Fake Apple Support AI Calls Target Stolen iPhone Owners for Passcodes and 2FA Codes

Cybercriminals are using AI-powered fake Apple Support calls to target owners of stolen or lost iPhones. The campaign uses AnonyMousKIT, a phishing-as-a-service platform that combines emails, SMS, WhatsApp messages, and AI-generated voice calls to trick victims into revealing their device passcodes, Apple ID credentials, and 2FA codes.

The scam impersonates Apple Support and may provide convincing details such as the device model and reported location. AI voice agents then contact victims and request sensitive information, making the attack appear like a legitimate Apple security process. Researchers identified hundreds of AI-assisted calls, highlighting how automation is making vishing and phishing attacks more convincing and scalable.

Apple does not ask users for their device passcode, password, or 2FA code. Users should avoid links in unexpected Apple-related messages and verify account activity only through official Apple channels. Strong account security, phishing awareness, and endpoint protection can help reduce the risk of Apple ID theft and AI-powered social engineering attacks.
 

Protect against phishing, vishing, fake support scams, and credential theft with NPAV Total Security.