New Scam Uses Apple and Amazon Names for Fake Unauthorized Charges

A sophisticated phishing scam is targeting users by impersonating tech giants Apple and Amazon, according to cybersecurity firm Malwarebytes. The scheme displays fake "unauthorized charge" pop-up notifications, aiming to trick individuals into divulging sensitive personal information or making payments.

The scam typically appears as a browser pop-up, designed to closely mimic the legitimate branding of Apple or Amazon. It warns of a suspicious $149.99 charge that the user supposedly did not authorize. The notification urges the recipient to call a provided phone number to speak with a company representative and resolve the issue.

In reality, the phone number leads to scammers who will attempt to extract personal details such as login credentials, passwords, or financial information. In some cases, they may also try to persuade the victim to make a payment to "secure" their account. The amount of $149.99 is chosen for its plausibility as a subscription or product cost on either platform.

Malwarebytes advises that legitimate companies like Apple and Amazon do not typically alert users to account or payment issues via browser pop-ups. Official communications are usually sent via email, in-app notifications, or account activity logs. Users should be wary of any urgent warnings demanding immediate action or requesting a phone call.

To protect against this scam, users are advised to avoid clicking on suspicious pop-up notifications. If concerned about unauthorized charges, users should close their browser and log in directly to their Apple or Amazon accounts through the official websites to verify any pending transactions. Additionally, searching the provided phone number online can often reveal its fraudulent nature.