“Smishing”, Or SMS Phishing Scam
Watch out for fake iPhone messages from criminals posing as Apple.
In a new phishing scam, crooks are sending SMS (text) messages to people warning them that their ApplePay account has been suspended.
The message contains a link to reactivate their account
This link takes them to a fake site and prompts them to enter their username and password, which the crooks then use to log into the actual account.
If the victim has two-factor authentication enabled (which they should), they then receive a message on their iPhone with a code.
They enter the code into the fake site, and the bad guy then enters it into the real site.
They now have access to the victim’s account.
Read more about how this scam works here.