A mobile scam page that masquerades as Apple Pay is walking iPhone users through a fake payment before handing them off to a fraudster’s phone line.
Malwarebytes dissected a version of the page aimed squarely at phones. It shows a $657 App Store charge with a spinning progress indicator, a Face ID “verifying identity” notice, and a padlock, then announces that the victim’s Apple ID is locked because of an unrecognized sign-in. A support number appears alongside instructions to call immediately.
Everything on screen is theater. The Face ID prompt is a plain HTML element with no biometric call behind it, the payment spinner is cosmetic and vanishes on a timer after 2.8 seconds, and the transaction details are hardcoded. Every visitor sees the same $657.00 amount, the AP-2026-08-03-14:32 transaction ID, and the AUTH-8F3A2B1C authorization code.
The page exploits the phone’s own text-to-speech to read the alert aloud and uses aggressive navigation tricks to keep victims on the page. The receipt stamps the current date from the device’s clock, which clashes with the fixed August 3 transaction ID. A genuine charge does not redate itself every time it is viewed.
A real Apple Pay flow only begins when a merchant requests payment, and the system surfaces a sheet for the user to review and authenticate. This page drew its own imitation instead. The payoff for attackers is a phone call, which is classic tech support scamming retooled for the mobile payment experience.
