Apple does send text messages, but only for specific account actions
Yes, Apple sends text messages to your phone number on file. They arrive as SMS or iMessage and come from numbers like 100331 (a short code) or from an Apple ID email address if you have iMessage turned on. Apple texts you when you sign in from a new device, when someone tries to reset your password, when you enable two-factor authentication, or when your payment method fails.
The catch: scammers also send texts that look almost identical to real Apple messages. They use similar language, ask you to click links, and pressure you to act fast. Because you arrived here from a page about SMS and account risk, you already know why this matters — a text that tricks you into giving up your password or verification code can lock you out of your own account or let someone else in.
Key Takeaways
- Real Apple texts come from short code 100331, from an Apple ID email address via iMessage, or from a number you can verify by calling Apple Support directly.
- Legitimate Apple messages tell you what action triggered the message and ask you to check your device settings or the Apple ID website — they never ask you to click a link in the text itself.
- Phishing texts often use urgent language like "confirm your account" or "verify your payment" and include clickable links that go to fake websites designed to steal your password.
- If you are unsure whether a text is real, do not click any link in it — instead, open the Apple ID website directly in your browser or call Apple Support to ask.
What real Apple text messages look like
An authentic Apple text message tells you specifically what happened and what to do about it. For example: "Your Apple ID was used to sign in on a new device. If this was you, no action is needed. If not, go to Settings > [Your Name] > Password & Security to change your password." That message came from short code 100331 and names the exact setting you need to check.
Another real example: "Your Apple ID password was changed on [date]. If you did not make this change, go to iforgot.apple.com to find your account." Again, it tells you what happened, does not ask you to click a link in the text, and directs you to a website you can type in yourself.
Real Apple messages also match the action you just took. If you just signed in to a new device, you expect a sign-in notification. If you just changed your password, you expect a confirmation. If you did not do anything and get a text saying your account was accessed, that is a red flag — though it could still be real, which is why you verify by going to the Apple ID website directly.
How phishing texts pretend to be Apple
Phishing texts use the same general format as real Apple messages but add pressure and a link. A common one says: "Apple ID: Confirm your account information. Click here to verify your identity." The link goes to a fake website that looks like Apple's login page. When you enter your password, the scammer captures it.
Another version says: "Your payment method was declined. Update your payment information now" with a link. The fake page asks for your credit card number, expiration date, and CVV — information Apple already has on file and would never ask you to re-enter via text.
Phishing texts often use words like "urgent," "confirm," "verify," "update," or "act now." They may also spoof the sender to look like it came from Apple — using a number similar to 100331 or an email address that looks official but is slightly off, like "appleid-verify@applesupport.com" instead of an actual Apple domain.
How to check if a text is really from Apple
The safest method is to ignore the text entirely and contact Apple yourself. Open your web browser and go to iforgot.apple.com or appleid.apple.com directly — do not click any link from the text. Log in and check your account activity. If there was a real sign-in, password change, or payment issue, you will see it there. If you see nothing unusual, the text was fake.
You can also call Apple Support at 1-800-MY-APPLE (1-800-692-7753) and ask them to verify whether the message came from Apple. Have the text in front of you so you can read the exact wording and the sender's number or email address. Apple Support can tell you when ready whether it is legitimate.
If the text includes a link, do not click it. Even if the link looks like it goes to apple.com, phishing links can be disguised. Scammers use URL shorteners or domains that are one letter off from the real thing. The only safe link is one you type yourself.
What to do if you clicked a phishing link
If you clicked a link in a suspicious text but did not enter your password or payment information, you are likely safe. Close the browser tab and move on. If the page looked suspicious or asked for information, do not go back to it.
If you entered your Apple ID password on a fake page, change your password when ready. Go to iforgot.apple.com, reset your password, and make it something you have never used before. Then check your account activity on the Apple ID website to see if anyone accessed your account. If you see unfamiliar sign-ins or devices, remove them.
If you entered your payment information, contact your credit card company or bank right away. Tell them you may have given your card number to a scammer and ask them to watch for fraudulent charges. Many banks can issue you a new card number when ready. You should also update your payment method in your Apple ID settings to a new card.
Turn on two-factor authentication to protect your account
Two-factor authentication makes it much harder for someone to break into your Apple ID, even if they have your password. When you turn it on, Apple sends a code to a trusted device or phone number whenever someone tries to sign in from a new location or device. You have to enter that code to complete the sign-in.
To turn on two-factor authentication, go to Settings > [Your Name] > Password & Security on an iPhone or iPad, or go to appleid.apple.com on a computer and click "Password & Security" in the left menu. Apple will ask you to confirm your identity and then walk you through the setup. You will choose which phone number to use for codes — use the number on the phone you carry every day.
Once two-factor is on, you will get text messages from Apple when someone tries to sign in. These are the legitimate texts you should expect. If you get a two-factor code you did not request, that means someone is trying to break in — do not share the code with anyone, and change your password when ready.
Frequently Asked Questions
Can Apple send me a text from a regular phone number instead of a short code?
Apple can send iMessages from an email address associated with your Apple ID, which will appear as a text on your phone. However, for SMS text messages, Apple uses short code 100331 or occasionally other official short codes. If a text comes from a regular 10-digit phone number claiming to be from Apple, it is almost certainly fake. You can verify by calling Apple Support.
What if I got a text saying my account was locked and I need to unlock it right now?
Do not click any link in that text. Go directly to iforgot.apple.com or appleid.apple.com in your browser to check your account status. If your account is actually locked, you will see that when you log in. Real Apple messages do not create artificial urgency — they tell you what happened and let you decide when to act.
Is it safe to reply to an Apple text message?
No. Real Apple text messages do not expect a reply. If you reply to a phishing text, you confirm to the scammer that your phone number is active and monitored by a real person, which makes you a more valuable target. Do not reply to any text claiming to be from Apple.
Why does Apple send so many text messages?
Apple sends a text whenever your account security settings change or when someone tries to access your account from a new device. If you are signing in to new devices frequently or changing your password often, you will get more texts. You can reduce them by using fewer devices and keeping your password stable, but you cannot turn off security notifications entirely.
What should I do if I keep getting phishing texts from fake Apple accounts?
Forward the text to Apple by texting it to 7726 (which spells SPAM). Include the full message and the sender's number or email. Apple reviews these reports and works with carriers to block the numbers. You can also report it to the Federal Trade Commission at reportfraud.ftc.gov. Do not engage with the messages or click their links.