Trying to debug my iPhone

drwme wrote:

My girlfriend has a regular iPhone 13 and a few months ago she foolishly clicked on an email that was a scam and it allowed the scammer to get in her phone and she her financial information like debit or credit cards linked to her Apple Pay.

The scammers were able to charge around a thousand dollars to her Apple Pay before the bank caught it and she canceled all her cards and her account was reimbursed. Then after that she wouldn’t put any bank cards on her Apple Pay. For some reason last night she must have forgotten how bad it felt to be a victim and decided to add her checking account debit card to her Apple Pay on her phone again. Now since the first incident at least 2months or more had passed with no issues but she didn’t have any cards linked to Apple Pay. As soon as she linked her bank debit card to Apple Pay last night within 2 hours the scammers had tried to make charges to her card but this time the banks fraud department caught it immediately and notified her. So that tells me whatever virus or spyware or malware or whatever she allowed into her phone back 2 months ago was still there just waiting for her to do exactly what she did. My question is how does she figure out what it is and how does she get rid of it so her phone will be secure again?

Did she not CHANGE ALL of her password to everything that is related to her email?

Read here too If you think your Apple ID has been compromised - Apple Support

drwme wrote:

I don’t know as far as her email password or anything related to it.

mom not computer illiterate but as it relates to what someone who’s well versed in how to do less than legal things once access has been gained to someone else’s computer or smartphone and what type of information (other than the obvious) like debit or credit card numbers, their expiration dates and CVN number that person could use to steal from you is something I would need to be educated about because how could they get her new debit card information once she linked it to Apple Pay with just her email address and password. She’s not sending emails and emails in her world are either sales marketing advertisements or promotional offers or of course the phishing scams but nothing personal or sensitive to any financial information. Please if you can help me understand how just an email password would allow someone to get all her relevant bank card information off Apple Pay

Did you actually read my response from my original post.

Go back and read it, specially click on the blue link I provided.

Now it your mom issue and not girlfriend not making sense.