Should I pre-order the new iPhone Duo? It’s a question many consumers are weighing up right now. A new iPhone launch creates excitement, and customers anticipating a new device naturally expect messages about reservations, upgrades, trade-ins and deliveries. Cybercriminals can exploit that anticipation, using convincing stories and emotional pressure to trick customers into sharing sensitive information or sending money. If you’re eagerly waiting for your new iPhone, how carefully will you question a message claiming that your order needs urgent attention?

Apple has introduced its first foldable iPhone, the iPhone Duo. Its US product page lists pre-orders from 16 October 2026, with availability from 23 October 2026. That creates a period between announcement and delivery when fraudulent offers could exploit excitement and uncertainty. Customers should confirm local availability through Apple’s official product information and their chosen authorised seller.

PORGiESOFT Intelligence Group’s assessment is that organisations should prepare for launch-themed variations of established scams. The scenarios below are prospective risks, based on our strategic risk assessment -

Five ways cybercriminals and fraudsters could exploit the launch

1. Fake pre-orders and priority reservations

A fraudulent advertisement could promise early access, guaranteed stock or a discounted foldable iPhone. A copied retailer website might then request a reservation deposit, full payment or personal information. The pressure comes from the possibility of missing out. Would a customer pause to verify a seller if a countdown suggests that the last available device is about to disappear?

For banks and payment providers, this could generate purchase-scam losses, disputed card payments and complaints. For impersonated retailers, the consequences include support enquiries and damage to customer trust, even when the transaction happened elsewhere.

2. Mobile upgrade and eSIM impersonation

Criminals could pose as a mobile network operator offering an exclusive upgrade or claiming that an existing SIM needs replacing before the new phone will work. A fraudulent verification process could seek account credentials, identity documents or security codes.

A Head of Fraud at a mobile operator should consider how such information might support account takeover, unauthorised account changes or attempts to transfer control of a phone number. What would stop a persuasive caller from turning a genuine upgrade enquiry into an identity-verification failure?

The risk can extend to services that depend on that number for account recovery. Operators should review how sensitive changes are verified and how customers can quickly report unexpected loss of service.

3. Fake Apple Account, payment and refund alerts

A message could claim that a pre-order has failed, a refund is available or an Apple Account has been suspended. The customer might be directed to a false sign-in page or a fake support agent.

Apple already warns about impersonation calls, fraudulent messages and fake product promotions. It also states that support does not require customers to disclose their Apple Account password or verification codes. These established tactics provide the basis for this launch-risk assessment. Read Apple’s guidance on recognising scams.

For a Chief Information Security Officer, the concern includes employees encountering these approaches through work email or on company-managed devices. Clear reporting routes and approved support channels should be part of launch preparations.

4. Delivery, trade-in and device-return scams

Once customers expect a delivery, a small redelivery charge or request to confirm an address can appear plausible. Fraudsters could also impersonate a trade-in provider and direct somebody to send an existing device to an unauthorised recipient.

For a Customer Service Manager or Operations Manager, the potential consequences include payment-data exposure, lost devices and disputes over collection or delivery. Organisations should explain where customers can verify tracking, return labels and trade-in instructions independently.

5. AI-generated demonstrations and giveaways

Fabricated product images and demonstrations, cloned voices and false endorsements could make an unofficial offer look convincing. A giveaway might collect personal information before introducing a payment supposedly needed to release the prize.

What does a realistic video establish about the identity of the seller? The practical lesson is to verify the account, organisation and payment destination, rather than treating polished content as proof of legitimacy.

How can organisations strengthen their fraud threat response to mitigate the fraud risk for iPhone Duo's release?

Prepare intelligence and communications together

  • Anticipate potential impersonation risk scenarios and monitor reported iPhone product launch-related impersonation, agree escalation criteria, prepare warnings and briefing materials that can be updated quickly. Explain genuine ordering and support processes in plain language.

Review the controls around payments and account changes

  • Assess suspicious merchant activity and customer reports alongside transaction alerts. Mobile operators should examine upgrade, SIM replacement and account-recovery pathways and implement anti-fraud checks. Keep corporate device purchases and upgrades within approved supplier and payment workflows.

Equip workforce to recognise the story behind the request

  • Frontline bank staff, customer teams, contact-centre agents and IT service desks need examples covering reservations, refunds, delivery charges and upgrade verification. Training should help employees ask useful questions and escalate concerns without making customers feel blamed.

Connect reporting with a practical response

  • Coordinate account protection, investigation and evidence preservation. Assess applicable reporting, awareness raising and customer-remediation obligations using the facts of each case, customers should be able to find help quickly, including when they have shared information but have not yet lost money.

Monitor KRI & KPI Metrics

  • Measure how quickly warnings are updated, reports reach the right team and protective action begins. A page-view count alone cannot show whether customers received help at the moment they needed it.

Turning launch fraud risk intelligence into protection

PORGiESOFT Intelligence Group helps financial institutions, technology companies and governments to risk assess and connect global fraud threat intelligence, horizon scanning activity, communication, reporting and customer support with existing organisational controls. Our quarterly fraud intelligence reports, fraud risk awareness packs and anti-fraud products can support large-scale risk mitigation initiatives and reduce fraud risk exposure. Explore PORGiESOFT’s products today to access a predictive, modern and coordinated response to emerging fraud risks.


Product image credits: © 2026 Apple Inc.