Amazon and Apple Impersonated in $149.99 Unauthorized Charge Scam

🚨 Amazon and Apple Impersonated in $149.99 Unauthorized Charge Scam

If you’ve spent any time browsing lately, you may have run into a full-screen popup warning you that your Apple ID or Amazon account was just used for a mysterious $149.99 purchase. Popups pulled from real pages have been observed, one dressed up as Apple Support, one as Amazon. Swap the logo and color palette and the structure is identical: a warning icon, a claim that a $149.99 purchase was just made “via Pre-Authorization,” and a phone number to call immediately. That phone number is exactly the same in both. That reused phone number is the tell.

If you do call, the number connects to a live scammer posing as support staff, whose actual goal is to get remote access to your device, walk you through “verifying” your identity in a way that hands over real account or payment info, or push you toward paying a fake fee–often via gift cards or a wire transfer. Every element in these popups is doing specific psychological work. A believable, moderate dollar amount like $149.99 is high enough to alarm you, but low enough to sound like a real subscription or product charge rather than an obvious lie. “Pre-Authorization” jargon, which is real payment terminology, is borrowed here to sound technically credible to someone who doesn’t handle payments professionally. Manufactured urgency, with phrases like “Call immediately” and “Immediate Action Required,” is designed to get you dialing before you stop to verify anything. Visual authority, using red warning triangles and brand-matching layouts, borrows the visual language of legitimate security alerts. A single, frictionless call to action, featuring one button and one phone number, indicates the popup wants exactly one thing: to pick up the phone.

To identify if such an alert is fake, several checks apply. Real companies don’t alert you this way. Apple and Amazon notify you about account activity through email, in-app notifications, or your account’s activity log–never through an unexpected popup while you’re browsing. No legitimate company tells you to call a phone number to stop a charge. Disputing a charge happens through your bank, your card issuer, or the company’s actual account dashboard–not a hotline dictated by a popup. These popups often ride in on malicious ads, compromised sites, or browser redirects–the underlying page may be spoofed or injected, not the real support page it appears to sit on top of. A popup you can’t easily close is a red flag on its own. If in doubt, go direct. Close the tab (force-close via task manager if needed) and navigate to the company’s site yourself, or call the number printed on your card or official account page–never the one in the popup. Check the number before you dial it. Run it through Malwarebytes Scam Number Check to see if it’s already been flagged as a scam line. The brand on screen is the least important part of this scam. What actually matters is the pattern underneath: an unexpected popup, a suspiciously specific dollar amount, urgent language, and a phone number that wants you to call before you think.

Read full article