Cybercriminals are exploiting the launch of Apple’s first foldable smartphone, the iPhone Duo, to harvest consumers’ personal information through fraudulent preorder websites designed to mimic the technology giant’s official online platforms.
The scam campaigns, identified by cybersecurity firm Kaspersky, use fake discounts, countdown timers and misleading preorder offers to attract buyers eager to access the premium device, exposing them to potential identity theft, financial fraud and other forms of online exploitation.
Read also: Nigeria’s digital economy faces DNS security risks as cyberattacks hit 4,361 weekly
One fraudulent English-language website identified by Kaspersky advertised a purported 25 percent discount on the new device, using a design that closely resembled Apple’s visual identity to appear legitimate.
The website also displayed a countdown timer claiming that the promotional offer would expire in 30 minutes, creating artificial urgency and pressuring prospective buyers to complete their orders without adequately verifying the seller.
More concerning, the website requested customers’ contact details and shipping addresses during checkout, although it did not immediately request payment card information.
Instead, visitors were told that a company representative would contact them later to confirm delivery arrangements and payment details.
This approach could allow fraudsters to collect valuable personal information before initiating further contact with victims, potentially creating opportunities for targeted phishing, payment fraud and other social engineering attacks.
Kaspersky said the absence of an immediate request for bank card details should not be interpreted as evidence that a website is safe, as collecting personal information can be the first stage of a broader fraudulent operation.
The threat also extends beyond English-speaking consumers. Kaspersky identified multilingual fraudulent websites that allow visitors to select their preferred language and currency, making the schemes appear more accessible to buyers across different markets.
In one example, a fake website displayed several features of the new device and invited customers to place preorders, while offering different currency options to make the transaction appear internationally accessible.
To strengthen the appearance of legitimacy, the website claimed that customers would be redirected to Apple’s official website. However, Kaspersky found that this was not what happened.
The findings highlight how cybercriminals increasingly exploit major product launches to take advantage of consumer excitement, particularly where demand for expensive devices encourages buyers to pursue early access, promotional prices and preorder opportunities.
For fraudsters, the strategy is not necessarily to collect payment immediately. Obtaining a prospective buyer’s name, telephone number, email address and delivery location can provide enough information to establish contact and construct more convincing follow-up scams.
The danger is particularly significant because personal information obtained through fraudulent websites can potentially be reused in subsequent attacks or combined with other publicly available information to make fraudulent communications appear more credible.
Olga Altukhova, senior web content analyst at Kaspersky, said scammers move quickly when flagship devices enter the market because excitement surrounding new products creates urgency and reduces consumers’ willingness to exercise caution.
“These campaigns are designed to look credible, then push the target into a private exchange before they have time to verify anything,” Altukhova said.
She explained that buyers seeking premium devices are particularly attractive targets because their willingness to spend significant amounts makes them more likely to disclose personal or payment-related information.
Altukhova warned consumers against unofficial discounts, preorders and availability checks, describing them as potential warning signs of fraudulent activity.
Read also: Nigeria’s oil sector faces AI cyberattacks as smaller firms become entry points
The development underscores a growing challenge for technology companies and cybersecurity professionals: the ability of fraudsters to exploit the commercial attention surrounding major product launches by reproducing familiar brand identities and creating convincing shopping experiences.
While the immediate objective of some fraudulent websites may be to obtain customers’ personal details rather than their payment information, the information collected can become the foundation for more elaborate financial scams.
Consumers are therefore advised to verify preorder offers through Apple’s official channels, avoid websites promising unusually large discounts, and exercise caution when asked to submit personal information through unfamiliar platforms.
Royal Ibeh is a senior journalist with years of experience reporting on Nigeria’s technology and health sectors. She currently covers the Technology and Health beats for BusinessDay newspaper, where she writes in-depth stories on digital innovation, telecom infrastructure, healthcare systems, and public health policies.
