Beware of IPhone Duo Pre-Order Scams!
Pre-orders for the iPhone Duo officially opened last week, generating huge demand, quick sell-outs, and delivery delays. Naturally, scammers are finding ways to capitalize on the hype surrounding Apple’s new foldable smartphone, so if you’re considering purchasing the new device, be on the lookout for signs of hacking.
Malware disguised as iPhone pre-order portals.
Shortly after the iPhone Duo announcement, attackers stepped up their efforts, creating fake pre-order pages that looked like official Apple websites but were actually designed to deliver malware to your device. As Malwarebytes reported in late September, these pages promised a $500 voucher and AppleCare+ coverage in exchange for your contact information. But submitting the form isn’t the scam itself. In fact, the attack is triggered simply by opening a page that uses the DarkSword exploit chain to bypass iPhone security and gain access to cryptocurrency wallets, messages, contacts, emails, calendar entries, and location data.
This scam began several weeks ago and appears to be targeting iPhones running iOS 18.4–18.6.2 . Apple has stated that devices running the latest iOS versions 15–26 are protected from this vulnerability, so if your iPhone is up to date, the risk to you is likely minimal. However, beware of websites and social media posts promising faster or cheaper iPhone Duo delivery than other sources, as these are almost certainly scams designed to steal your information or install malware on your device. Official sources for pre-orders include Apple itself (via the official Apple website or the Apple Store app) and major wireless carriers.
Fraudulent credit card charges for iPhone Duo
Another scam worth watching involves unauthorized charges for iPhone Duos you didn’t order. Hong Kong news outlets report that customers are seeing Apple transactions on their bank and credit card statements—even though they haven’t actually attempted to purchase the device since pre-orders began. This could be the work of scammers who have obtained credit card information through phishing or data breaches and are using it to make fraudulent purchases.
While this particular scheme doesn’t appear to be widespread yet, you should still regularly check your financial statements and accounts, given how vulnerable your data is to theft and fraud. If you discover an unfamiliar transaction or duplicate transactions, immediately report it to your bank or card issuer using the contact information in a trusted app or customer portal.
Calls from scammers posing as representatives of well-known brands.
Scammers also take the threat of fraudulent transactions even further: they may contact you directly about supposedly suspicious transactions and claim they can help resolve the issue if you provide personal information or account details. In the case of the iPhone Duo, scammers may also call, posing as Apple or carrier employees, and ask you to confirm your order details, possibly to prevent it from being canceled. As always, any message that evokes fear and a sense of urgency should be suspicious. If you’re unsure who you’re speaking to, hang up and call back directly to confirm.