iPhone users are being warned about a new phishing email that can permanently lock you out of your Apple ID account.
Cybercriminals are sending fake emails to billions of iPhone users that claim to be from Apple.
These emails look like they are being sent from Apple Support and state that their account has been suspended and urge you to act quickly.
They usually include a link for users to follow to verify their information.
Advert
However, it redirects them to a bogus page that can steal their login details and two-factor authentication codes.
The fraudulent email tells users to click on a link to verify their account, redirecting them to another page that steals their login details like their username and password, and two-factor authentication information.
Once hackers have their credentials, they can instantly access their accounts and digital wallets.
But the worst part is the urgency is what will trick users into clicking the link.
The email states that the user only has 24 hours to verify their Apple ID or it will be permanently locked.
With Black Friday and Cyber Monday just around the corner, scammers know lots of people are shopping online and so are distracting users off guard with emails that look urgent and official.
"Apple will never ask you to log in to any website, or to tap Accept in the two-factor authentication dialog, or to provide your password, device passcode, or two-factor authentication code or to enter it into any website," Apple shared on its website.
"Phishing scams like the Apple ID Suspended scheme are becoming increasingly prolific and under immediate urgency," said Jake Moore, a former digital crimes law enforcement officer and now global cybersecurity advisor at ESET, said.
"Many people are still manipulated by the clever tactics used by criminal hackers."
To appear credible, hackers often mention your personal information like your name or phone number to appear legit and make you buy into it.
But there are some red flags to look out for to spot whether the email is a dodgy one.
First, look out for any typos in the email and the sender's email address to identify 'any discrepancies,' Moore said.
"And avoid clicking on suspicious links as this is where scams often begin."
Moore explained that if you're in any doubt, always go directly to the official Apple website to double check.
If your Apple ID does become compromised in any way, don't worry there's a way around it.
Apple shared on its Support page that users can log into their Apple Account and change their password immediately, and also ensure that two-factor authentication is enabled.