When Sophia Rosenbaum went looking for tickets to a sold-out Ariana Grande concert, she ran into more than her fair share of scammers on Facebook Marketplace. So, when she found a ticket seller who seemed legitimate, she took extra precautions. Show
After speaking with the seller over audio chat multiple times, she was confident that he wasn’t a fraudster. She still felt good about the transaction after he insisted that she send him money over Apple Cash — a payment system similar to Venmo or Cash App. That was, until he accepted her transfer and disappeared [*]. Scams that take advantage of digital wallets and mobile payment apps like Apple Pay or Apple Cash are on the rise. According to the U.S. Public Interest Research Group (PIRG), fraud complaints from digital payment systems have doubled in just the past year [*]. Most consumers don’t realize that once money leaves a mobile wallet, there are few ways to get it back. So, how do you protect yourself against scams and fraudsters when using Apple Pay to send cash or make payments? In this guide, we’ll explain how Apple Pay scams work, the red flags and common scams to watch out for, and how to keep your money safe. How Does Apple Pay Work? Why Do Scammers Use It?Apple Pay is a digital wallet and contactless payment technology designed exclusively for Apple devices. With 85% of U.S. retailers accepting Apple Pay [*], there’s a good chance that you’ve already tapped your iPhone or Apple Watch to make a payment using this platform. You can also use it on your Mac or iPad to pay for services, shop online, and sign up for subscriptions (like Apple Music or TV). Here’s how it works:
But just because scammers can’t steal your credit card numbers using Apple Pay doesn’t mean they can’t steal your money. Apple Cash is a feature that allows you to send money to other Apple Pay users. Criminals target Apple Cash because it’s a peer-to-peer digital wallet that doesn’t offer buyer protection. While federal laws cap your liability for credit card fraud at $50 (and many companies offer $0 liability policies), those same laws don’t apply to digital payment systems like Apple or Google Pay. If you send a scammer money over Apple Cash, it’s essentially gone — you can’t initiate a chargeback or request a refund, making every transaction a potential risk. Also, if scammers gain access to your Apple Pay account, it means they don’t need your physical credit or debit card or your PIN. ✅ Take action: If scammers have your sensitive info (such as your email or Apple ID), your bank, social media, and online accounts could be at risk. Try Aura’s #1-rated identity theft protection free for 14 days to secure your identity against scammers. 7 Ways Fraudsters Try To Scam You Using Apple PayApple Pay is generally secure and safe to use in most situations. But there are ways that scammers can take advantage of Apple Pay to steal your money. 1. Buying big ticket items with stolen credit card details on Apple PayApple Pay offers one of the easiest methods to pay for items on Facebook Marketplace or other online marketplaces. But scammers take advantage of this ease of use to scam you when you’re selling hard-to-find items online. In this scam, fraudsters connect a stolen credit card (usually purchased off the Dark Web after a data breach) to their Apple Pay wallet. Then, they search for big-ticket items on sites like eBay or Facebook Marketplace and offer to pay for these items through Apple Pay. But when the original card owner files a fraud dispute against the transaction, the seller loses both the money and the product. Less than 12% of people scammed using Apple Pay got their money back. Source: BBBThe same scam can also be run in reverse: scammers accept your payment without sending the promised product. How to avoid this scam:Treat Apple Cash as if you are handing someone physical cash. If you don’t know them, don’t send them money. 💡 Related: Were You Scammed on eBay? Here's What To Do! → 2. Fake lottery or sweepstakes scams that steal your personal informationScammers may try to fool you into thinking that you’ve won a prize or sweepstakes by sending unsolicited emails or texts.In this scam, their goal is to get you to click on the link, which directs you to a fake Apple Pay website through which you can request the alleged prize money. Then, scammers use the information you provide — such as your name, address, and payment information — to steal money from your wallet. How to avoid this scam:Always be cautious when clicking on links in unsolicited texts and emails. Click on the padlock symbol of the website you’re taken to, and look for signs that it’s legitimate — such as verification that you are using the official “Apple.com” domain which includes a valid SSL certificate. Click the padlock symbol near a site's URL and check that it's security certificate is valid and issued to the real company.💡 Related: 10 Text Message Scams You Didn’t Know About (Until Now) → 3. Overpayment scams on online marketplacesOverpayment scams are among the most common schemes you’ll find when using payment systems (like Cash App and Venmo). In this scam, fraudsters contact you about an item you have for sale. Once you agree on a price, they’ll “accidentally” send you too much money. Then, they’ll ask you to refund them via Apple Cash or a similar digital wallet. But in reality, the scammer used stolen credit card details to make the original payment. When the true card owner files a dispute, you’ll lose both the money for your product and the amount you “refunded” to the scammer. How to avoid this scam:Be extremely cautious if someone “accidentally” sends you too much money. Never refund to a different payment platform other than the one used for the original transaction. Always wait for the payment to clear before sending products or refunds. 💡 Related: How to tell if someone is scamming you online → 4. Phishing text messages that claim your Apple Pay account has been compromisedScammers will try to trick you into thinking there’s an issue with your Apple Pay account. Source: AppleFraudsters often try to create a sense of urgency in order to get you to act quickly (this is called a social engineering attack). In this scam, you receive a text message claiming that there’s an issue with your Apple Pay account — it’s been suspended or hacked — and you need to verify your identity. But if you click on the link, you’ll be taken to a phishing website designed to steal your credit card and personal information. How to avoid this scam:Never enter personal or financial information on a website that was linked in an unsolicited text message or email. This is one of the most common types of phishing attacks. Instead, always reach out to Apple Support directly at support.apple.com/contact to see if there are issues with your account. ✅ Take action: If scammers get your sensitive personal data from a data breach, they could take out loans in your name or empty your bank account. Try an identity theft protection service to monitor your finances and alert you to fraud. 