Apple customers, beware of fake invoices like the one below, which claim that you have made an order or a payment from the iTunes store, and if you have an issue with the payment or you want a refund, you should click on a link in the same email to receive your refund. The fake email invoices are being sent by scammers to frighten and trick the recipients into clicking on the links within them by claiming they need to do so in order to cancel the order and get a refund. But, once the recipients click on the link in the fake email invoices, they will be taken to a phishing website that steals personal, financial, and Apple credentials (usernames and passwords).
Therefore, Apple customers who have received fake email invoices appearing as if they were sent from Apple, should avoid clicking on the links in them. They should instead, sign directly into the iTunes Store on their iPhone, iPad, iPod touch, Mac, PC, or Apple TV and check their accounts.
A Sample of an "Apple iTunes Store Account Refund" Phishing Scam
From: ApρleID <admin@peualimalim-droewer.katsinilah.business>
Sent: Saturday, April 21, 2018 5:33 PM
Subject: Sent by iTunes: Payment is successful
Dear User,
We are reviewing your recent order to be ready to ship to you. The payment has been received and below we provide you details order on 21/04/2018 21:33:30.
eBill Summary
Tx Number: 628458602
Total Amount Due: $107.91
Due Date: 21/04/2018 21:33:30
If you have an issue with the payment or you want to refund, please go to "Account Refund" to refund. Once we have your confirmation below, we will reject this order and will refund to you as amount above.
Account Refund
As always, thank you for your business!
Department Communications App
Recipients of the email voices claiming that they have ordered a product they did not, and who have clicked on the link in them, should change their Apple password and contact Apple Support for help. And, the best protection against phishing scams is to avoid clicking on links in email messages, social media messages, and text messages to sign into online accounts.