Your phone lights up with an alert about an Apple Pay purchase you don't recognise. It says the transaction is being reviewed or has been put on hold. If it wasn't you, the message says, call the support number provided.

It sounds like someone is looking out for your money. But that phone number may be the whole point of the message.

In recent messages submitted to IsThisSpam, we've seen Apple-themed transaction alerts combine an unfamiliar purchase, a claim that the payment is on hold, and a number to call for urgent help. Our checker flagged several of these submissions as scams.

Here's how the trick works and how to check a real charge without putting yourself at risk.

The "transaction on hold" trick

A message about an unexpected purchase is alarming. Saying the payment has been paused makes the alert sound reassuring, as though a security team has already caught the problem.

Then comes the pressure: you need to call immediately to cancel the purchase, release the hold or stop the money leaving your account.

The supposed purchase may never have happened. The scammer wants you to investigate it through the contact details they supplied.

Australia's Scamwatch has warned about fake purchase callback scams, where a bogus payment notice directs the recipient to call a number to reverse a charge.

Why the phone number matters more than the message

People often look for a strange link when checking a phishing text. This version may not need one.

Calling the number can connect you to someone pretending to work in Apple Support or a payment security team. They may claim they need to verify your identity, process a refund or secure your account.

That conversation can lead to requests for:

A one-time verification code that could allow someone else to sign in or approve an action.
Your Apple Account password or card details, supposedly to confirm ownership.
Remote-access software, presented as a way to inspect or fix a security problem.
A payment or transfer, falsely described as necessary to reverse the original charge.

These are possible next steps in callback scams, not claims that every message follows the same script. Apple's own security guidance warns about impersonators inventing unauthorised Apple Pay charges and posing as support staff.

Four warning signs in an Apple Pay alert

You weren't expecting a purchase notification. A surprise transaction is a reason to check your account, not a reason to trust the message.
It provides a number and tells you to call if it wasn't you. The callback instruction steers you away from your normal bank or Apple support channels.
It creates a deadline. Phrases about an expiring hold or immediate action are designed to stop you checking independently.
The "support" conversation asks for secrets or access. A request for passwords, security codes, remote access or a transfer is a signal to end the conversation.

A convincing Apple logo, familiar sender name or local-looking phone number does not prove who sent the alert.

How to check whether the charge is real

Start with your bank or card issuer, not the text message.

If the alert claims someone paid using Apple Pay:

Open your bank or card issuer's official app and review pending and completed card transactions.
You can also open Wallet, select the payment card and look at recent transactions where supported. Apple explains how to check Wallet transaction history.
For the most accurate record of a card transaction, contact the card issuer using a number from its official app, website or the back of your card.

If the alert is actually about an App Store purchase or Apple subscription, that's a different type of charge. Review your purchase history by opening Apple's official billing support page yourself.

Do not assume a charge is genuine because a text names Apple Pay. Equally, if you don't see it immediately, keep an eye on your account and contact your issuer if you're concerned about a pending transaction.

Stop Guessing. Know if it's a scam instantly.

Protect yourself with our deep AI analysis. Choose the safety plan that fits your security needs.

One-Time Investigation

Need help with one suspicious message?

One complete AI investigation
Evidence and reasoning
PDF report
Secure Stripe checkout

Investigate this message

Just me

Complete AI scam protection for everyday life.

$14.99USD / mo

Unlimited email, SMS and website scam checks
Unlimited website scanning
AI investigations with detailed explanations
Protect up to 5 personal devices

Start protecting me

What if you already called the number?

If you called but haven't shared anything, end the conversation. Do not call back, follow instructions sent during the call or approve unexpected sign-in prompts.

If you shared information or followed instructions, act on what happened:

Gave card or banking details? Contact your bank or card issuer through its official channel straight away. Ask it to assess the risk to your card and account.
Shared your Apple Account password or a sign-in code? Change the password through your device or Apple's official website, review account security and keep two-factor authentication enabled.
Installed remote-access software? Stop using it, disconnect the device from the internet if you suspect someone still has access, and seek trusted technical help to remove it and secure your accounts.
Sent money? Contact your bank immediately and report the incident through the appropriate fraud-reporting service. In Australia, you can use Scamwatch.

You can also follow Apple's instructions for reporting suspicious messages.

Check a suspicious Apple Pay text safely

If you're unsure what a message is trying to make you do, you can paste its wording into the IsThisSpam SMS scam checker. Include the claim about the purchase and what the sender wants you to do, but remove personal information, account numbers, passwords and verification codes first.

A scanner can help identify warning signs. It cannot independently confirm that a card transaction has or hasn't occurred. Your bank or card issuer is the right place to settle that question.

For more about fake invoices and purchase alerts, read our guide to billing alert scams.

The safest response to an unexpected Apple Pay transaction text is simple: don't use the number in the message. Check the charge through a channel you already trust.