Cybercriminals have found a new way to exploit iPhone users by bypassing iMessage’s built-in phishing protection, leaving users vulnerable to malicious links and scams. This worrying trend was reported by BleepingComputer, highlighting a tactic that could put many people at risk of being scammed.

iMessage has a security feature that automatically disables clickable links in messages from unknown senders. It is a smart tool that aims to protect users from phishing attacks. However, scammers have figured out how to turn this feature against the very users it is designed to protect. According to Apple, when you reply to a message or add the sender to your contacts, those disabled links suddenly become clickable. Scammers are taking full advantage of this behavior and fooling users into engaging with their messages.

Fraudulent messages often pretend to be from trusted organizations. They use language that sounds official and familiar, such as “stop reply” or “don’t reply” to make the message appear legitimate. This is similar to the wording used by many real businesses or services, which is why people can be easily deceived.

What makes this scam particularly effective is that replying to these messages does more than enable the link. It also gives scammers valuable information – confirming that the phone number is active, and that the recipient is likely to respond to future scams. This increases the risk of those users being retargeted.

While people who have a keen interest in technology may see the signs of a phishing scam, the bigger concern is for older people or those less familiar with these tactics. They are the ones most likely to fall for these tricks, often because they believe the messages are genuine.

So how can you protect yourself? The best advice is simple – don’t reply to messages from unknown senders, no matter how trustworthy they seem. If something feels bad, trust your intuition and leave the message alone.

Another layer of protection is available on iPhones and iPads through message filtering. This feature moves messages from people who are not in your contacts to a separate list. To enable it, toggle on Settings > Messages > Filter Unknown SendersThis way, it is easier to recognize unfamiliar messages and decide whether to engage with them or not.

It’s worth noting that this feature can also filter out legitimate messages like delivery updates or notifications from your bank. However, links in messages from unknown senders will be disabled until you reply or add the sender to your contacts. The system is designed to work this way.