Filed under: Account takeover

Is this 'your Apple ID is being used elsewhere' text a scam?

Last reviewed: 2026-08-01 · Checked with Hunch’s on-device engine, the same one inside the extension. How Hunch checks →

Part of our guide: How to secure and recover a hacked account →

Yes. A text saying your Apple ID is on a new device and telling you to verify your identity within 24 hours on appleid-verify.example is impersonation. Apple manages sign-ins through your device and appleid.apple.com, not a look-alike link. The new-device scare, the deadline, and the fake domain are the pattern, the 'verify' page is a spoof that captures your Apple ID and password.

Got a message like this? Paste it here →

Detection runs 100% locally on your device. We store nothing.

Please don’t paste other people’s personal data. Detection runs 100% locally on your device, and we store nothing.

Or check it on Telegram

Apple users know that an Apple ID guards their photos, payments, and backups, so a 'used on a new device' warning triggers instant alarm. That high value is exactly why scammers impersonate it, one captured login can expose iCloud, App Store purchases, and Find My. The message weaponizes the very security awareness Apple has trained into people, making the fake 'verify' step feel like the responsible move.

The exhibit
EXHIBIT · CHECK BEFORE YOU ENTER YOUR PASSWORD.
Received via: SMS EN
Your Apple ID is being used on a new device. If this wasnt you, verify your identity within 24 hours or the account will be locked: appleid-verify.examplenot Apple's real domain (apple.com)/secure

Illustrative example of the pattern, not a real message someone received.

How to verify it yourself

  • Check sign-in activity in Settings on your iPhone or at appleid.apple.com, not through the texted link.
  • Apple's real domain is apple.com; appleid-verify.example is a look-alike, not Apple.
  • Apple sends security prompts to your own trusted devices, not a 'verify identity' SMS link.
  • If unsure, contact Apple Support through the official Apple app or apple.com.

Common questions

is appleid-verify.example a real Apple domain

No. Apple uses apple.com and appleid.apple.com. The '-verify' host on .top is an impersonator's page built to steal your Apple ID login.

does Apple text you when your ID is used elsewhere

Apple surfaces sign-in alerts on your trusted devices and in your account settings, not through an SMS demanding you verify identity on an outside link.

why does the Apple ID text want me to verify in 24 hours

The 24-hour lock threat is pressure. Fear of losing your Apple ID rushes you to the fake page before you notice the domain isn't apple.com.

is an Apple ID new device text a scam

Yes, when it links to a look-alike domain with a deadline. The 'used on a new device' line is a script; the spoofed host is the proof.

If you already responded

  1. Change your Apple ID password immediately at appleid.apple.com and check trusted devices and phone numbers.
  2. Confirm two-factor authentication is on and remove any device or session you don't recognize.
  3. Report the text at reportfraud.ftc.gov.

Source: FTC, How To Recognize and Avoid Phishing Scams

Hunch is not affiliated with Apple. Apple is named only to describe a scam that impersonates it; the real Apple does not send these messages.