That iPhone 18 deal could be a scam: 5 warning signs to watch for

Fake shops use discounts, unusual colours and flexible payment offers to lure buyers

Last updated:
3 MIN READ
Scam sites offer fake discounts and pre-orders while harvesting card and personal details.
Scam sites offer fake discounts and pre-orders while harvesting card and personal details.
AFP

Kaspersky, a global cybersecurity and digital privacy company, has warned that scammers are exploiting the hype surrounding the iPhone 18 through fake offers and fraudulent online stores.

Experts from the company said yesterday that “At the start of the two sales waves for the new iPhone 18 models, the buzz has extended far beyond customers and Apple enthusiasts, scammers are also attempting to capitalize on the hype.”

Get updated faster and for FREE: Download the Gulf News app now - simply click here.

Kaspersky experts have identified fake websites promoting nonexistent offers designed to deceive users for the new devices. These scam sites have been discovered in multiple languages, including English, Arabic, Portuguese and others. 

One of the identified websites offers users the opportunity to “purchase” new devices, complete with technical specifications and a 25% discount. Among the available payment methods, customers are also encouraged to pay in Bitcoin. Its deceptively credible interface is designed to lower the guard of users, prompt them to enter personal information and transfer funds - but in reality, the only thing buyers might receive is financial loss. 

Fake website offering to purchase with Bitcoins

Another fake website invites users to pre-order iPhone 18 Pro devices in a variety of colors, including some that differ from those officially announced by the company at launch, and to select their preferred storage capacity. To make the offer even more enticing, the site claims that customers do not need to pay the full amount upfront and can supposedly settle the remaining balance later. In addition, the “seller” promises a full refund if the purchase is canceled - a claim that should not be trusted. 

Requesting users’ personal information

At the next stage, the fake website requests users’ personal information, including their full name, phone number, email address, city of residence and even their WhatsApp contact details, which may later be used by cybercriminals as part of social engineering schemes. Buyers are then asked to provide their bank card details. Ultimately, every step of the process is designed to extract as much information as possible, which may later be stolen, while victims’ bank accounts may be drained of funds. 

“We have seen scam offers emerge around high-profile device launches for years.  Consumer excitement can give cybercriminals an additional advantage and improve their chances of profiting. We strongly advise users to be extremely cautious when choosing where to shop and to make purchases only through official and trusted retailers. Offers that seem too good to be true, as well as product selections that are broader than or differ from those officially announced by the company, should be treated as clear warning signs,” says Olga Altukhova, Senior Web Content Analyst at Kaspersky. 

How to protect yourself? 

To enjoy new devices without worrying about cyberthreats, Kaspersky advises users to: 

  • Always purchase new products through official and reputable stores to avoid falling victim to fraudulent offers. 

  • Check the authenticity of websites before entering personal data. Double-check URL formats and organizations name spellings. 

  • Secure your payment information. Use dedicated virtual cards or a dedicated payment service for online purchases to avoid exposing your credit card or bank account information. 

  • Use a reliable security solution such as Kaspersky Premium that blocks phishing links. To ensure advanced protection against increasingly complex cyber threats, Kaspersky actively amplifies its consumer solutions with AI-powered scam protection – a unified suite of technologies that combines machine learning-based anti-phishing algorithms, real-time behavior monitoring, accompanied by Data Leak and Identity Theft checkers.  

  • Enable multi-factor authentication and monitor accounts: activate 2FA on IDs and financial apps and regularly review statements for unauthorized activity.