Scammers have figured out a new way to make iPhone and other Apple device owners into revealing their iCloud login credentials. You may get a call from someone claiming that some “suspicious activities” may have put your Apple iCloud account at risk and you are required to talk to an Apple customer support executive to verify your personal details and “lock” your ID.
The scammers may sound quite intimidating. After the so-called executive alerts you about the possible “suspicious activities” on your iCloud account, he or she will ask you to press 1 or call a different phone number to fix the issue. It is highly recommended that users do not press 1 or dial any other number.
The scam is very simple. Scare people, make them re-verify their accounts and in the process steal personal information including banking details and iCloud login credentials. These types of calls mostly ask you for your credit or debit card details and under no circumstances should you reveal these details to anyone over a call. A genuine customer support representative will never ask for any personal information or banking details ever.
Scammers are also resorting to phishing scams to steal iCloud login details from owners of lost iPhonesMost iPhone owners use the Find My service to protect their iPhone in case it is lost or misplaced. So, when someone loses their iPhone, it is quite natural to lock it by marking the device as lost by visiting iCloud.com website.
When an iPhone is marked as lost, it is remotely locked with a passcode and you can display a custom message with your phone number on your missing device’s Lock screen. As the custom message on the lost iPhone displays a phone number, scammers are now sending an SMS to that phone number with a link to a phishing website which looks exactly like the iCloud website. The message reads, “Hello, your lost reported iPhone has been found. Click here to view the location” along with the link to the phishing website.
The moment you click on this link to see the location of your lost iPhone, a fake iCloud website which looks exactly similar to the original one, will open and ask you to login with your iCloud ID and password. This phishing website simply steals your login information and sends it to the scammers so that they are able to unlock your lost iPhone and use it.