Planning to upgrade your mobile phone and join the global iPhone 18 Pro and iPhone 18 Pro Max frenzy? If so, cybersecurity experts are urging consumers to beware of fake websites offering too-good-to-be-true deals on Apple’s latest devices, which could leave shoppers vulnerable to scams, a leading cybersecurity firm warned on Thursday.
Experts from Kaspersky revealed that scammers are using these fake websites to lure customers into buying the new devices by promoting nonexistant offers in multiple languages, including English, Arabic and Portugese.
One of the identified websites offers users the opportunity to “purchase” iPhone 18 Pro and iPhone 18 Pro Max, complete with technical specifications and a 25% discount. Scammers also offer Bitcoin as a payment method to ‘purchase’ the devices.
Stay up to date with the latest news. Follow KT on WhatsApp Channels.
“Offers that seem too good to be true, as well as product selections that are broader than or differ from those officially announced by the company, should be treated as clear warning signs,” according to Olga Altukhova, Senior Web Content Analyst at Kaspersky.
The fake websites are designed with credible interface to lower the guard of users, prompt them to enter personal information and transfer funds, “but in reality, the only thing buyers might receive is financial loss,” it warned.
Among the schemes used by scammers are offers to pre-order iPhone 18 Pro devices in a variety of colours, including some that differ from those officially announced by the company at launch, and to select their preferred storage capacity. The new iPhone 18 Pro and iPhone 18 Pro Max are available in four colours: black, silver, glacier, and an all-new burgundy. They come in 256GB, 512GB, 1TB, and 2TB storage capacities.
To make the fake offer even more enticing, the site claims that customers do not need to pay the full amount upfront and can supposedly settle the remaining balance later. In addition, the “seller” promises a full refund if the purchase is cancelled.
Kaspersky shared interfaces of some of these websites. Take a look:
At the next stage of the scamming attempt, Kaspersky warned, the fake website requests users’ personal information, including their full name, phone number, email address, city of residence and even their WhatsApp contact details, which may later be used by cybercriminals as part of social engineering schemes.
Buyers are then asked to provide their bank card details. Ultimately, every step of the process is designed to extract as much information as possible, which may later be stolen, while victims’ bank accounts may be drained of funds.
Altukhova said,: “We have seen scam offers emerge around high-profile device launches for years. Consumer excitement can give cybercriminals an additional advantage and improve their chances of profiting.”
“We strongly advise users to be extremely cautious when choosing where to shop and to make purchases only through official and trusted retailers. “
How to stay safe
Kaspersky advised users to:
-
Always purchase new products through official and reputable stores to avoid falling victim to fraudulent offers.
-
Check the authenticity of websites before entering personal data. Double-check URL formats and organisations name spellings.
-
Secure your payment information. Use dedicated virtual cards or a dedicated payment service for online purchases to avoid exposing your credit card or bank account information.
-
Enable multi-factor authentication and monitor accounts: activate 2FA on IDs and financial apps and regularly review statements for unauthorised activity.
Source: Khaleej Times