An email that looks just like an Apple or Google receipt lands in your inbox: you have been charged for an app, a subscription, or a game purchase you never made. A panicked click on “cancel” or “dispute” feels natural — and that is exactly the trap. The receipt is fake, and the link goes to a phishing page. Our GetMyPassword team explains how to recognize a fake purchase receipt scam.
How the scam works
You get an email styled as an App Store, iTunes, or Google Play receipt for a charge you do not recognize — often an odd amount for an app subscription or in-game currency. The message offers a way to “cancel the subscription,” “dispute the charge,” or “request a refund,” with a prominent link or an attached PDF. The link leads to a fake Apple or Google login page that steals your account password, or a form that harvests your card and personal details. The charge never existed; the alarm is the whole point.
Red flags to watch for
- A charge you do not remember, designed to make you react fast.
- A “cancel,” “dispute,” or “refund” link rather than a prompt to check your account.
- A sender address that is not the official domain, despite real-looking branding.
- An attached PDF or invoice urging you to call a number or click through.
- A request to log in or re-enter your card to “stop” the charge.
How to verify a real charge
Never use the link in the email. To check whether a purchase is real, go directly to your account — your purchase or subscription history on your device’s settings, the App Store or Google Play, and your card or bank statement. A genuine receipt simply records a purchase; it does not need you to log in through it to “cancel” anything. Real subscription management lives inside your device or store account, not behind an email link. If the charge is not in your real history, the email is a phishing attempt.
A real receipt is a record, not a demand to log in. If an email about a charge you do not recognize wants you to click to “cancel,” check your actual purchase history instead — the panic is the product.
How to protect yourself
Do not click links or open attachments in unexpected receipt emails; verify any charge through your store account and bank statement directly. Turn on two-factor authentication for your Apple and Google accounts so a stolen password is not enough. Use a unique password from our password generator on each account, and if you entered details on a linked page, change that password immediately and watch your card for fraud.
Frequently asked questions
Is an unexpected App Store or Google Play receipt a scam?
Often, yes. A receipt for a charge you do not recognize, with a “cancel” or “dispute” link, is a common phishing lure. Do not click it — check your real purchase history and bank statement to confirm whether any charge exists.
How do I check if the charge is real?
Go directly to your device settings, the App Store or Google Play purchase history, and your card or bank statement. A genuine charge appears there. If it does not, the email is fake, no matter how official it looks.
What if I clicked the link and logged in?
Change your Apple or Google password immediately and anywhere else you reused it, turn on two-factor authentication, and review your account’s security and active sessions. Watch your card statement and report any fraudulent charges to your bank.