Apple Account Recovery QR Code Scam: What to Do
If a QR code says it can recover your Apple account, unlock iCloud, verify a device, or fix a security warning, pause before signing in. Use Apple settings or apple.com directly instead of trusting the scanned page.
How the scam usually works
- A text or email claims your Apple ID, iCloud storage, or device access is at risk.
- The QR code opens a lookalike Apple sign-in or account recovery page.
- The page asks for your Apple ID password, verification code, recovery details, or card information.
- Some lures ask you to approve a device, re-enroll security, or install a profile.
For broader Apple ID guidance, see Apple ID QR code scams and what to do after a fake login page.
Safer recovery steps
- Close the QR-scanned page without entering more information.
- Open Settings on your Apple device or type apple.com directly in your browser.
- Check trusted devices, recent account activity, recovery contacts, and security settings.
- Change your password only through official Apple settings if you entered it on the scanned page.
- Do not share one-time codes with a person who sent you the QR code.
When to treat it as urgent
Take faster action if you entered your password, approved a login, changed recovery settings, installed a configuration profile, or gave someone a verification code.
If the QR code added a device or app connection, use Can a QR Code Add a Device to Your Account? as the next checklist.
Frequently asked questions
Is an Apple account recovery QR code always a scam?
No. QR codes can appear in legitimate support or device flows, but unsolicited codes in texts, emails, flyers, or support chats should be verified through Apple settings or apple.com before you sign in.
Can scanning an Apple recovery QR code hack my Apple ID?
Scanning alone usually does not. The risk is entering your Apple ID password, approving a login, sharing a verification code, or installing a profile after the QR code sends you to a fake recovery page.
What should I do if I entered my Apple ID password?
Change the password through official Apple settings, review trusted devices, check account recovery information, and remove unfamiliar devices or apps. Do not use the QR-scanned page to do this.
What is a red flag in Apple QR recovery messages?
Urgent warnings about iCloud lockout, lost-device recovery, storage failure, refunds, or account suspension are red flags when they ask you to scan and sign in from a message you did not request.
Check account recovery QR codes before opening them
QRsafer previews QR destinations so you can spot suspicious recovery, login, and redirect pages before your browser opens them.