July 29, 2026, 3:39 pm | Read time: 2 minutes
An email claiming to offer a refund from Apple is currently drawing attention. The message promises a payout of 29.99 euros and appears credible at first glance. However, it is actually a phishing attempt. Those who follow the included link do not end up at Apple and risk sharing personal data or even payment information.
How the Scam Works
In the message, the senders explain that a refund for an overcharged subscription amount cannot be processed automatically. Therefore, the payout is temporarily suspended. To receive the money, recipients are asked to confirm their details via the “Check Data Now” button.
The perpetrators deliberately create a sense of urgency. The email gives the impression that the refund may not be issued if the data is not quickly verified. Such requests are typical features of phishing attacks. The goal is to prompt recipients to act quickly without scrutinizing the message.
Fraud with Apple ID! What users should definitely not do now
Attention, Savings Bank Customers: This Email Could Empty Your Account
Signs That the Email Is Suspicious
According to security experts from “Mimikama,” there are several indicators of a scam attempt:
- The email does not come from an official Apple address.
- The salutation is impersonal (“Dear Customer”).
- Pressure is applied because money is allegedly on hold.
- The link does not visibly lead to an official Apple website.
- The mentioned refund is not linked to a specific order or invoice.
- Noticeable phrasing and language errors appear unprofessional.
Also of interest: iOS 26.6 is here! Should you install the update right away?
Anyone who recognizes several of these features should approach the message with particular caution and not provide any information through links in the email.
How Affected Individuals Should Respond
Anyone who receives such a message should not open the included link or enter any personal data. Instead, the Apple account should be accessed only through the official website or through the Apple account settings.
Those who have already clicked the link and submitted payment data should contact their bank or the relevant payment service provider as quickly as possible. This may help limit potential damage.