page asks for your Apple Account email, password, verification code or payment card. Apple does send real messages, such as verification codes you asked for — but a message you didn't expect that sends you to a link to enter your details is a red flag. Apple Support
What to do if you get the text
Your 10-second defense
Don't tap the link.
Close the message. Don't reply.
Check your account yourself.
On your iPhone or iPad, open Settings and tap your name at the top. Or type account.apple.com into your browser. This is a safe way to check — but a normal-looking screen doesn't prove a message is real or fake, so still don't use the link.
Get help from Apple directly.
If you're unsure, go to support.apple.com yourself, or contact Apple Support. Apple's guide explains how to recognize and report phishing. Apple Support
Report it.
Use your phone's "report junk" option or forward the text to 7726 (SPAM), and report scams to the FTC at ReportFraud.ftc.gov. FTC
If you already entered your information
- If you entered your Apple Account password or a verification code: Don't use the link. Go to Apple yourself — open Settings on your iPhone or iPad and tap your name, or type account.apple.com into your browser.
- Change your Apple Account password right away from there.
- Review your trusted devices and security information: remove any device you don't recognize, and check your trusted phone numbers, email addresses and recovery details.
- Follow Apple's official guidance for an account that may be compromised. Apple Support
- If you entered a card number: Call your bank or card company using the number on the back of your card.
- If you reused that password elsewhere: Change it on those accounts too.
- If someone used your information: Report it and get a recovery plan at IdentityTheft.gov.