5. Hacking your account information over unsecured Wi-Fi networksHackers use “man-in-the-middle” (MiTM) attacks to intercept your data while you’re out in public. For example, if you enter your credit card information into Apple Pay while using public Wi-Fi, a hacker could steal your information and use it for financial fraud. In more sophisticated examples, scammers create devices designed to mimic payment terminals and fool you into giving them access to your Apple Pay account. In one example, ethical hackers showed how they could create fake payment terminals at train stations and use them to siphon funds out of Apple Pay accounts. How to avoid this scam:Never enter sensitive information onto websites or apps while using public Wi-Fi. Instead, turn on your mobile data or wait until you know you’re on a secured network. For added protection, consider using a Virtual Private Network (VPN). This is a tool that encrypts your data and hides your location so that hackers can’t spy on you. Aura’s military-grade VPN can protect you from scammers and hackers. Source: Aura6. Receiving unsolicited payments (or requests) via Apple PayIf you receive a strange payment or request for payment on Apple Pay, it’s most likely a scam. Here’s why:
How to avoid this scam:Never send Apple Cash payments to people you don’t know. If you receive a request for money from a company, verify it in your account. Most legitimate companies won’t send you requests over payment methods like Apple Pay, Venmo, or Zelle. 💡 Related: Did You Get Scammed on Cash App? Here's What To Do → 7. Bots that steal your Apple Pay two-factor authentication (2FA) codesCriminals on Telegram are sharing a new Apple Pay scam that gives them access to your account — and your money. In this scam, hackers use bots to automatically call your phone number and trick you into handing over your Apple Pay 2FA codes [*]. Using 2FA codes is a secondary security measure that requires a special passcode to access your account. If scammers already have your Apple ID and password, all they need is your 2FA code to take over your account. In one example, a scammer successfully used this scheme to buy more than $20,000 in gift cards with a hacked Apple Pay account. How to avoid this scam:Never give out 2FA codes on the phone, in text messages and social media DMs, or in emails. Legitimate customer support agents will never ask for these codes. If someone wants you to give yours up, you’re dealing with a scammer. 💡 Related: The 11 Latest Telegram Scams To Watch Out For → Were You Scammed on Apple Pay? Do This Now!If a scammer tricked you on Apple Pay, you have a few options for getting your money back and protecting your account. Here’s what to do: Report the transactionApple Cash is a peer-to-peer money transfer service that doesn’t include buyer protection. Unfortunately, this means that an Apple Cash transfer can’t be reversed (because you authorized the transfer). But if you used Apple Pay to send money to a fraudulent store or scammer, you can dispute the transaction. Go to Latest Transactions and select the fraudulent payment that you wish to dispute. Then, click on Report an Issue → Incorrect Merchant Info → Merchant Name, Merchant Category or Other Issue. Cancel the paymentIn the off chance that the scammer hasn’t yet accepted your payment, you can try to cancel it. To cancel an Apple Cash transfer, open iMessage and find the conversation you’ve had with the scammer. Select Payment. Then, in the wallet app, click Latest Transaction and select the payment you want to cancel. If the Cancel Payment option isn’t there, the scammer has already accepted the payment, and Apple can’t refund you. Update your passwords and enable 2FAIf scammers get access to your Apple ID, they can take over your phone, email, and more. Whenever you think you’ve been scammed, make sure to update your passwords and security questions. Choose unique passwords that are at least eight characters long and include a combination of letters, numbers, and special characters. For added security, enable 2FA with an authenticator app (not over SMS). And to keep all your passwords organized so that you won’t lose or forget them, sign up for a secure password manager like the one that is included with every Aura plan. 💡 Related: The 14 Latest PayPal Scams (and How To Avoid Them) → Contact your bank and tell them you’ve been the victim of fraudMinimize the damage scammers can do by contacting your bank’s fraud department and telling them what happened. Bank and credit card fraud departments should be able to walk you through the next steps, which might include closing your accounts and setting up new ones. For even more protection, consider freezing your credit as well. Was your phone lost or stolen? If you have Find My iPhone turned on, you can suspend your Apple Pay account by placing your device in Lost Mode (instead of canceling your cards). How to Avoid Getting Scammed on Apple Pay
The Bottom Line: Stay Safe From Apple Pay ScammersApple Pay is a convenient way to pay for items or send cash to friends. But like any payment system, it’s a prime target for scammers. Stay safe by only sending money to people you know and avoiding common phishing and social engineering attacks. And for added security, consider signing up for Aura. Can someone else use my card on their Apple Pay?You can even invite another Apple Card owner to combine credit limits with you and form one co-owned account. You can also share your Apple Card with members of your Family Sharing group, including teens and adults. Everyone on the shared account can use Apple Card and view their spending.
How do I stop someone from using my card on Apple Pay?On your iPad, open the Settings app > Wallet & Apple Pay > Apple Card > Info tab. Tap the participant that you want to remove, tap Stop Sharing, then tap Confirm.
Can Apple tell me who used my card?You can't find the information specifically. Once someone has your CC or DC numbers and verification code, that's all it takes. Best to do is change your Apple ID password and call you card company and ask them for a new one. You can't find the information specifically.
What happens if someone uses your Apple Pay?Apple Pay is not hackable but your card can be compromised. You should contact the card issuer and cancel the card.
|