Apple Pay Users Targeted by Phishing Attack Aimed at Stealing Payment Details

A sophisticated phishing campaign impersonating Apple sends authentic-looking billing-alert emails that instruct recipients to call a provided phone number; when victims call, scammers use scripted vishing to elicit 2FA codes and take over Apple IDs and linked payment methods. The report outlines the attack steps, red flags to watch for, and mitigation advice such as never sharing 2FA codes, verifying transactions independently, and changing Apple ID credentials if compromised.