Your iPhone probably doesn't have a virus, but scammers want you to think so

If a pop-up on your iPhone says it is infected with a virus, it is fake. That is the main message of a new explainer from security company ESET. Apple's iOS does not show virus warnings in a web browser, so any that appear are a trick. The real danger is not a virus. It is someone trying to scare or fool you.

Why viruses are rare on iPhones

A virus is a type of malicious software that attaches itself to files or programs and spreads. ESET says true self-spreading viruses essentially don't exist on a standard iPhone that has not been jailbroken, meaning modified to remove Apple's limits. Each app runs in its own sealed space. Apps must pass Apple's review and be digitally signed. Updates are adopted quickly, so security holes get patched fast.

What attackers do instead

Because the phone itself is hard to break, attackers go after the person holding it. ESET lists several common methods:

• Messages posing as delivery companies, banks or Apple, urging you to click a link or enter your login.
• Scareware, which is a fake virus pop-up meant to push you to tap, install something or pay for a fix.
• Free or fake public Wi-Fi that can be used to spy on some of your activity.
• Configuration profiles, normally used by workplaces to manage phones, that can be abused to change how a device behaves.

The fake banking app case

In 2024, ESET researchers found a campaign that got around App Store review. Victims got calls or texts saying their banking app was outdated, or saw social media ads offering perks for those who "download the update below." The link led to a copy of the bank's website that offered a "new version" of the app. It was really a progressive web app, which is a website packaged to feel like a regular app. It was built to steal login details.

AI makes scams harder to spot

ESET calls AI-powered social engineering a fast-growing threat. Attackers use AI to produce convincing deepfakes, phishing messages and copies of trusted brands. That makes it cheaper to run effective scams at scale, and harder for you to tell what is real.

What to do

• Do not tap, call or pay anything in a pop-up that claims your iPhone is infected.
• Be wary of any message that asks you to log in or install an app, even if it looks like your bank.
• Avoid automatic reconnection to known public Wi-Fi networks.