Listen to the episode
TLDR
iPhone users are being hit by a tech support scam that imitates an Apple Pay transaction to scare victims into calling a fake support line. A browser page shows a $657 "processing" payment, a fake Face ID check, and then reads an...
How it works
iPhone users are being hit by a tech support scam that imitates an Apple Pay transaction to scare victims into calling a fake support line. A browser page shows a $657 "processing" payment, a fake Face ID check, and then reads an...
Red flags
- Transaction ID, amount, and authorization code are hardcoded and identical for every visitor, while only the date changes dynamically. "Face ID · verifying identity" is just a styled HTML element
- there is no real biometric prompt or Apple Pay sheet. The page uses the Web Speech API to speak a fake alert and hijacks browser back navigation to warn that closing it will expose banking data
What to do
- 1Do not call the number shown. Close the Safari tab, force quit the browser, and clear history and site data. Verify any charge directly in the Apple Wallet app or your bank's app — no real transaction will appear. Update iOS and Safari, enable fraud blocker/anti scam
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/scams/2026/08/fake-apple-pay-charge-brings-the-classic-tech-support-scam-to-your-phoneFAQ
Is Fake Apple Pay charge scam brings classic tech support fraud to iPhone users a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Transaction ID, amount, and authorization code are hardcoded and identical for every visitor, while only the date changes dynamically. "Face ID · verifying identity" is just a styled HTML element; there is no real biometric prompt or Apple Pay sheet. The page uses the Web Speech API to speak a fake alert and hijacks browser back navigation to warn that closing it will expose banking data
What should I do first?
Do not call the number shown. Close the Safari tab, force quit the browser, and clear history and site data. Verify any charge directly in the Apple Wallet app or your bank's app — no real transaction will appear. Update iOS and Safari, enable fraud blocker/anti scam
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.