Apple Pay text scam threatens $8,250 loss in 35 minutes

New! Free live CyberGuy class: Protect Your Money From Today's Biggest Threats

Join us Saturday, Aug. 29, at 10 a.m. ET for a free CyberGuy LIVE class covering five simple steps to help defend yourself against AI scams, fraud, identity theft and financial hacks. Kurt "CyberGuy" Knutsson will explain how to set up bank alerts, strengthen your account logins, protect your phone number, freeze your credit and help secure your retirement savings against unauthorized transfers. No technical experience is needed. You'll also receive our financial protection checklist, and every registrant will get a link to the class recording afterward.

Reserve your free spot today at CyberGuyLive.com.

The message claimed $8,250 had already been charged through Apple Pay and warned that a duplicate $8,250 transaction would "auto-approve" in 35 minutes. It told Paul to call an 855 number, quote "Case CA-3321" and "verbally kill the pending charge." We partially masked the callback number so no one calls it accidentally.

The message looks chaotic, but nearly every phrase has a purpose. The sender uses dramatic wording, fake authority and a tight deadline to push Paul toward one action: calling the number in the text.

The message came from a number beginning with +44, the international calling code for the United Kingdom. Yet it claims to come from "Apple Pay Account Services" and tells Paul in Washington, D.C., to call a separate 855 toll-free number. A different callback number does not automatically prove fraud. However, an overseas sender directing a U.S. recipient to an unrelated support line should make you stop before calling.

The text uses the Apple Pay name several times and signs off as "Apple Pay Account Services." It also arrived as a blue iMessage with the word "Encrypted" shown beneath it. Those details can make the message feel official. However, encryption only means the message was protected while traveling between devices. It does not confirm that Apple sent it. The signature also sounds generic. It does not name Paul's bank, identify the card involved or provide an official Apple support channel.

The message says Paul's Apple Pay account has "hemorrhaged" money. It calls the situation a "catastrophic fraud event" and claims his contactless limit has been "crushed" to $0. It later tells him to "verbally kill the pending charge." Those words sound dramatic because they are meant to produce fear. A legitimate financial alert would normally use clear terms such as charged, declined, frozen or pending. It would not describe an account as hemorrhaging money or ask you to kill a charge.

The first transaction allegedly happened at: "an agricultural processing surplus in Stockton, CA." The second supposedly involved: "a payday lending chain in Modesto." Neither phrase identifies an actual merchant. They sound specific at first because they include industries and real California cities. However, they fall apart when you look closer. A legitimate transaction alert would usually show the merchant's name. It would not rely on vague descriptions such as "agricultural processing surplus."

The sender claims Paul's contactless spending limit has been "crushed to $0." In the same message, it says the second $8,250 transaction is pending and "will auto-approve in 35 minutes." Those claims do not fit together. If the sender had already blocked contactless activity, why would another contactless charge automatically go through? The contradiction matters because it shows the message was written to create panic rather than explain a real account problem.

The text serves as bait. The phone call allows the scammer to take control of the conversation. Once you call, the person may claim to see your account. They could ask for your name, card number or Apple Account email. Next, they may request a verification code and describe it as a way to cancel the charge.

A scammer could also ask you to install a remote-access app. That would let the person view your screen or guide you through financial transactions. Some callback scams eventually instruct people to transfer money into a "safe" account. Others claim they sent an oversized refund and demand that the extra money be returned.

Do not call the number in the text. Instead, check through channels you already trust:

Apple notes that Wallet may not display the complete transaction history for every card. Your bank or card issuer remains the best source for questions about an Apple Pay charge. Do not rely on a phone number from a text, caller ID or sponsored search result.

Before deleting the message, save a screenshot that includes the sender information.

On an iPhone:

Hang up as soon as you suspect fraud. Then take action based on what you shared:

These steps can help you check the warning safely without following the scammer's script.

A deadline can make a fake warning feel real. Give yourself time to check the account independently. A legitimate fraud department will still be there after you close the text and open the official app.

Do not call the number in the text or reply to the sender. Instead, open Wallet or your bank's official app and review recent transactions. You can also call the number printed on the back of your card. Never rely on contact information supplied in an unexpected message.

A security code can approve a login, password reset or payment. Never read one to a caller, even when the person claims it will cancel a fraudulent charge. Also, do not install an app or share your screen because someone says they need access to fix the problem. Apple representatives will not ask for your password, device passcode or two-factor authentication code.

The text sent to Paul did not include his name or other private details. However, callers may use information from data brokers or past breaches to make their stories sound credible. A data removal service can reduce the amount of personal information available through people-search sites. It cannot erase every record or stop every scam. Still, less exposed data gives criminals fewer details to use against you. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Consider stronger monitoring if you shared sensitive information or continue receiving targeted financial scams. Identity theft protection can alert you when someone opens a new credit account. It may also notify you when monitored information appears in known breaches. The service cannot prevent every form of identity theft. Therefore, you still need to review alerts and secure affected accounts. See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.

Reporting the message may help Apple and your carrier identify similar scams. On an iPhone, tap Report Spam or Report Junk beneath the message, depending on the option shown. Then block the sender and delete the conversation. You can also forward the text to 7726, which spells SPAM. Because this message impersonates Apple, take a screenshot and email it to reportphishing@apple.com.

This Apple Pay scam piles on fear from the opening line. The $8,250 charge grabs your attention, while the 35-minute deadline tries to stop you from checking whether any of it is real. Even the strange phrases serve a purpose because they keep the message sounding urgent and severe. Paul made the right move by pausing instead of calling. When an unexpected fraud alert arrives, leave the message and check through Wallet, your bank's official app or the number printed on your card. Never give a caller a verification code or access to your screen.

Have you received a convincing Apple Pay alert or another scam text that nearly fooled you? Write to us at CyberGuy.com and tell us what the message said and how you spotted the warning signs.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.