What Is the Fake Purchase Alert Scam?

The fake purchase alert scam is a phishing attack that preys on your fear of unauthorized charges. You receive an email, text message, or phone notification that looks like it's from a legitimate company — Amazon, Apple, PayPal, your bank, or a payment app like Zelle or Cash App. The message claims you've been charged for a purchase you didn't make: "$499.99 for an iPhone 17 Pro Max" or "$299 for a Norton Antivirus renewal" or "You sent $750 to John Smith via Zelle."

The charge is fake. It never happened. But the message is designed to trigger immediate panic — nobody wants to lose $500 to an unauthorized transaction. The email or text includes a "dispute this charge" link or a "customer support" phone number. That link leads to a phishing site. That phone number connects you to a scammer. Either way, the goal is to get you to act on fear before you have time to think.

This scam has evolved significantly in 2026. Scammers now use AI to generate realistic-looking receipts with correct branding, order numbers, and even fake shipping addresses. Some messages include the last four digits of a real credit card number — obtained from data breaches — to make the alert seem authentic. The combination of a plausible charge amount, real-looking branding, and partial card information makes these scams extremely convincing.

How the Scam Plays Out

The scam follows a carefully engineered sequence designed to move you from alarm to action as quickly as possible. First, you receive the fake alert — typically an email or text, though some scammers now use voicemail drops claiming to be from a fraud department. The message is urgent: "If you did not make this purchase, contact us immediately to dispute the charge."

Second, if you call the phone number in the message, a "customer support agent" answers. They sound professional and sympathetic. They confirm the "unauthorized charge" and tell you they need to verify your identity to process the refund. They ask for your account credentials, your credit card number "to locate the transaction," or your Social Security number "for security verification." Some scammers ask you to install "security software" to "remove the malware" that allegedly caused the unauthorized charge — which is actually remote-access tools that give them control of your computer.

Third, if you click the "dispute this charge" link instead of calling, you land on a phishing page that looks like the real company's login screen. You enter your username and password. The scammer now has your account credentials. They log in, change your password, and lock you out while making real unauthorized purchases or transferring funds.

In a more aggressive variant, the "support agent" tells you that to reverse the fake charge, you need to "cancel" it by sending the money back via Zelle, Cash App, or wire transfer — essentially tricking you into sending real money to resolve a charge that never existed.

Red Flags: How to Spot a Fake Purchase Alert

Here are the specific signals that a purchase alert is a scam:

1. The charge is for a high-value item you didn't order. Scammers use expensive items — iPhones, laptops, antivirus renewals, or large Zelle transfers — because the higher the amount, the more likely you are to panic and act without verifying. A $499 charge gets your attention; a $2 charge does not.

2. The message includes a phone number to call. Legitimate companies handle disputes through their official app, website, or the phone number on the back of your card — not a number embedded in an unsolicited email or text. If the only way to "dispute" the charge is to call a number in the message, it's a scam.

3. The sender's email address or phone number is wrong. Real Amazon emails come from amazon.com. Real Apple emails come from apple.com. Check the actual sender address, not just the display name. Scammers use lookalike domains — amazon-security.com, apple-billing.net, paypal-alerts.co — that look correct at a glance but are not the real company's domain.

4. You're asked to "verify" by providing sensitive information. No legitimate company asks for your password, full card number, Social Security number, or remote access to your computer to process a dispute. If the "support agent" asks for any of these, hang up immediately.

5. You're asked to send money to "cancel" or "reverse" a charge. This is always a scam. You never need to send money to dispute or reverse a charge. Real refunds are processed back to your original payment method — you don't send money to get money back.

How to Verify Whether the Charge Is Real

Before you do anything in response to a purchase alert, verify independently. Do not use any links, phone numbers, or contact methods provided in the suspicious message itself.

1. Open the company's official app or website directly. Log in to your Amazon, Apple, PayPal, or banking app by typing the URL yourself or opening the app from your home screen. Check your actual order history and transaction list. If the charge isn't there, it never happened.

2. Check your credit card or bank statement directly. Log into your bank's app or website (not through a link in the alert) and review recent transactions. If there's no matching charge, the alert is fake.

3. Call the number on the back of your card. If you're still unsure, call your bank or credit card company using the phone number printed on your physical card — never a number from an email or text. The bank can confirm whether any charges are pending or posted.

4. If the alert included a link, do not click it. Run the URL through Scam Detective instead — for $1, you'll get an instant risk score, a plain-English verdict, and the specific red flags we found, including domain age, impersonation signals, and phishing markers.

What to Do If You Already Responded

If you called the number, clicked the link, or provided information in response to a fake purchase alert, take these steps immediately:

1. If you entered credentials on a phishing site, change your password immediately — for that account and anywhere else you reused the same password. Enable two-factor authentication if you haven't already. 2. If you provided your credit card number, contact your card issuer to report potential fraud and request a new card number. Most issuers can block the card instantly through their app. 3. If you installed software or granted remote access, disconnect your computer from the internet, uninstall the software, and run a full malware scan. Consider having a professional check your system. 4. If you sent money via Zelle, Cash App, or wire transfer, contact your bank immediately to attempt a recall and file a dispute. Then report the scam to the FTC at reportfraud.ftc.gov and to the real IC3 at ic3.gov.

The faster you act, the more likely your bank can limit the damage. Most credit cards offer zero-liability protection for fraudulent charges, but this protection depends on reporting the fraud promptly — usually within 60 days. For debit cards and P2P transfers like Zelle, the window is shorter and recovery is less likely, so speed is critical. For more on P2P payment scams, read our guide on Zelle scams.