Getting emails to finish setting up a card in wallet, but I haven't added any new ones.

Hi there, I have received two emails now within the past few weeks to my apple email from "applepay@insideapple.apple.com" telling me I have to finish setting up a card in Wallet that requires verification to finish the process. Subject line "You're almost done setting up Apple Pay." I use Wallet frequently but haven't attempted to add any new cards recently. I have not clicked on any of the links in either email, but rather, after receiving each email, went to check in the Wallet app both times to see if there was anything like what the email told me I might find in there (a "verification required message") and there's never anything like that.


I have read through a bunch of old posts that were not conclusive about the domain "insideapple.apple.com" and there is something just very slightly "off" about the aesthetics of these emails. I am also not addressed by name anywhere in the email. Has anyone else been getting these or confirmed that they're phishing/scam attempts? And is there anything we can do to let Apple know they're being impersonated by this email address if so?


Screenshots attached for reference.


Thank you.






Posted on Aug 21, 2024 01:01 AM

Reply
Question marked as Top-ranking reply

Posted on Aug 21, 2024 01:17 PM

Edit: TL:DR, it's a phishing email.


I've received two of these same emails from the same address listed. I contacted Apple Support and the person I spoke with said that if setup for a card in Apple Wallet had not been completed, you would be able to open settings and see a notification with a red number at the top of the settings app saying "finish setting up wallet" (or something like that). It's similar to skipping over items while setting up a new phone and you see a notification in settings that says "finish setting up your phone." She also mentioned that a legitimate email from apple for finishing setup should come from "noreply@email.apple.com."


She recommended moving the email to junk so that you don't receive it anymore.


Side note: if you open the same email on an iPad or a Mac, the blue "open wallet" button does not show. I suspect they're trying to keep people from using the cursor hover technique that shows link locations. The tech support rep also mentioned that, usually, it would be Apple's wallet icon, not a blue button.


Also, another tip off is the image of the "wallet" they use. It shows generic color cards while Apple's own website shows examples of cards from different banks (BoA), credit card companies (American Express), and even transit agencies (Clipper Card). I would think they would use the same thing in their emails.

Similar questions

11 replies
Question marked as Top-ranking reply

Aug 21, 2024 01:17 PM in response to imaweasley

Edit: TL:DR, it's a phishing email.


I've received two of these same emails from the same address listed. I contacted Apple Support and the person I spoke with said that if setup for a card in Apple Wallet had not been completed, you would be able to open settings and see a notification with a red number at the top of the settings app saying "finish setting up wallet" (or something like that). It's similar to skipping over items while setting up a new phone and you see a notification in settings that says "finish setting up your phone." She also mentioned that a legitimate email from apple for finishing setup should come from "noreply@email.apple.com."


She recommended moving the email to junk so that you don't receive it anymore.


Side note: if you open the same email on an iPad or a Mac, the blue "open wallet" button does not show. I suspect they're trying to keep people from using the cursor hover technique that shows link locations. The tech support rep also mentioned that, usually, it would be Apple's wallet icon, not a blue button.


Also, another tip off is the image of the "wallet" they use. It shows generic color cards while Apple's own website shows examples of cards from different banks (BoA), credit card companies (American Express), and even transit agencies (Clipper Card). I would think they would use the same thing in their emails.

Aug 21, 2024 01:27 PM in response to scramjett

So, I did multiple investigations into this including a call to Apple support. This is indeed an Apple email. I searched several domain ownership sites and they all came back with a subdomain owned by Apple. I called Apple support and escalated the issue and also received confirmation, the notification/email is indeed legitimate.


After a short discussion, it was decided a possible cause is a recent iOS update that the recipient may have done or was triggered by not having their account setup or not using their account.


The bottom line, it’s legitimate and nothing to worry about.

Aug 21, 2024 01:31 PM in response to Jeff Donald

Oops I just posted my last reply to you as you must have been typing this out! Thanks so much for checking this out. It seems that Apple is giving out different info to different folks so I may have to reach out to them myself to see what they say. For now I'm not going to worry about it because I haven't done anything to have made myself vulnerable. I appreciate your help!

Aug 21, 2024 01:41 PM in response to Jeff Donald

Interesting. The only thing is that sender email addresses can be spoofed. I've seen it before. I did note on the OP's post that they had the "verified logo" notification, but I did not see that when I checked on my phone. I'm not sure how Apple's verification process works though. It's just too bad I was not able to "hover" over the blue "open wallet" button to see where the link takes you. If it was indeed for opening the app, there is a certain type of link code used for on device app triggers that would be somewhat noticeable. In any case, verifying using the settings app is the surest way to see if an unfinished wallet setup was indeed the cause.

Aug 21, 2024 01:46 PM in response to imaweasley

Of course. One other thing that occurred to me, something I learned while going through my employer's IT security awareness training, is to check the time stamp. It's not a surefire solution for automated processes like Apple's notifications, but I did note that the receipts I receive from Apple for my subscription services come from the no_reply email address AND usually come through in the afternoon (my time). I would expect a similar time frame for these types of emails also. I would also expect consistency (like receiving them each day while the setup is unfinished). It could be a phisher using a spoofed email as the rep I spoke with suggested, or it could be a system process error on Apple's part, as Jeff suggested, that would cause inconsistencies.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Getting emails to finish setting up a card in wallet, but I haven't added any new ones.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.