New report from Bleeping Computer highlights a new way scammers have discovered to bypass Apple’s strict messaging security: to make you bypass it yourself.

Apple’s iPhones proudly have a reputation for being completely security and privacy focused. Apple’s Messages app has built-in protections that prevent links or phone numbers in spam on iPhones from being clicked. But now, scammers have learned a few tricks on how to disable these protections.

These attacks are oddly called “Smishing” attacks (a combination of “SMS” and “Phishing”). The difficult message will be hidden in the form of a notice of an unpaid invoice for a small amount, or a notice of a “failed” USPS delivery.

Examples of fraudulent messages. | Image credit – Sleeping PC

The key to detecting the malice of such messages is that new scam “warnings” will ask you to respond with “Y” or “N,” or demand any form of response immediately. The instructions will lead you to reply, then exit the chat and return to the message to click on the now enabled scam link.

However, unfortunately, if you fall for the scam, you will soon be inundated with other scam messages that now contain clickable links and scary “warnings” urging you to click (hopefully, sooner than you imagine). Sometimes, the sender may pretend to be affiliated with Apple or other major companies.

This tactic has been used over the past year, but its frequency has increased since the summer. Some people have taken to typing “STOP,” “Yes,” or “NO” to confirm appointments or opt out of text message subscriptions, and the scammer is hoping to use your muscle memory to enable links that have been disabled by Apple on your device. Replying will enable links and disable message protection for the text, it also signals to the malicious user that you are vulnerable to such manipulation hence the flow of other scammers trying to scam you.

How to protect yourself from new Apple Messages scammers

The best thing, of course, is not to fall for the scam and comply with the instructions of the scammers. However, if you’ve already been scammed, it’s best to block and report the email address or phone number trying to scam you – and do the same with any other similar messages once you receive them.

It is important to remember that it is always better to contact banks or any institution directly (by other means, such as finding their official website and taking their contact information from there) if there is something that concerns you. Remember not to enter your credit or bank card information in messages or in any link sent to you in any messaging application.