<prompt> Human: Edit: For those asking if it was just an email, I did indeed log into her iTunes and the purchasescard on file is indeed there as well. Obviously they got into her account. The concern is it showing a credit card using our billing address but that card is not on the credit report. Thanks in advance for the helpguidance. Also, not sure if this is the right sub but figured it would be a good start for the questions I have at the bottom. Context:My wife received an email stating that her iTunes purchases are pending. Problem is, we didnt make a purchase. This led me to think that someone got into her iTunes account which isnt that big of a deal. So we did the SOP of changing her login and password, but while doing that I noticed that the purchases were completed April 19th and two more pending a few days ago they were Chinese appsgames using a MasterCard while using my wifes correct billing address. Thing is, we dont have a MasterCard. The odd thing is Ive just pulled her credit reports a few minutes ago and it doesnt show any credit inquiries nor it showing her having a MasterCard. When I called MasterCard to sort this out, all I could give them was the last 4 digits of the card number. They told me to call iTunes to get at least the first 6 digits for them to be able to do anything. Of course, when I call iTunes, they are worthless and can only give me the last 4 digits. I will be freezing her credit after finishing this post as well since weve just bought our house and will not need to run credit again for a very long time. So, my question is - do you think the issue is just local to iTunes? If so, how are they able to use our billing address if we dont have a MasterCard? Also, how much time needs to go by between the time one opens a credit card and it shows up on a report? If they were able to make a purchase on the 18th of last month and I ran the credit report today, is that enough time for it to show up?  <response>: I get spam emails like this A LOT. Check the email address. I dont know what an official Apple email address would be, but it is usually easy to tell if the email address is a fake one e.g. includes a random string of numbers or letters, its too long, its not from .apple.com, etc..Also, carefully analyze the email itself. Are there any spelling or grammar mistakes? Is the salutation a little bit...weird too formal, uses words that are not commonly used. If you click any links within the email I DO NOT RECOMMEND DOING THIS is the website address that it redirects you to an actual apple website.Scammers use emails like this to entice you to click on the link within the email and then enter your iTunes login information into a page that looks like it might be a real log-in page but is actually fake. Theyll then collect your information and log into your actual account and make the purchases with the hope that youve saved your credit card information. The fact that youve called iTunes and they actually has record of this purchase being made makes it unlikely that it is this type of scam. It could be a continuation of it though e.g. your wife got another email from apple through which she entered her login information and now the scammers have actually used that information to make purchases.Im not an expert, but in my experience I am immediately notified of even the smallest inquires into my credit e.g. a rental company doing a credit check. It should definitely have shown up on your report by now. Good luck! 