Apple blocked over $11 billion in fraudulent App Store transactions over the last six years, including more than $2.2 billion in 2025 alone. The company rejected millions of app submissions and accounts while deploying machine learning and human review to combat fraud at scale.
Over the past six years, Apple has prevented more than $11 billion worth of fraudulent transactions on its App Store. The company reported blocking over $2.2 billion in potentially fraudulent App Store transactions during 2025 by itself.
In a press release issued on Wednesday, the tech giant noted that it turned away more than 2 million questionable app submissions in the past year. It also stopped more than 1.1 billion attempts to create fraudulent accounts, ended 193,000 developer accounts linked to fraud, and declined over 138,000 developer enrollment requests. In addition, Apple deactivated 40.4 million customer accounts believed to be involved in fraud or abuse.
Last year Apple stopped more than 5.4 million stolen credit cards from being used and banned nearly 2 million user accounts.
During 2025, the firm prevented more than 5.4 million stolen credit cards from being used for purchases and shut down nearly 2 million user accounts engaged in suspicious behavior. These numbers show a clear rise compared with earlier periods. For instance, in 2024 Apple had blocked over $2 billion in potentially fraudulent transactions, identified nearly 4.7 million stolen credit cards, and stopped over 1.6 million accounts from completing further purchases.
"Apple utilizes both human review and advanced technology to identify and stop the use of stolen financial information," the tech giant said.
"By leveraging machine learning, Apple teams build powerful models to accelerate fraud detection and quickly evaluate new deceptive tactics. These technologies also provide a comprehensive view of fraudulent activity across customer accounts, devices, and payment methods."
Nearly 59,000 apps were removed from the App Store last year for bait-and-switch tactics, almost triple the 17,000 removed throughout 2024.
Apple's App Review team examined over 9.1 million app submissions throughout 2025, an increase from 7.7 million the year before. Of those reviewed, more than 443,000 were rejected due to privacy violations, over 371,000 for copying other apps or using misleading descriptions, and more than 22,000 for including hidden or undocumented capabilities.
Nearly 59,000 apps were pulled from the App Store last year because of bait-and-switch practices, nearly triple the 17,000 removed in all of 2024. On the review manipulation side, the company handled more than 1.3 billion ratings and reviews in 2025 while blocking nearly 195 million that were fraudulent.
Apple kept nearly 7,800 misleading apps out of search results, barred 11,500 from appearing in App Store charts, and identified and removed 28,000 unauthorized apps from pirate storefronts. According to Apple, the App Store currently draws over 850 million weekly visitors across 175 storefronts worldwide. The company urges customers who notice suspicious activity in apps obtained from the App Store to report it right away at reportaproblem.apple.com.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Microsoft has disclosed CVE-2026-83947, a CVSS 7.7 HIGH spoofing vulnerability in Azure Event Grid caused by missing authorization. Microsoft says it has already fully mitigated the cloud-service flaw and customers have nothing to do.
A critical vulnerability CVE-2026-77900 affects Microsoft Azure App Service for Linux with a CVSS score of 9.8. The flaw allows an unauthenticated attacker to execute code over the network. Microsoft says it has already fully mitigated the flaw; no customer action is needed.
Microsoft Dataverse is affected by critical vulnerability CVE-2026-88131, which allows remote code execution. The flaw scores 9.8 on CVSS; Microsoft says it has already fully mitigated it and customers have nothing to patch.
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 contain critical authentication bypass flaw CVE-2026-16823. The NVD rates it 9.1 and warns of remote exploitation without credentials.
Bloomberg reports Apple will launch its first touchscreen MacBook Pros, a new iPad mini, and other models on or around October 27 with an online presentation and in-person press event. The products target creative professionals and include OLED displays across multiple lines.
