iPhone pre-order fraud and phishing scams

Fraudulent activities targeting iPhone pre-orders have emerged, involving both direct credit card theft and phishing scams.

In Hong Kong, a large-scale credit card fraud incident involving approximately 25 million HKD affected over 1,200 citizens during the pre-order period. The incident was reportedly facilitated by a simplified ordering process that lacked strict two-factor authentication or multi-step verification. Analysts noted that some banks may have relaxed security protocols to maintain high transaction conversion rates, highlighting vulnerabilities in the region’s digital payment infrastructure.

Cybersecurity firm Kaspersky has identified a global wave of fraudulent websites exploiting the high demand for the iPhone 18 series, specifically targeting the iPhone 18 Pro Max. These sites operate in multiple languages, including English, Arabic, and Portuguese, and use deceptive interfaces to mimic credible retailers. To entice victims, these scams often promise significant discounts of up to 25 percent.

Beyond stealing credit card information, these schemes aim to extract personal data such as full names, phone numbers, email addresses, and WhatsApp contact details. Some fraudulent actors encourage payments via Bitcoin or use deceptive terms—such as promising full refunds or partial balance payments—to lower a victim’s guard. Additionally, some schemes involve tricking users into installing unofficial applications, which can lead to remote device locking or further social engineering attacks.