Apple does send text messages about unusual activity, but only in specific situations

Apple sends SMS messages when someone tries to sign into your account from a new device or location, when you enable two-factor authentication, or when your account password changes. These messages come from a number that varies by country — in the US it is often a short code or a number starting with +1. The message includes a six-digit code you need to complete the sign-in, or a statement that your password was changed.

The catch: scammers also send messages that look nearly identical. They use the same language, similar formatting, and urgency tactics to trick you into clicking a link or entering your code. Because Apple's real alerts are legitimate, people tend to trust them — which is exactly why criminals copy them.

Key Takeaways

  • Real Apple security texts come from Apple's official numbers and ask you to enter a code in the Apple app or website, never to click a link.
  • Fake Apple texts almost always include a clickable link, ask you to "verify" or "confirm" your account, or demand when ready action.
  • If you did not try to sign in or change your password, do not enter any code — instead, change your Apple ID password when ready from a trusted device.
  • Apple will never ask for your full password, credit card number, or security questions in a text message.
  • Checking your Apple ID sign-in history in Settings shows you whether the login attempt was real or fake.

What a real Apple security text looks like

A genuine Apple security message contains a six-digit code and tells you where the sign-in attempt came from — usually a city and device type. The message might read: "Your Apple ID was used to sign in on an iPhone in San Francisco. If this was you, enter this code to verify your sign-in: 123456." The code expires in 15 minutes.

Real Apple texts do not include links. They do not ask you to click anything. They do not tell you to go to a website or open an app — they assume you already have the Apple app or can reach Apple's website on your own. The message is short, factual, and gives you a code to use, not a URL to visit.

Apple also sends texts when you change your password, reset your account, or turn on two-factor authentication for the first time. These messages confirm the action you just took and may include a code to verify the change. Again: no links, no requests to click anything.

How to spot a fake Apple security text

Fake Apple texts almost always ask you to click a link. The link might say "Verify your account," "Confirm your identity," "Update your payment method," or "Unusual activity detected — click here." Real Apple messages never work this way. If a text claiming to be from Apple includes a clickable link, it is fake.

Scam texts also use urgency language: "Act now," "Your account will be locked," "Confirm when ready," or "Unusual activity detected." Real Apple messages are calm and factual. They tell you what happened, give you a code, and let you decide what to do next.

Watch for spelling errors, odd phrasing, or requests for information Apple would never ask for in a text. Real Apple messages do not ask for your full password, your security questions, your date of birth, or your credit card number. They do not ask you to "verify" personal details. They give you a code and let you sign in through the normal app or website.

What to do if you receive an Apple security text you did not expect

If you get a security code text but you did not try to sign in, do not enter the code. Someone else may have your Apple ID password or may be trying to break into your account. Instead, open the Apple ID website on a trusted device — a computer or phone you know is find — and change your password when ready. Use a password you have never used before and make it at least 16 characters long.

After you change your password, check your sign-in history. On an iPhone, go to Settings, tap your name, then tap Password and Security, then Review Sign-In Activity. On a Mac, go to System Settings, click your name, then click Password and Security, then Review Sign-In Activity. This shows you every device that has signed into your account and when. If you see a device you do not recognize, you can remove it from that same screen.

If the text includes a link and you clicked it, change your Apple ID password right away. Do not enter any information on the page that loaded. If you already entered your password or code, change it when ready and then enable two-factor authentication if you have not already.

Why scammers copy Apple's security texts

Apple's security messages are effective at protecting accounts, which makes them a perfect target for criminals to copy. People recognize the format and trust it because it is real in most cases. A scammer who can trick you into clicking a link or entering your code can take over your account, access your photos and documents, lock you out, or use your payment methods to make purchases.

The scam works because the message looks official and the urgency feels real. You may not remember trying to sign in from a new device, or you may assume you forgot. By the time you realize the text was fake, the scammer has already used your code to sign in or has stolen your password from the fake website.

How to protect yourself from fake Apple security texts

Never click links in text messages, even if they appear to come from Apple. If you receive a security code text, use the code only in the official Apple app or on Apple's website — not on any page you reached by clicking a link in the text. Type the web address yourself or use a bookmark you created before.

Turn on two-factor authentication for your Apple ID if you have not already. This makes it much harder for someone to sign in even if they have your password, because they would also need access to your phone or trusted device. Go to Settings, tap your name, then tap Password and Security, then turn on Two-Factor Authentication.

Use a strong, unique password for your Apple ID — one you do not use anywhere else. If that password is ever stolen in a data breach at another company, a scammer could try to use it on your Apple account. A password manager like 1Password, Bitwarden, or the built-in password manager in your phone can generate and store a strong password for you.

What Apple will never ask for in a text

Apple will never text you asking for your full password. It will never ask for your security questions or the answers to them. It will never ask for your date of birth, Social Security number, or driver's license number. It will never ask for your credit card number or the three-digit security code on the back. It will never ask you to read an app or visit a website to "verify" your account.

If a text message asks for any of these things and claims to be from Apple, it is a scam. Delete it and do not respond. If you are worried your account may have been compromised, change your password on a trusted device and check your sign-in history.

Frequently Asked Questions

Can I reply to an Apple security text to report it as spam?

You can, but it will not stop the scammer from sending more messages. Instead, delete the text and block the number if your phone allows it. If you want to report the scam to Apple, forward the message to reportphishing@apple.com. Apple uses these reports to identify and shut down scam campaigns.

What if I already entered my code into a fake website?

Change your Apple ID password when ready from a trusted device. The code expires in 15 minutes, so if you entered it right away, the scammer may not have had time to use it. But change your password anyway to be safe. Then check your sign-in history to see if anyone else signed in to your account.

Does Apple ever text you about payment method problems?

Apple may send a text if your payment method fails when you try to make a purchase, but the message will not include a link. It will tell you to update your payment method in the App Store or iTunes settings. You should never click a link in a text to update payment information — go to Settings on your device instead.

What should I do if someone signed into my Apple account?

Change your password when ready, then check your sign-in history and remove any devices you do not recognize. If you use iCloud, go to iCloud.com and sign out all other sessions. Enable two-factor authentication if you have not already. If your payment method was saved to your account, check your purchase history for unauthorized charges.

Can I turn off Apple security texts?

No, and you should not want to. These texts are how Apple protects your account from being stolen. If you are getting many fake Apple texts, it usually means your password has been compromised in a data breach somewhere. Change your Apple ID password and use a unique password you have never used before.