Why this happens
Apple Intelligence reads the words in a message and writes a short summary or pulls out what looks like the important part. It is judging the text, not the sender. A scam email that says “Your Apple Account has been locked, verify within 24 hours” is exactly the kind of message a summarizer will flag as urgent, because the writing is urgent.
Nothing in that pipeline checks whether the domain is apple.com or apple-id-secure-login.top. The summary sits above the message in a clean, system font, and that visual trust rubs off on the content underneath it.
So the fix is not to make Apple’s classifier smarter. It is to stop the summary from doing your judging for you, and to build a two-second habit that catches the sender before the words do.
Fixes to try
1. Check the actual sender address, not the display name
This is the one that catches most of these, and it takes a few seconds.
- Open the message and tap the sender’s name at the top.
- The full address appears. Read the part after the
@. - Apple writes from
apple.com,email.apple.comorid.apple.com. Anything likeapple.com.support-billing.infois not Apple, no matter what the display name says. - Tap the name again to collapse it and look at the reply-to if it is shown. A different reply-to domain is a strong warning sign.
Do this before you read the body. The summary is generated from the body; the address is not.
2. Turn off notification summaries
Summaries on the Lock Screen are the worst place for this, because you see the AI’s framing with none of the context.
- Open Settings.
- Go to Settings > Notifications > Summarize Previews.
- Turn the switch off, or leave it on and turn off just Mail in the list below.
You will get normal previews again, which show the sender and the first line of the real message.
3. Turn off message preview summaries inside Mail
- Open Settings and go to Settings > Apps > Mail.
- Scroll to the message list options.
- If your version of iOS shows a Summarize Message Previews switch, turn it off.
If you do not see that switch, your iOS version does not expose it separately and step 5 is the way to remove summaries entirely.
4. Report it as junk instead of deleting it
Deleting a scam email teaches Mail nothing. Reporting it does.
- Open the message.
- Tap the toolbar button for moving or flagging the message and choose Mark as Junk (on some versions it appears as Move to Junk).
- Confirm if asked.
Mail uses that signal to filter similar mail later. It is not instant and it is not perfect, but it is the only feedback channel you have from the phone.
Then forward the message to reportphishing@apple.com. Apple asks people to forward suspected phishing that claims to be from Apple. Forward it as an attachment if your Mail app offers that option, so the original headers survive.
5. Turn Apple Intelligence off for Mail, or entirely
If you would rather not have generated text in your inbox at all, this is the switch.
- Open Settings > Apple Intelligence & Siri.
- Turn off Apple Intelligence.
- Confirm when prompted.
This removes summaries and the writing tools across the system, not just in Mail. It is a big switch for a small problem, so try steps 2 and 3 first. If you only want it gone from the Lock Screen, step 2 is enough.
6. Stop remote images from loading
Tracking pixels tell a scammer that your address is live and that you open their mail.
- Go to Settings > Apps > Mail.
- Open Privacy Protection.
- Turn on Mail Privacy Protection and enable Block All Remote Content.
Images in legitimate newsletters will need a tap to load. That is the trade.
7. Block the sender and stop engaging
- Open the message and tap the sender’s name.
- Choose Block Contact.
- Do not reply, do not tap unsubscribe, and do not open any link in the message.
If the email claims your Apple Account is locked, close Mail and open apple.com in Safari yourself. Sign in from there. If there is a real problem, Apple will show it on your account page. If there is not, you have lost nothing.
Apple does not ask for your Apple Account password, a verification code, or gift card numbers by email. Any message that does is a scam, however clean the summary above it looks.
If nothing works
You cannot retrain Apple’s classifier from your phone, and no setting will make a convincing phishing email look unconvincing. What you can do is reduce the surfaces where it gets to speak in Apple’s voice: notification summaries, message preview summaries, and remote content.
If you have already tapped a link and entered your password, change your Apple Account password immediately from apple.com, sign out of other devices you do not recognise, and turn on two-factor authentication if it is off. Contact Apple Support the same day rather than waiting to see what happens.
If a scam message appears to come from a real contact’s account, tell that person directly through another channel. Their account is likely compromised.
For repeated, targeted phishing, book a session at an Apple Store Genius Bar or call Apple Support. They cannot block a sender for you, but they can check whether a profile, configuration profile or mail rule on the device is redirecting or filtering your mail in a way you did not set up. Back up the iPhone before anyone suggests a restore, and treat a full restore as a last resort, because it will not change how Apple summarizes email.
Finally, if the behaviour changes after an iOS update, wait for the next point release before doing anything drastic. Summary behaviour has been adjusted between releases before.
FAQ
Does the highlight mean Apple has verified the email?
No. The summary and any highlighting are generated from the text of the message. There is no check that the sender is who they claim to be, and no badge that says an email is genuine. A clean-looking summary only means the email was written clearly.
Should I tap “Unsubscribe” in a scam email?
No. On a legitimate newsletter it is fine. On a scam it confirms your address is active and read by a person. Use Mark as Junk and Block Contact instead, and let Mail filter it.
Why does the scam still land in my inbox after I marked it as junk?
Marking as junk trains a filter, it does not create a hard block on a domain. Scammers rotate sending addresses constantly, so the next message may arrive from a new one. Blocking the sender plus reporting to reportphishing@apple.com is the most you can do from the phone; a server-side rule in iCloud Mail (on iCloud.com, under Mail settings) can catch repeated patterns if you use an iCloud address.
