Is the Apple Security Alert a Scam? (Yes, Here's Why)

Yes. If a pop-up appeared on your screen claiming to be an "Apple Security Alert" warning that your device is infected, locked, or compromised, and telling you to call a phone number, it is a scam. Apple does not lock your browser, blast warning sirens, or post a toll-free "support" number in a pop-up. The single most important thing to know right now is this: do not call the number, do not type anything, and do not let anyone you reach on that number take remote control of your device.

Take a breath. As long as you have not called the number, given anyone access, or entered your Apple ID password, you have almost certainly not been harmed yet. The pop-up is designed to scare you into acting fast. The cure is to slow down and close it.

Why You Can Be Sure It's Fake

Legitimate companies, including Apple, do not work this way. A real device alert does not hijack your full screen, play an alarm sound, prevent you from closing your browser, or demand a phone call. Scammers build these pop-ups to imitate a system message, but they are just web pages, sometimes with code that makes the page hard to dismiss or that opens dozens of pop-ups in a row.

Here are the tells that mark it as a scam:

• It tells you to call a phone number. Apple's real support flow lives inside your device settings and the official Apple Support app or website. Apple does not push a hotline number through a browser pop-up.
• It claims to have scanned your device. A website cannot scan your iPhone, iPad, or Mac for viruses. It has no such access.
• It creates panic and urgency. Flashing red banners, countdown timers, alarm sounds, and warnings that your data will be "deleted" or your identity "stolen" in seconds are pressure tactics, not real diagnostics.
• It tries to trap you. Repeated pop-ups, a frozen-looking screen, or a message that reappears when you try to leave are signs of a malicious web page, not a true infection.
• It asks for your Apple ID, password, or payment to "unlock" the device. No legitimate security process asks you to pay a stranger to remove a virus you don't have.

What to Do Right Now

Your goal is simply to close the page without engaging. Nothing you saw has actually damaged your phone or computer.

On an iPhone or iPad

• Close the browser tab. In Safari, tap the tabs icon and swipe the offending tab closed. If the pop-up won't let you, switch apps (swipe up or double-press the home button) and force-close the browser entirely.
• Turn on Airplane Mode for a moment to cut the page's connection, then reopen the browser and close the tab.
• Clear your browser history and website data. In Settings, go to your browser (such as Safari) and choose to clear history and website data. This removes the stuck page.

On a Mac

• Try to close the tab or window normally first.
• If the browser won't respond, force quit it. Press Option + Command + Esc, select the browser, and choose Force Quit.
• When you reopen the browser, hold Shift while it launches (or decline to reopen previous tabs) so the bad page does not load again.
• Clear the browser's cache and history to be safe.

After closing it, your device is fine. You do not need to buy software, factory reset, or call anyone. If you want extra reassurance, you can run your device's built-in updates, which patch real security issues.

If You Already Called the Number or Gave Access

People fall for these scams every day. There is no shame in it; the pop-ups are engineered to fool smart, careful people. If you went further than just seeing the pop-up, act based on what you did.

If you let them remotely control your device

Remote-access scammers may have installed software or viewed your files. Disconnect from the internet, then have the device checked or reset. On a Mac, look in your Applications and login items for any remote-control tools you did not install (common names include screen-sharing and remote-desktop utilities) and remove them. Change the passwords for your important accounts from a different, trusted device.

If you gave them your Apple ID or other passwords

Change those passwords immediately from a device you trust. Turn on two-factor authentication for your Apple ID and email. Review your Apple ID account page for unfamiliar devices and sign them out.

If you paid them

• Paid by credit or debit card: Call your bank or card issuer right away, report the charge as fraud, and ask them to reverse it and issue a new card. Federal law gives you strong protections for unauthorized credit card charges, and disputing fraudulent transactions is your right.
• Paid by gift card: Contact the gift card company immediately, explain it was a scam, and ask them to freeze the funds. Some can refund if the money hasn't been drained. Keep the card and your receipt.
• Paid by wire transfer or payment app: Contact the service and your bank at once to try to recall or reverse it. Speed matters; the sooner you report, the better the odds.

The Law Behind These Scams and Who Enforces It

At the federal level, the agency most focused on this kind of fraud is the Federal Trade Commission (the FTC). The FTC enforces the FTC Act, which broadly prohibits unfair and deceptive business practices, and these fake-alert and tech-support scams squarely qualify. The FTC also runs the government's central fraud-reporting hub.

Several other federal protections come into play depending on what happened to you:

• Credit and debit card disputes are governed by federal consumer-credit and electronic-funds laws, including the Truth in Lending Act (TILA) for credit cards and the Electronic Fund Transfer Act for debit cards and many app-based transfers. These laws cap your liability for unauthorized charges and give you the right to dispute them, though the rules and timelines differ between credit and debit, so contact your bank quickly.
• Identity theft. If scammers got enough information to open accounts in your name, your rights under the Fair Credit Reporting Act (FCRA) let you place fraud alerts and security freezes on your credit files and dispute fraudulent accounts with the credit bureaus. The Consumer Financial Protection Bureau (the CFPB) oversees much of this consumer-protection landscape.

Your state also matters. Every state has its own consumer-protection or "unfair and deceptive acts and practices" law, enforced by the state Attorney General, and many states add stronger anti-fraud rules, faster freeze rights, or extra remedies than the federal floor. How much your state adds, and the exact deadlines for things like disputing a charge or freezing your credit, varies by state, so check your own Attorney General's office and your card issuer's specific terms rather than relying on a single nationwide number.

How to Report It

Reporting helps investigators track these operations and may help you recover money. Document what happened first: take a screenshot of the pop-up if you safely can, write down the phone number it displayed, note any names or "case numbers" the scammer gave you, and record dates, amounts, and how you paid.

• Report to the FTC at the federal government's official fraud-reporting site, ReportFraud.ftc.gov. If your identity may be compromised, IdentityTheft.gov walks you through a personalized recovery plan.
• Report to Apple. You can forward suspicious messages and report scam attempts to Apple so it can take down fraudulent pages and warn other users.
• Report to the FBI's Internet Crime Complaint Center (IC3) if you lost money or gave up sensitive data.
• Report to your state Attorney General using the consumer-complaint form on its website.
• Tell your bank or card issuer if any money or account information was involved, both to dispute charges and to flag your accounts for monitoring.

How to Avoid the Next One

• Keep your devices and browsers updated; updates fix the real security holes scammers exaggerate.
• Turn on a pop-up blocker in your browser settings.
• Treat any unsolicited "call this number" security warning as fake. Find support yourself through official channels rather than numbers a pop-up hands you.
• Never let an unknown caller or website take remote control of your device.
• If a message demands payment in gift cards, wire transfers, or cryptocurrency, it is a scam. Real companies and real government agencies do not collect that way.

Bottom line: the Apple Security Alert pop-up is a scam, your device is almost certainly fine, and the right move is to calmly close the page and ignore the number. This is general information to help you protect yourself, not legal advice, but the core rule is simple and reliable, and slowing down is your best defense.

Know the law

The FTC enforces the ban on unfair and deceptive practices; report fraud to recover money and stop the scammer.

Key federal laws:

• FTC Act § 5 (unfair or deceptive practices), 15 U.S.C. § 45

Where to get help or file a complaint:

• Report fraud to the FTC

Your state matters too. Federal law is the floor — your state sets the statute of limitations on debt, garnishment and exemption limits, payday and repossession rules, and has its own Attorney General and consumer-protection laws. Always check your state’s rules. This is general legal information, not legal advice.