Mystery iPhone Order on Shop Account

A reddit report about a phishing scam that cost someone $349.0. Learn how to avoid falling victim.

Got a notification from the Shop app about a new order for an iPhone 12 Pro Apple refurbished white, $349. It has my email, but the shipping address isn't mine, and the recipient name is just part of the email. The store shows as "My Store" and redirects to "Cell Phone World," which is basically an empty page with a "we are coming" message on a template background. Definitely sketchy. I have zero record of this order in any of my emails or trash. I have passkey on and never got any login alerts requesting an SMS code (as far as I know, Shop only asks for an SMS code to your account phone to log in; I also have a passkey set). Checked all my payment methods and nothing. No charges pending or unrecognized transactions, so it doesn't seem like a purchase actually went through. The order doesn't list the used payment method either. No idea where this came from or how it's on my account. It feels like somehow my Shop is compromised. Can they just create a dummy purchase somehow? I also can't find any way to set or change a password; I usually sign in with email and SMS code. TL;DR: Random Shop app order to a different address, no charge or email. No idea where it came from or how to secure the account. Edit: Looking into the Shopify sub, it looks like my information was compromised — which is just my email — and since I have an account, it linked up and showed up. Basically, they used my email when putting in the order, and since my account collects orders with that email, it shows up on my account, despite not being made with my account. Luckily my accounts aren't compromised, but it's annoying. I can't stop them from putting it in even if I deleted my account, so I'll just keep getting them ugh... Also, some of the orders have descriptions saying "call this number if you didn't make this purchase" (mine didn't), which is definitely a scam though. I've now changed this post as a scam report.

🛡️ How to Protect Yourself

1

Report suspicious emails to your email provider

2

Never click links or download attachments from unsolicited emails

3

Use two-factor authentication on all accounts

Verify Suspicious Messages Instantly

Don't fall victim to scams. Use ScamPup to check any suspicious message, link, or email before it's too late.

Check with ScamPup →

Share This Story

Help others avoid scams by sharing this prevention story.

Disclaimer: This content is compiled from publicly available scam reports and community submissions. ScamPup is not responsible for the accuracy of information regarding specific companies, individuals, locations, or brands mentioned in these stories. Always verify information independently and consult professionals for legal or financial advice.