More than 1,200 Hong Kong cardholders were reportedly linked to suspicious or unauthorized transactions during the iPhone 18 Pro and iPhone 18 Pro Max preorder period. Hong Kong-focused reports put the total value at up to HK$25 million, while Apple reviewed orders and Hong Kong authorities investigated.
What was reported about the iPhone 18 preorder fraud
The reported incident followed the opening of Hong Kong preorders for the iPhone 18 Pro and iPhone 18 Pro Max on September 12, 2026, at 8 p.m. Victims reported unexpected Apple.com/HK card alerts connected with purchases they said they had not made.
The Hong Kong Police and the Cyber Security and Technology Crime Bureau were reported to be investigating. No arrests had been reported as of September 15, 2026.
The reported figures did not fully match
The figures published during the incident varied. One account reported 1,209 suspicious transactions and up to HK$25 million on September 14. A separate report cited more than 700 affected cardholders and approximately HK$14.7 million, while another cited more than 700 cardholders and nearly NT$60 million.
These figures describe different reported counts and currencies, so they should not be combined into a single total. The Hong Kong-focused figure most widely reported in the incident was more than 1,200 cardholders and up to HK$25 million.
What happened with authentication
Some victims reportedly did not receive SMS one-time passwords or other authentication notifications for the transactions. That pattern was described as potentially consistent with the use of compromised card data, but it does not identify where the data came from.
Phishing pages targeting iPhone 18 buyers also appeared before and around the preorder period. Their use of official product names, specifications and pricing could make them look convincing, but the reported phishing activity does not by itself explain the Hong Kong card transactions.
Apple’s reported response and what affected cardholders were told
Apple reportedly said that current orders were being reviewed before processing and that fraudulent transactions were being canceled as quickly as possible. The Hong Kong Monetary Authority said cardholders are not liable for unauthorized transactions.
People who see a suspicious payment should contact their bank immediately. They should also be alert for follow-up calls or messages from people pretending to work for a bank or Apple; the reported incident prompted warnings about that impersonation tactic.
