⚠️ DISCLAIMER: Ministry of Cyber Affairs is an independent news, guides and directory service on cybercrime and cybersecurity, for victims and investigators. It is NOT an official government or ministry portal.
Website Scam CheckerNew
Back to News

Buying the Hype: The Rise of Fake iPhone 18 Pro Pre-order Portals

15 September 2026
Source:Ministry of Cyber Affairs
Share
Buying the Hype: The Rise of Fake iPhone 18 Pro Pre-order Portals

Fake iPhone 18 Pro pre-order sites promise cheaper, faster phones and deliver nothing. How they work, the red flags, and how to check a site before you pay.

Apple opened pre-orders for the iPhone 18 Pro and iPhone 18 Pro Max on 12 September 2026, and fake pre-order portals are already chasing the buyers who could not get one. They promise the phone below the official price, faster than Apple can deliver, or before it is even on sale, and they are built to take your money or your card details and vanish. Here is how they work and how to spot one before you pay.

Primary sources: Apple Newsroom, 9 September 2026 (prices and pre-order date) · The Guardian, 13 September 2026 (WhoisXML API domain data and scam tactics)

$1,199Official iPhone 18 Pro starting price (£1,199 UK, ₹1,64,900 India). Launch-week "deals" far below it are the bait.
200+New domains using the new model's name registered within 24 hours of recent iPhone keynotes, up from almost none on a normal day (WhoisXML API).
16 OctPre-orders open for the foldable iPhone Duo. Anyone "pre-selling" it today is a scam.

How the fake portals work

Every launch leaves a gap between demand and supply. Apple is already quoting October delivery for most iPhone 18 Pro orders, and the fake portals sell the one thing Apple cannot: a phone sooner, cheaper, or before release.

  1. The lure. An ad, social post or message offers the iPhone 18 Pro hundreds below list, "guaranteed launch-day delivery", or early access to models not yet on sale, such as the iPhone Duo or the standard iPhone 18.
  2. The lookalike store. A polished site on a domain containing "iphone", "apple" or the model name, often assembled from templates or with AI tools.
  3. The pressure. Countdown timers and "only 3 left" banners to stop you checking.
  4. The payment trap. A push to pay by bank transfer, payment app or crypto, which is hard to reverse, or a card form that simply harvests your details.
  5. The vanish. No phone arrives and the site goes dark, ready to return under a new name next launch.

Alexandre François of WhoisXML API told Forbes that some of these "buy now" pages were already flagged as dangerous by security engines yet still missing from browser blocklists, so for most people, nothing stops the page from loading.

Card details typed into a fake checkout do not stay there. In Hong Kong, police logged about 1,200 reports worth roughly HK$25 million in the first two days of pre-orders from people whose stolen card details were used to order iPhones on Apple's genuine store. How the details were stolen is still under investigation, with phishing among the lines of inquiry.

Red flags

Red flagWhy it matters
A price far below $1,199 / £1,199 / ₹1,64,900Nobody discounts a phone in launch week.
"Pre-order" for the iPhone Duo or standard iPhone 18The Duo opens on 16 October; the standard iPhone 18 is not expected until 2027.
Guaranteed launch-day or next-day deliveryApple itself is quoting October.
Bank transfer, payment app, gift card or crypto onlyAlmost impossible to reverse.
A domain like "iphone18-preorder-deals.shop"Apple sells only at apple.com and in its Apple Store app.
Countdown timers, "only a few left"Manufactured urgency.

Check a site in 30 seconds

  • Look at the address bar, not the page. If it is not apple.com or a retailer you already know, stop.
  • Verify resellers with Apple's official reseller locator.
  • Arrive by typing, never by clicking an ad or a message.
  • Pay by credit card or Apple Pay, so you can dispute the charge if something goes wrong.

Already paid?

Call your bank or card issuer now to block the card and dispute the payment; our chargeback guide explains how. Then report the site: FTC in the US, Report Fraud in the UK (formerly Action Fraud), 1930 or cybercrime.gov.in in India, and 18222 in Hong Kong. If you clicked a link but did not pay, follow what to do if you clicked a phishing link.

FAQ

Is a site safe if it has a padlock and looks exactly like Apple's?

No. The padlock only means the connection is encrypted, and scam sites get certificates for free. Check the domain: Apple sells at apple.com and in the Apple Store app.

Can I pre-order anywhere other than Apple?

Yes, through carriers and Apple Authorised Resellers, which you can confirm with Apple's reseller locator.

Someone is selling an iPhone Duo now. Is it real?

No. Apple's foldable does not open for pre-order until 16 October 2026.

Sources: Apple Newsroom · Apple Newsroom (iPhone Duo) · The Guardian (via AOL) · Forbes (via Yahoo) · South China Morning Post · 9to5Mac

If you have been targeted, you are not alone. See our country-by-country cybercrime help hub for step-by-step reporting and recovery guides.

More in Cybercrime Trends

Related articles

Cybercrime Trends (News)

Singapore Police and Four Banks Disrupt Over 900 Scam Attempts, Averting S$35 Million in Losses in a Two-Month Drive

Singapore's Anti-Scam Centre and four banks disrupted more than 900 scam attempts between 1 September and 31 October 2026, the police said, averting over S$35 million (about $27.2 million) in potential losses. The centre operates year-round, with bank staff on site. India, by contrast, runs a standing national system: the Citizen Financial Cyber Fraud Reporting and Management System, which since 2021 has saved more than Rs 11,158 crore (about $1.19 billion) in over 3.28 million complaints.

12 Nov 2026
Cybercrime Trends (News)

Spain's National Police Arrest 43 Over Bank Antifraud SMS Scam That Took More Than $1.26 Million

Spain's National Police have arrested 43 people accused of posing as bank antifraud departments in a smishing and vishing scheme that defrauded more than 130 victims of over $1.26 million (€1.14 million). Officers said they had clarified 134 offences. The suspects face charges of belonging to a criminal group, fraud and money laundering. A further 13 people were questioned without being detained, and 95 have been formally accused in all. The year-long inquiry is continuing.

12 Nov 2026
Cybercrime Trends (News)

India's UP Police Arrest Man Accused of Running Telegram Groups to Share Child Sexual Abuse Material, Acting on NCMEC CyberTipline Alert

Police in Bhadohi, in India's Uttar Pradesh state, have arrested a 27-year-old man accused of creating multiple Telegram groups to collect and share child sexual abuse material (CSAM). The case began with a CyberTipline report received at Koirauna police station. An FIR was registered under India's IT Act, the POCSO Act and the Bharatiya Nyaya Sanhita. Officers recovered a Redmi (Xiaomi 15) phone said to have been used in the offence. The arrest was made on 10 November 2026.

12 Nov 2026