If you’re not sure whether an email about an App Store, iTunes Store, iBooks Store, or Apple Music purchase is legitimate, these tips may help. Scammers often try to trick you into sharing personal or financial information by sending you messages or links to websites that might look like they’re from Apple, but their actual purpose is to steal your account information. Some phishing emails will ask you to click on a link to update your account information. Others might look like a receipt for a purchase in the App Store, iTunes Store, iBooks Store or for Apple Music, that you’re certain you didn’t make. Never enter your account information on websites linked from these messages, and never download or open attachments included within them.
If you receive an email asking you to update your account or payment information, only do so in Settings directly on your iPhone, iPad, or iPod touch; in iTunes or the App Store on your Mac; or in iTunes on a PC.
To update your password for the Apple ID that you use for purchases, do so only in Settings on your device or at appleid.apple.com.
If you received a suspicious email, please forward it to reportphishing@apple.com. If you're on a Mac, select the email and choose Forward As Attachment from the Message menu.
If you think you might have entered personal information like a password or credit card info on a scam website, immediately change your Apple ID password.