With the rise of internet scams, users are now facing a new wave of deception disguised as legitimate notifications from Apple and Amazon. These pop-ups, which appear in web browsers, falsely claim that there is an unauthorized charge of $149.99, a tactic aimed at stealing access to victims' devices and accounts.
Understanding the Scam
According to Malwarebytes Labs, this campaign begins with browser pop-ups appearing on legitimate Apple or Amazon websites. The fraudulent notifications are crafted to mimic genuine alerts, stating that the user's Apple ID or Amazon account has been used for a $149.99 purchase. Victims are urged to contact a support number provided in the pop-up to prevent further unauthorized activity.
How Scammers Operate
Once victims call the number, scammers may attempt to persuade them to download software that allows remote access to their devices, share credentials, or even pay fees to secure their accounts. A quick search of the number online reveals a fake Amazon support site, “amazonhelp[dot]support,” created by the scammers to lend credibility to their scheme. In reality, the genuine Amazon customer service site is located at amazon.com.
Identifying Authentic Notifications
It’s crucial to understand that no legitimate company will send security alerts via browser pop-ups. If an issue arises with an account, users may receive notifications through their apps or emails, but these communications should be approached with caution as they can also be common phishing vectors.
Steps to Protect Yourself
To verify if a warning is genuine, users should log into their accounts by visiting the official website or app directly and checking their message history or activity logs. It’s important to note that disputes over fraudulent charges are unlikely to be resolved through phone customer service; users should instead engage with their banks or credit card issuers for these matters. Reaching out to numbers provided in pop-ups is not advisable. Only share account information over the phone with verified numbers, which should be initiated by the user through official channels.
These fraudulent pop-ups may stem from malicious ads, browser redirects, or compromised websites, all of which are tactics used in phishing campaigns. If you encounter such a pop-up, close the tab immediately and refrain from clicking or interacting further.
This scam preys on users who panic and act impulsively upon seeing security alerts. Scammers exploit the fear of losing account access or incurring financial losses to pressure victims into contacting fake support numbers. Once communication is established, scammers have an opportunity to exploit their targets even further.
The greatest risk lies not in the fictitious $149.99 charge itself, but in the access that victims may inadvertently grant to the scammers. Downloading remote access tools or sharing credentials can allow fraudsters to take full control of devices and accounts, resulting in far greater damage than the false alert.
It is essential for users to remain calm and avoid impulsive actions when faced with these pop-ups. Always verify through official channels by visiting the website directly or using the company’s official app. This self-verification step serves as the best defense against increasingly sophisticated phishing schemes.
Users should also remember that financial institutions, not customer service representatives from tech companies, handle billing disputes. Understanding the correct protocol for dealing with fraud will help users identify scams that deviate from standard procedures.
Cybersecurity relies on user vigilance. Closing the tab immediately when encountering suspicious pop-ups, without clicking or interacting, is the simplest yet most effective strategy to avoid falling into phishing traps. Phishing campaigns are constantly evolving, and user awareness remains the primary defense.
Scam strategies that exploit major brands like Apple and Amazon illustrate that fraudsters continuously seek ways to build false trust. Users familiar with Apple products and Amazon services must stay alert for unsolicited communications, regardless of their form.
In the future, users are advised to initiate communication with companies through official channels if they suspect any issues with their accounts. Never respond to incoming calls or pop-ups requesting sensitive information. This habit of self-verification will shield users from various scams, including those leveraging the latest technologies as bait.
Source: https://telset.id/how-to/waspada-pop-up-penipuan-apple-dan-amazon-berkedok-tagihan-tak-sah
