1. Apple

These come in the form of fake iCloud "storage-full" alerts over text or email and ask for an immediate "payment update" that leads you to a fake iCloud website where your credentials and payment details go straight to the scammers.

Scammers will send emails that look deceivingly like they come from Apple with pixel perfect images and domains that look like they might be official to Apple. Scammers use this to harvest Apple ID credentials — and often the two-factor code as well. With control of the account, they lock the real owner out, drain linked payment methods through Apple Pay and App Store purchases, mine iCloud for photos and documents that can fuel identity theft or extortion, and message the victim's contacts to spread the scam further.

Often with a spoofed caller ID that displays as Apple. The number the scammer claims to be calling from may be an Apple store so when consumers look it up it does appear to be an Apple number. The fake Apple representative will direct you to a fake Apple website to "verify your identity," or keep you on the line to read out a two-factor code or install a screen-sharing app — either way, the goal is control of your Apple ID and the payment methods attached to it.