iPhone scam and account-safety guide.
Slow down before sharing codes, tapping suspicious links, installing profiles, sending money, or giving remote access to someone you do not trust.
- Urgent messages asking for codes
- Unexpected account-lock warnings
- Requests to install unknown apps or profiles
- Payment requests through gift cards or crypto
- Links that do not match the real company domain
Stop first; verify independently
Tech-support scams often create urgency and imitate trusted brands. If you did not initiate the contact, do not treat the alert, caller ID or the supplied phone number as proof.
What to do first
- Do not click the supplied link, call its number, install remote-support software, approve a new sign-in or share a password or verification code.
- Open the company’s app or type its official site yourself. If the alert appears only as a browser pop-up demanding a support phone call, treat it as suspicious.
- If you already shared credentials, change them using the legitimate provider and review devices and sign-in security. If you paid or shared card details, contact your bank via its official number immediately.
Next step: Use the detailed response guide below; official account recovery may be necessary.
Official reference: FTC: How to avoid tech-support scams. Menu names and service availability may vary by device, region and software version.
Do not share codes
Two-factor codes and recovery codes are powerful. Treat them like passwords.
Check the source
Go directly to the official app or website instead of using a suspicious message link.
Document the issue
Save screenshots when safe. They can help you explain what happened without clicking again.
Remote security help can slow the situation down.
Get guided help when you are unsure whether a message, popup, email, or account warning is legitimate.
What to do in the first five minutes of a suspected scam
Scammers use urgency, familiar logos, caller-ID spoofing and fake security alerts. You do not have to resolve the warning through the same message or phone call.
- Stop the interaction. Do not follow the link, install a profile, run a command, approve a sign-in request or give screen-sharing access. Hang up on unexpected support calls.
- Check independently. Open the company's app or type its official address yourself. Use a verified support channel rather than a number or URL supplied in the suspicious message.
- If you shared a password or approved a sign-in, act promptly. Change the affected password through the real service, review signed-in devices and two-factor authentication, and follow that provider's account-security instructions.
- If you paid or shared payment details, contact the payment provider. Use the number on your card or the provider's official app, report the incident and ask what protective steps are available. Preserve records without reopening suspicious links.
- Watch for recovery scams. Anyone promising a guaranteed refund, secret account bypass or paid data recovery from a fraudster may be attempting another scam.
What to save
Note when the request occurred, the sender information, payment reference and any screenshots you can capture safely. Do not put passwords, private documents or full card numbers into an iPhoneXpert contact form.
What we can and cannot do
Guided help can explain warning signs and point you toward official security steps. iPhoneXpert cannot reverse transfers, guarantee recovery, bypass Apple security or investigate a crime.
Official reference: Apple's guidance on phishing, fake support calls and social engineering.