Kaspersky: scammers ride the iPhone 18 hype with fake deals and stores

At the start of the two sales waves for the new iPhone 18 models, the buzz has extended far beyond customers and Apple enthusiasts, scammers are also attempting to capitalize on the hype. Kaspersky experts have identified fake websites promoting nonexistent offers designed to deceive users for the new devices. These scam sites have been discovered in multiple languages, including English, Arabic, Portuguese and others.

One of the identified websites offers users the opportunity to “purchase” new devices, complete with technical specifications and a 25% discount. Among the available payment methods, customers are also encouraged to pay in Bitcoin. Its deceptively credible interface is designed to lower the guard of users, prompt them to enter personal information and transfer funds - but in reality, the only thing buyers might receive is financial loss.

Another fake website appears to target users in Brazil: the interface is in Portuguese and the “prices” are listed in Brazilian reals. Users are invited to pre-order iPhone 18 Pro devices in a variety of colors, including some that differ from those officially announced by the company at launch, and to select their preferred storage capacity. To make the offer even more enticing, the site claims that customers do not need to pay the full amount upfront and can supposedly settle the remaining balance later. In addition, the “seller” promises a full refund if the purchase is canceled - a claim that should not be trusted.

At the next stage, the fake website requests users’ personal information, including their full name, phone number, email address, city of residence and even their WhatsApp contact details, which may later be used by cybercriminals as part of social engineering schemes. Buyers are then asked to provide their bank card details. Ultimately, every step of the process is designed to extract as much information as possible, which may later be stolen, while victims’ bank accounts may be drained of funds.

“We have seen scam offers emerge around high-profile device launches for years.  Consumer excitement can give cybercriminals an additional advantage and improve their chances of profiting. We strongly advise users to be extremely cautious when choosing where to shop and to make purchases only through official and trusted retailers. Offers that seem too good to be true, as well as product selections that are broader than or differ from those officially announced by the company, should be treated as clear warning signs,” says Olga Altukhova, Senior Web Content Analyst at Kaspersky.

To enjoy new devices without worrying about cyberthreats, Kaspersky advises users to: Always purchase new products through official and reputable stores to avoid falling victim to fraudulent offers. Check the authenticity of websites before entering personal data. Double-check URL formats and organizations name spellings. Secure your payment information. Use dedicated virtual cards or a dedicated payment service for online purchases to avoid exposing your credit card or bank account information. Use a reliable security solution that blocks phishing links. To ensure advanced protection against increasingly complex cyber threats, Kaspersky actively amplifies its consumer solutions with AI-powered scam protection – a unified suite of technologies that combines machine learning-based anti-phishing algorithms, real-time behavior monitoring, accompanied by Data Leak and Identity Theft checkers. In 2025, Kaspersky Premium once again received the annual "Approved" certification in Anti-phishing tests by the leading testing lab AV-Comparatives, highlighting the product's strong, AI enhanced anti-phishing capabilities. Enable multi-factor authentication and monitor accounts: Activate 2FA on IDs and financial apps and regularly review statements for unauthorized activity.