Apple Pay phish uses fake support calls to steal payment details

This Malwarebytes write-up details an active Apple Pay phishing campaign: victims receive convincing Apple-styled emails claiming fraudulent Apple Pay charges and are instructed to call a phone number where attackers posing as Apple Fraud & Billing collect Apple ID verification codes, payment details, and other data to bypass 2FA and seize accounts. The report includes example messages and numbers, warnings to never share 2FA codes, and mitigation steps such as changing Apple ID passwords, reviewing Wallet and bank statements, and using Malwarebytes Scam Guard.