Apple Pay Scam, Crypto Fraud Victims, Retirement Phishing Loss – Cybersecurity News [April 06, 2026]
Here are the top four cyber incidents from last week that kept security experts on their toes. A new Apple Pay phishing scam is doing the rounds, targeting 1.8bn iPhone users. Over 20,000 crypto fraud victims have been identified across Canada, the UK, and the US. An old man from Philadelphia lost his entire retirement savings because of a phishing attack. Just ahead of the IRS deadline, i.e., April 15, security experts have noticed a steep spike in tax refund scams.
1.8bn iPhone users prone to Apple Pay phishing scam!
1.8bn iPhone users across the globe are receiving fake “Apple Pay fraud alerts.” This alert is carefully designed and sent by the scammers in the form of text messages. Each message claims that there is a serious issue with the Apple Pay account of the recipient. The messages look urgent in nature and ask for prompt action by the user.
When the recipient clicks on a given URL or calls a given number, they get connected to hackers who pose as law enforcement officials or Apple Support team executives. These scammers convince the victims by sharing false stories. They claim that the victim can lose their money or personal data if they fail to take necessary actions.
Next, the fraudsters ask the victims to move all their money to a safe place or withdraw cash using Apple Cash, Apple Pay, or similar services.
Security experts have urged all iPhone users to stay extra vigilant and practice cyber hygiene. If any iPhone user receives a message related to Apple Pay, they must avoid interacting with it at all costs. There are multiple red flags to look out for, such as any message that asks for security codes and passwords.
Scammers have structured this campaign cleverly so that victims themselves authorize these malicious payment transactions. They are using social engineering tactics to trick victims.
SPF, DKIM, and DMARC strengthen email security by authenticating messages and preventing phishing scams like these from reaching users’ inboxes.
If any iPhone user feels that they are being targeted by threat actors, they must immediately stop all transactions and inform their banks. The same issue must also be reported to the concerned authorities.
20k+ crypto fraud victims identified!
The UK’s National Crime Agency recently led an international law enforcement operation, named Atlantic, that ultimately identified 20k+ crypto fraud victims. This operation took place last month and was a result of the collaboration among the NCA, the Ontario Provincial Police, the US Secret Service, and the Ontario Securities Commission. A couple of private industry partners also coordinated with these agencies.
The agencies were finally able to crack down on the culprits through active intelligence sharing, victim outreach, and by sharing technical strategies.
The public-private partnership worked miraculously well and will be an integral part of all future operations led by the UK. The NCA will keep working with other agencies and private-sector partners to evaluate every piece of intelligence received during this joint operation. The key idea is to offer active support to all the victims of crypto fraud and prevent any future crypto scams.
$9,000 retirement fund lost in a well-orchestrated phishing attack
Joseph Tigue, a Philadelphia resident, received a text message, which he believed was sent by Fidelity Investments. The text message asked him to answer in “YES/NO.” Once he responded, a call came through. Joseph was careful enough to check the called ID, which clearly mentioned “Fidelity Investments.”
The caller requested Joseph to confirm his personal information. Soon, they asked him to read a text message that they had sent. Joseph followed all the instructions. It was around this moment that the scammers gained access to Joseph’s retirement account and wiped away a whopping $9,000.
On filing a claim with Fidelity Investments, Joseph got to know that he had interacted with a malicious link inadvertently.
According to the 2025 Internet Crime Report by the FBI, Pennsylvania stands at sixth place in the list of states with the most suspected internet crime. In 2025 alone, Pennsylvania suffered losses worth $538 million.
Steep spike in tax refund scams just before the IRS deadline!
Security experts have noticed a sudden surge in scam websites that are created to take advantage of unsuspecting taxpayers. These fake websites pose as legitimate platforms meant for helping taxpayers file their income tax returns.
Since the deadline is April 15, the rate of fake website creation has steeped all of a sudden. Researchers have stated that 1 out of 10 tax-oriented domains is a potential scam website.
Experts believe that artificial intelligence has made iway to convenient for these threat actors to mimic legitimate websites. This drastically boosts the credibility and success rate of such scams. Apart from AI, Phishing-as-a-Service kits are widely available, which help scammers with little or no technical knowledge to come up with sophisticated and flawless threat campaigns.
It is because of artificial intelligence that most of the fake IRS portals resemble the genuine ones closely. But why do taxpayers fall for this tax refund scam?
These fake websites promise lucrative tax refund offers. The payouts are generally too good to be true. But just ahead of the IRS deadline, most of the taxpayers might not even pay attention to the “too-good-to-be-true” payouts on income tax return filing. At this moment, every taxpayer out there is eager to save some money, and scammers know exactly how to make the most out of this mindset.
These malicious websites often ask for highly sensitive personal information such as social security numbers, email addresses, phone numbers, and so on.
Apart from this tax refund scam, another tax-centric fraud is taking place where threat actors come up with a malicious IRS online tax calculator. The purpose of this calculator is to help taxpayers calculate the exact amount of tax refund that they are likely to receive.