Apple is alerting all iPhone users to a surge in highly targeted social-engineering attacks designed to trick victims into surrendering security codes, passwords, and financial data. These schemes now exploit real Apple authentication systems, making them dangerously convincing and putting users' digital lives at risk.

Key Details and Risks

A New, Ingenious Apple Service Hoax

 • Attackers trigger real Apple 2FA codes, then immediately follow with automated calls delivering additional codes.

 • A fake "Apple Support" representative calls moments later, warning of a supposed account breach to build credibility.

 • Victims believe the threat is real because the codes and automated messages genuinely come from Apple systems.

Why This Attack Works

 • Hackers piggyback on Apple's legitimate security workflows.
 • The rapid sequence—text, automated call, then fake support call—creates panic and urgency.
 • Similar scams targeted Google throughout 2024 and 2025; now the same playbook is being used against Apple users.

Apple and FBI Guidance: The One Rule That Stops Every Attack
 • Apple states clearly: real support teams will never call you out of the blue.
 • Users should not answer unsolicited calls or messages claiming to be from Apple.
 • The FBI reinforces this: legitimate companies do not proactively offer tech support by phone.