Cybercriminals are exploiting demand for the iPhone 18 Pro, Pro Max and foldable iPhone Duo by creating fake shopping websites promising steep discounts and early access. Buyers are urged to verify domains and avoid bank transfers or cryptocurrency payments altogether.

Fake iPhone 18 Websites Surge as Cybercriminals Target Buyers

The420 Correspondent
5 Min Read

New Delhi. People eager to buy the latest iPhone could be targeted by cybercriminals through fake websites offering heavily discounted deals. With the launch of the iPhone 18 Pro, iPhone 18 Pro Max and foldable iPhone Duo, a sharp rise has been warned in fraudulent websites using terms such as Apple and iPhone in their domain names. These websites may lure customers with low prices, early access and special offers before attempting to obtain their money or financial information.

Scammers are reportedly preparing such websites even before new phones are launched, taking advantage of intense consumer interest in prices and availability. Security researchers have observed a sudden rise in registrations of domains linked to the names of new iPhone models around previous launches. While one or no such domains may typically appear on an ordinary day, more than 200 new domains have reportedly been registered within 24 hours of some launches.

Proposal for Conducting Cyber Crisis Drill, Tabletop Exercise (TTEx) & CCMP Readiness Exercise

Some of these websites can later be developed for phishing campaigns. They may be designed to look like genuine online stores, complete with product images, technical specifications, features and pricing. Artificial intelligence can also be used to reproduce the appearance and content of legitimate retail websites, making it harder for consumers to identify fraudulent pages.

Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said cybercriminals exploit the popularity of newly launched products and the urgency among consumers to make purchases. An attractive website or unusually low price should not be treated as proof that a seller is genuine. Buyers should independently verify the website, payment method and credibility of the seller before making any transaction.

The iPhone 18 Pro has been reported to have a starting price of £1,199, while the iPhone 18 Pro Max is priced at £1,299. Fake websites could use these prices as a benchmark and advertise the same devices for several hundred pounds less. Claims of early access, limited stock or offers expiring within a few hours could then be used to create a sense of urgency and push customers into making immediate payments.

Fraudulent websites may insist that buyers pay through bank transfers, partly to avoid some of the consumer protections associated with card payments. Some could also demand payment in cryptocurrency. Such transactions can make it considerably harder for victims to recover their money once it has been transferred.

Consumers should also be cautious about pages claiming that models not officially available for sale or booking have already gone on sale. Websites claiming to offer advance bookings or deposits for the standard iPhone 18 should be treated carefully if the availability has not been officially confirmed. Paying an advance amount through an unfamiliar website can expose buyers to significant financial risk.

Before purchasing, consumers should carefully examine the website domain. The presence of words such as Apple or iPhone in a domain does not establish that the website is genuine. Extremely low prices, countdown timers or limited-time pressure, demands for bank transfers or cryptocurrency payments and suspicious contact information can all be warning signs of a scam.

Prof. Triveni Singh said scammers may also use advertisements, messages and social media posts around major smartphone launches to direct consumers toward fraudulent websites. Instead of clicking on promotional links and making payments directly, buyers should independently verify the price and availability through official sales channels.

Anyone who has shared bank or card details on a suspicious website or has already made a payment should immediately contact their bank and take necessary steps to secure the account or card. Passwords linked to affected accounts should also be changed, and users should closely monitor their bank and card statements for any suspicious transactions.

About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.

Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics

Stay Connected