Soft2Securescam registry · since 2014
Scam registry·Account suspension / verificationdormant

Fake iTunes Store receipt

A receipt for an iTunes purchase you never made, around $200, with the line "if this wasn't you, your account has been compromised" and a link to cancel. The cancel page is the phishing form.

Impersonates
Apple
Arrives by
email
First seen
2016-11
Last seen
2016-11
Specimens
1
Updated
2026-09-02

Right now the only version we have seen

How to recognise it

  1. A purchase you never made, priced to make you act
  2. The escape hatch is a link, not your Apple ID settings
  3. Apple receipts show the last digits of your payment method; these do not

What to do

  1. Do not use the link; check purchases in Settings → Apple ID → Media & Purchases
  2. Forward the email to reportphishing@apple.com
  3. Delete it
Already called, clicked or paid? what to do in the next hour
  1. Entered a password? Change it now, and everywhere else you used the same one
  2. Entered card details? Call your bank, ask them to block the card and reissue
  3. Entered a one-time code? Sign in to the real service now and check for changes to email, phone and payment settings
Report:Apple: recognise and avoid social-engineering schemesFTCApple: official page on scamsSend us your version

How it changed

nothing to compare yet · one wave on record
2016-11the ~$200 receipt with a cancel link
Got a different version? A new subject line, sender, number or domain becomes the next point on this line. Redacted before publication. Send it →
02 Sept2026
Registry

Family created

Grew out of the 2016 guide.

Same trick, other brands

Indicators

  • None on record yet. Indicators change weekly; an empty list never means an email is safe.

In other streams

Registry data

Machine-readable
/scams/apple-itunes-receipt.json
Timeline feed
/scams/apple-itunes-receipt/feed.xml
Sources
2 · 1 change logged
Licence
CC BY 4.0 · attribution required
Created / updated
2026-09-02 / 2026-09-02