iPhone Duo preorders launched last week to high demand and quick sellouts. Scammers have responded with multiple schemes targeting buyers.
Threat actors created fake preorder pages mimicking Apple's official website. These pages promised a $500 voucher and AppleCare+ coverage in exchange for contact information. Opening the page launches an attack using the DarkSword exploit chain, according to Malwarebytes. The exploit targets cryptocurrency wallets, messages, contacts, emails, calendar entries, and location data.
The scam initially targeted iPhones running iOS 18.4 to 18.6.2. Apple says devices running iOS 15 to 26 are protected from the exploit. Avoid websites and social media posts promising faster or cheaper access to the iPhone Duo. Official preorder sources are Apple's website, the Apple Store app, and major cell carriers.
A second scam involves fraudulent charges appearing on bank and credit card statements in Hong Kong. Buyers report Apple transactions they did not authorize. Bad actors may have obtained credit card details through phishing or data leaks.
Scammers also contact buyers directly about suspicious transactions, claiming they can help if you provide personal information or account credentials. Some impersonate Apple or carriers and ask you to confirm order details, citing cancellation risk.
Check financial statements regularly. Report unrecognized or duplicate charges to your bank or card issuer using contact information from a trusted app or official portal. Hang up on unexpected calls claiming urgency and call back directly to confirm the caller's identity.