A fake iPhone Duo preorder scam is circulating online, tricking users into believing they can secure Apple’s first foldable phone early. Falling for it could expose extensive personal and financial data, and may even lead to the theft of cryptocurrency.
The scam claims buyers can save EUR 440 (around £375) by preordering the iPhone Duo. In reality, preorders do not open until 16 October, and the device will not reach stores until 23 October.
How the DarkSword Attack Works
The scheme relies on the DarkSword exploit chain, which targets older iPhones that lack the latest security and software updates. The attack can compromise a device and steal data simply by loading a malicious web page. No clicking or typing is required to become a victim.
The scam specifically targets iPhones running iOS 18.4 to 18.6.2, and its exploit code contained no iPad or Mac entries. The DarkSword exploit begins as soon as the scam page loads in the browser.
The page appears convincing, featuring the Apple logo, matching font and language style, and no spelling, grammar or punctuation errors. It even carries an Apple copyright notice. However, the privacy, terms and sales policy links lead nowhere.
Clicking the “Claim EUR 440 Voucher” button takes users to a submission form containing several telltale signs of fraud. The finish menu lists natural titanium, although the iPhone Duo only comes in star white and night sky. The form also lists incorrect size options of 6.3 and 6.9 inches; the phone measures 7.6 inches unfolded and 5.4 inches folded.
What the Scam Steals
Submitting the form produces a “Pre-Order Successful” message, by which point data theft on the iPhone has already begun. The malicious payload targets passwords, messages, call history, contacts, voicemail, email, photos, app information, cryptocurrency wallet data and Apple Notes.
Users on a browser other than Safari are shown a “Browser Restricted” page directing them to open Safari, which DarkSword uses to infiltrate the device. If it bypasses the iPhone’s security protections, it begins stealing data.
How to Stay Protected
Apple states that devices running the latest versions of iOS 15 through iOS 26 are already protected. To check for updates, go to Settings, General and then Software Update. Where the device allows, install the most recent version of iOS 26, with iOS 27 arriving soon. Enabling Automatic Updates in the same menu adds further protection.
Preorders for the iPhone Duo open on 16 October, with in-store availability beginning 23 October.
