Fake Apple billing email doing the rounds

You might receive an email with the subject "Account Status Notice" that looks like an Apple billing alert. It claims there is a problem with your payment method, says Apple could not process a charge, and urges you to review your payment details so you can keep using Apple services and subscriptions. The message is designed to feel routine and urgent, so you act before you think.

What gives it away is that the sending setup does not stack up cleanly, even if the message can still slip through normal checks. Parts of the email authentication appear legitimate, but the sending record does not fully line up, which means the message may not have come from who it claims to be. The domain behind it, snamholding.com, is not an Apple-owned domain and has no established business reason to send Apple billing notices. If you reply, your response may also be redirected somewhere other than the apparent sender.

The attacker is after your trust first, then your details. If you click through and enter credentials or payment information, you could hand over your Apple account access, card details, or both. That can lead to account takeover, fraudulent charges, and follow-on scams using the information you provided.

This campaign is already being seen across multiple Microsoft 365 tenants, which means it is not a one-off test. You are likely seeing part of a broader email sweep, and it may keep reappearing because the message is varied just enough to circulate between organisations.