IT Support Company near you in Wellington, Porirua, Hutt Valley, Kapiti Coast | IT NEAR U | itnearu.nz

PSA: Apple Pay SCAM - Text Sent with Code & 0800 Number

Scammers attempt to add a Credit Card to an Apple Pay account

SMS Text sent advising someone added a Credit Card to your Apple Pay

If you get this text message – or similar, Do not call the number they tell you to call!

“228338 is your Verification Code to add your Amex Card to Apple Pay. If you didn?t request this code, call 0800 333 140 immediately. Do not share this code.”

The most immediate red flag is that you may not have an Amex card, but the scammer may get lucky and guess your bank. The Verification code may be different as well. A legitimate verification code would only be sent when you or someone you know is actively trying to add your card to Apple Pay.

How this scam works (The Verification Code Scam):

This is a common form of scam known as an account takeover scam using a one-time verification code (or 2FA, two-factor authentication).

  1. The Scam: A fraudster has somehow acquired your details (like your name and phone number) and has attempted to add a stolen Amex card number to their own Apple Pay on a device.

  2. The Triggered Text: When they attempt to do this, the legitimate Amex system sends a one-time verification code (the number 228338 in your text) to the phone number associated with the account details they are using—which is your number.

  3. The Phishing Attempt: The scammer then waits for you to call the number they provided (0800 333 140)—not the real Amex number.

  4. The Trap: When you call, the person on the other end, impersonating an Amex representative, will sound helpful and tell you there’s been a fraudulent attempt on your account. To “stop” the fraud, they will ask you to read the code you just received (the 228338 code).

  5. The Result: If you give them the code, you are unknowingly completing the verification step for their device. They successfully add the card (which may or may not be actually stolen, but one they are testing) to their Apple Pay wallet and can immediately start making purchases.

Key takeaway: The fact that they told you not to share the code, but then immediately asked you to call them to discuss it, is a classic psychological manipulation to make the request seem urgent and legitimate. A legitimate financial institution will never ask you to read a verification code back to them over the phone.

What you should do:

  1. Do NOT call the number (0800333140) or reply to the text message. NOTE: The number may be a mobile or a different 0800 Number.

  2. Delete the text message.

  3. Since you don’t have an Amex card, there is no risk to your Amex account, but it’s always a good idea to be cautious. If you have any other bank or credit cards, watch them for any unusual activity.

How to Check your Apple Pay Cards: On your Apple Device, if you use Apple Pay, you can check what cards are associated with your Apple Pay account by going to the Grey “Settings” Cog Application, then Click on your Name & Image at the top (labeled: Apple Account, iCloud+ and more) and then tap on “Payment and Delivery”. Cards will be listed under there.

See our article on reducing your risks when shopping online – Stop Trading Privacy for Pennies