Get it free Try it on Telegram
Filed under: Account takeover

I got a text that my iCloud is locked, is this an Apple scam?

Last reviewed: 2026-08-01 · Checked with Hunch’s on-device engine, the same one inside the extension. How Hunch checks →

Part of our guide: How to secure and recover a hacked account →

Yes. Apple doesn't lock iCloud and then text you a link to apple-id-secure.example with a 24-hour deadline to unlock it. Real Apple ID and iCloud issues are handled on your device or at appleid.apple.com. A "your iCloud has been locked, verify now" text is designed to steal the Apple ID that guards your photos, backups, and Find My.

Got a message like this? Paste it here →

Detection runs 100% locally on your device. We store nothing.

Please don’t paste other people’s personal data. Detection runs 100% locally on your device, and we store nothing.

Or check it on Telegram

An iCloud lock is frightening because it threatens photos, contacts, and backups that feel irreplaceable, and most people don't know Apple's real recovery path by heart. The scam leans on that uncertainty: the Apple name plus a data-loss deadline makes verifying on apple-id-secure.example feel urgent before the odd domain sinks in.

The exhibit
EXHIBIT · CHECK BEFORE YOU ENTER YOUR PASSWORD.
Received via: SMS EN
Apple: Your iCloud account has been locked due to a security concern. Verify your identity within 24 hours at apple-id-secure.examplenot Apple's real domain (apple.com) or your account and data will be permanently disabled.

Illustrative example of the pattern, not a real message someone received.

How to verify it yourself

  • Don't tap the link. Check your Apple ID directly in Settings on your iPhone or at appleid.apple.com typed by hand.
  • Read the domain: Apple uses apple.com and appleid.apple.com, not apple-id-secure.example or any host with extra words.
  • Apple resolves account locks on the device itself, never through a texted countdown link.
  • Never enter your Apple ID password or a verification code on a page you reached from a text.

Common questions

is apple-id-secure.example a real Apple website

No. Apple uses apple.com and appleid.apple.com. A host like apple-id-secure.example is a look-alike built to capture your Apple ID.

does Apple text you when iCloud is locked

Apple surfaces account issues on your device and by email to your Apple ID address, not via SMS links to another domain with a deadline.

will Apple delete my iCloud data in 24 hours

No. That threat exists only to rush you. Apple doesn't wipe accounts on a same-day countdown triggered by a text.

how do I check if my Apple ID is really locked

Open Settings and tap your name, or go to appleid.apple.com yourself. Any genuine issue appears there with a real recovery flow, no third-party link needed.

If you already responded

  1. Change your Apple ID password immediately from Settings or appleid.apple.com and confirm two-factor is on.
  2. Review trusted devices and phone numbers on your Apple ID and remove anything you don't recognize.
  3. Report the message at reportfraud.ftc.gov and forward the SMS to 7726 (SPAM).

More scams like this

Source: FTC, How To Recognize and Avoid Phishing Scams

Hunch is not affiliated with Apple. Apple is named only to describe a scam that impersonates it; the real Apple does not send these messages.