The latest iMessage phishing scam is easy to fall for. Here’s how to avoid it

It’s a new year, but bad actors are still at it with an old trick repackaged for iPhone users. Bleeping Computer reports a rise in phishing attacks targeting iPhone users that involves tricking them into disabling built-in protections and clicking on malicious links.

In an increasing number of cases, text messages appear to come from fake delivery agents posing as service messages from the U.S. Postal Service (USPS). Two Digital Trends contributors have received such sham messages recently in North America.

Reddit / Digital Trends

We have also come across reports of a similar tactic being deployed in other regions, including India, where online frauds are posing as DHL or FedEx employees.

Recommended Videos

Anyone fancy finding out who ‘kathlyn afaf’ could be?

They are trying to Royal Mail scam people but gone via iMessage so their email address has popped up… pic.twitter.com/jr5yPGaA3O

— Sanny Rudravajhala (@Sanny_Rudra) January 11, 2024

Please enable Javascript to view this content

From the user posts that we have seen on social forums so far, the tactic has been in use for at least the past couple of years. If you look closely at the samples attached below, you will notice a pattern in the scammy text messages:

“Please reply Y, then exit the SMS and open it again to activate the link, or copy the link to your Safari browser and open it.”

Reddit / Digital Trends

This is a recurring theme, with slight modifications in the language. Reply with a Y looks harmless on the surface, but it’s a clever way of disabling the built-in phishing protection protocol on iPhones.

Apple has created a system for iMessage that automatically blocks links in messages from unknown senders. You can only open those links if you add the sender to your contact list (identifying them as a known contact) or reply to it.

Reddit / Digital Trends

When you reply to a message, as the fraudulent message asks, iMessage switches the bad actor to a “known” status. Now, the link is active. Once you tap on it, the URL opens in a browser of your choice.

In some cases, the spammy message asks users to copy-paste the URL into the Safari browser. Now, where the link leads remains uncertain. As per a few reports, users are led to a page where they are required to enter their credit card information.

How to avoid the scam

Reddit / Digital Trends

If you receive a text from a supposed mail service, do not reply or click on the link in the message. Start with the sender’s name or number. If there’s a spelling error, or if it’s a personal number (or iCloud address), it’s certainly a sham.

Also, pay attention to the country code. If it’s coming from another country, avoid interacting with it at all costs. If you have any active mail assignments, always check the progress or reach out to customer care via the details mentioned on the company’s official website.

Every time you receive a message from an unknown sender, the iMessage app shows a Report Junk option at the bottom, followed by the delete prompt in the next step. Do keep in mind that you can’t report a message after replying to it.

@IndiaPostOffice I received this today, I know its some kind of scam as it is asking for 25 rs directly and its sent using iMessage using thus mail id but still I want to confirm this with officials. @Cyberdost pic.twitter.com/4FXX7UZMjT

— Vikash Gathala (@vikashgathala) May 30, 2024

If you haven’t opened the message yet, simply swipe left on it, select the Bin-shaped red delete icon, and then select Delete and Report Junk. As an added layer of assurance, you can also go ahead and block the sender.

A few weeks ago, the government’s Cybersecurity and Infrastructure Security Agency (CISA) released a detailed advisory on keeping your phone safe from all kinds of cyberattacks. We compiled the core findings for an average smartphone user, and you should check that out to cultivate safe digital habits this year.

Editors’ Recommendations

  • Here’s every carrier that lets your iPhone send RCS messages to Android phones

  • iOS 18.2 may make charging your iPhone even easier. Here’s how

  • Here’s how much the iPhone camera has changed in 10 years

  • iOS 18 has a weird (but serious) iMessage bug. Here’s how to avoid it

  • iOS 18 gives your iPhone a super-handy charging feature. Here’s how it works




Related posts

Latest posts

Nubia Z70 Ultra review: Uniquely different

Thanks to an invisible selfie camera cutout, Nubia's Z70 Ultra is immersive like no other phone you can buy today.

Stuffcool Roam is one of the best 10000mAh power banks you can buy in India

Stuffcool has a new power bank, and the Roam does a

Partiful Calls Apple a Copycat for New Invites App

The developers behind well-known event app and website Partiful today suggested that Apple was in violation of its own App

Apple Heart Month Activity Challenge Launching on Valentine’s Day

In honor of Heart Month, Apple Watch owners can earn an award by completing a workout to fill their Exercise

Samsung is Working on a Tri-Fold Smartphone

Samsung has been making foldable smartphones since 2019, but we have yet to see a foldable iPhone from Apple. Rumors

Nomad Launches Universal Cable That Can Charge Apple Watch and USB-C Devices

Nomad today announced the launch of a unique cable that isn't quite like anything else on the market. The Universal

Sonos Plans to Launch Apple TV-Like Streaming Box

Sonos is developing a high-end streaming set-top box that's expected to launch this year, reports The Verge. While any set-top

I tried Opera’s new browser for mindfulness — here’s how it went

I tried Opera's new web browser that comes with features to help you relax and unwind. Here's how it turned out to be.

Galaxy AI helped Samsung reach a massive smartphone milestone

For the first time since 2018, Samsung managed to snag a spot in the global top-selling smartphone model ranks, thanks to AI push on the Galaxy S24 Ultra.

Exciting new software wants to be the Android of smartglasses

A new operating system, which wants to be the Android of smartglasses, has been announced. What's more, you can try it out today with the right hardware.