REAL Apple notifications are being used to drive tech support scams, with scammers abusing legitimate Apple account emails to lure victims into calling fake numbers, according to a report from BleepingComputer. They create an Apple ID they control and insert a phishing message into the personal information fields, then modify the account so Apple sends a genuine security alert about the change to the target.
BleepingComputer was able to replicate the attack, showing how the phishing message is split across fields and delivered inside a legitimate‑looking Apple notification that uses the attacker’s iCloud address. The approach, described as call-back phishing, filters out suspicious users and lets scammers focus on those who fall for the first part.
The article notes that the emails often look convincingly authentic, with headers showing a legitimate Apple sender and the iCloud address, yet the embedded phishing text is delivered within Apple’s infrastructure. According to the piece, while many users still view phone calls as more trustworthy than email, the scam relies on convincing, legitimate‑looking messages to drive action.