As Apple prepares to launch the iPhone 16, cybercriminals are already exploiting the excitement with scams targeting consumers eager for the new model.

New iPhone 16 will be introduced at the “Glowtime” event to be held on Monday, September 9, 2024. Official invitations for the event were sent out in August. If tradition continues, the devices are expected to hit stores on Friday, September 20. Expected improvements include AI-powered capabilities, revamped hardware, larger screens, sleeker bezels, and a host of new colors. Rumors about the iPhone 16 started circulating over the summer, and cybercriminals took it as an early warning.

As the event time approached, security researchers uncovered fraudulent activity related to the launch. A common scam used by threat actors is offering early buyers the chance to pre-order the latest iPhone 16 at a nearly 40% discount.

Victims are directed to a flashy website showcasing shiny-looking new iPhones and enticed by the promise of “being among the first to benefit from the latest technology.” When they click, they are asked for billing and shipping information along with the option to pay via PayPal. When the ‘Add to cart’ or ‘Buy’ buttons are clicked, a fake invoice is created and taxes and shipping are also taken into account. In fact, “free shipping” is offered for orders over $1,000.

Once the payment is made, victims soon realize that the money has been withdrawn from their account. However, the iPhone is not delivered. Even more worrying, you may be giving away your personal information, which is very profitable on the dark web, to fraudsters.

Another type of fraud detected by security experts offers consumers an iPhone technical support offer that will allow them to update their mobile devices. The fake site also claims to redirect users to a page where they can report a lost or stolen phone and another page that will help them find their device. Finally, at the bottom, victims are also given the option to reach a repair center. In return, all the page requires is that you log in with your Apple ID.

While filling out a credential here might not seem like a big deal, iPhone users know that if someone steals your Apple ID, they hold the keys to your digital kingdom. Scammers can access personal information like name, email address and more and sell it on the dark web. They can also hack into your iCloud account and gain access to your photos, documents, and device backups. What’s more, they can use your ID to make unauthorized purchases, view your account balance, and withdraw money from your Apple wallet. At worst, they can lock your device and be held for ransom.