iPhone Duo preorders officially launched last week to high demand, a quick sellout, and delayed delivery estimates. Naturally, scammers are finding ways to capitalize on the rush to obtain Apple's new foldable, so if you're in the market for a new device, be on the lookout for signs of compromise.
Malware disguised as iPhone preorder portals
Soon after the iPhone Duo was announced, threat actors jumped into action, setting up fake preorder pages that looked like Apple's official website but were actually designed to deliver a malicious payloads to your device. As Malwarebytes outlined in late September, these pages promised a $500 voucher and AppleCare+ coverage in exchange for your contact information. But submitting the form isn't actually the scam. Rather, simply opening the page launches the attack, which uses the DarkSword exploit chain to bypass iPhone protections and gain access to cryptocurrency wallets, messages, contacts, emails, calendar entries, and location data.
This scam began several weeks ago and seemed to specifically target iPhones running iOS 18.4 to 18.6.2. Apple has said that devices running the latest versions of iOS 15 to 26 are protected from the exploit, so if your iPhone is up to date, you are likely at minimal risk for this specific scheme. That said, beware of websites and social media posts that promise access to the iPhone Duo faster or cheaper than other sources, as this is almost certainly a scam designed to steal your information or install malware on your device. Official sources for preorders include Apple itself (through the official Apple website or Apple Store app) as well as major cell carriers.
Fraudulent credit card charges for the iPhone Duo
Another scam to be on the lookout for involves fraudulent charges for an iPhone Duo you didn't order. News outlets in Hong Kong have reported that shoppers are seeing transactions from Apple appear on their bank and credit card statements—even when they haven't actually tried to buy the device since preorders went live. This may be the work of bad actors who have harvested credit card details via phishing or data leaks and are using them for fraudulent purchases.
While this specific scheme doesn't appear to be widespread (yet), you should check your financial statements and accounts regularly anyway given how vulnerable your data are to theft and fraud. If you see a charge you don't recognize or duplicate charges, report it to your bank or card issuer immediately using contact information from a trusted app or client portal.
Calls from scammers spoofing trusted brands
Scammers will also take the threat of fraudulent charges one step further: They may contact you directly about supposedly suspicious transactions and claim they can help resolve the issue if you provide personal information or account credentials. With the iPhone Duo specifically, bad actors may also call pretending to be Apple or a carrier and ask you to confirm information about your order, possibly to avoid having it canceled. As always, any communication that provokes fear and a sense of urgency should raise red flags. If you're not sure who you're talking to, hang up and call back directly to confirm.