Apple threat notification: is it real, and what now?

Apple has started sending out warning notifications on users' iPhones about mercenary spyware attacks, starting on August 13, 2026. These warnings are now appearing on the iPhone lock screen, in Settings, and in an email. Apple describes the alert as a high-confidence warning that a named user has been targeted by such an attack.

Mercenary spyware is a type of spy software sold to states, designed to target a specific person's phone rather than to spread widely. The best-known example is Pegasus, developed by Israel's NSO Group. These attacks are rare, targeting reporters, lawyers, activists, diplomats, and top staff.

To verify if the alert is genuine, check it directly on Apple's website using a trusted device. Apple also sends a banner on its account page and an email to the address on your Apple Account. Any message asking for a password, verification code, or for you to install an app is likely a scam. If you receive a notification, take it seriously and verify it at account.apple.com.

Update all your Apple devices to the latest software, enable Lockdown Mode, check your Apple Account for unknown devices, and change your password if needed. Two-factor authentication should be activated. For further assistance, contact the Digital Security Helpline run by Access Now. The alerts are not aimed at ordinary iPhone users but at named individuals.

If you are a general consumer, keep automatic updates on, use two-factor authentication, and ignore any message claiming to be an Apple alert. For those working in news, law, civil society, politics, or diplomacy, Lockdown Mode is a fair default given its minimal impact on device functionality.