Apple Details Terminal Anti-Scam Warning in macOS - MacRumors
Skip to Content

Apple Details Terminal Anti-Scam Warning in macOS

Back in March with the release of macOS Tahoe 26.4, Apple introduced a new security popup that warns Mac users when they paste a command into the Terminal app that could be harmful. Apple has now published a support document explaining why the popup warning appears.

macOS Tahoe 26 4 Terminal Warning

Screenshot via "Mr. Macintosh"

The warning says the following when it appears:

Possible malware, Paste blocked

Your Mac has not been harmed.

Scammers often encourage pasting text into Terminal to try and harm your Mac or compromise your privacy.

These instructions are commonly offered via websites, chat agents, apps, files, or a phone call.

There is a "Paste Anyway" option for users to proceed if they wish.

In a document titled "If your Mac blocks a Terminal command paste or script," spotted by 9to5Mac, Apple explains that the alert appears if you don't regularly use Terminal and you copied the command from somewhere like a website, chat agent, or messaging or email app.

"Scammers use these channels to instruct people to paste malicious commands into Terminal to harm your Mac or compromise your privacy," says Apple. "This alert helps make sure that you aren't tricked into running a command that you didn't expect."

The document also mentions two other types of Terminal-related alerts that are more proactive. If a "Malware Detected, Paste Blocked" or "Malicious Script Blocked" alert appears, macOS has detected a command or script that contains known malware and has blocked it, according to Apple. In such cases, no "Paste Anyway" option is provided.

Apple says that if you believe the command or script was mistakenly blocked, it could be because a website that it tries to access was incorrectly reported as deceptive. In that case, users can report the error.

Popular Stories

Apple 2026 Back to School Graphic

Apple's 2026 Back to School Offer Just Went Live in Select Countries

Wednesday July 15, 2026 11:48 am PDT by
Apple's annual Back to School promotion is now live in select countries in Asia, including China, India, Malaysia, the Philippines, Singapore, Taiwan, Thailand, and Vietnam. The offer provides college students and educational staff with a free item with the purchase of an eligible Mac or iPad model. The exact offer varies by country, with options including a pack of four AirTags, AirPods 4,...
iphone 17 cyber

Apple Closes Unlocked iPhone Loophole for T-Mobile and Verizon Financing

Wednesday July 15, 2026 3:20 pm PDT by
Carrier-financed iPhones purchased from Apple will soon be locked to the carrier, ending a workaround customers used to purchase an unlocked iPhone on a payment plan. Until the rule change, buying an iPhone from Apple and opting for financing through Verizon or T-Mobile meant you would get an iPhone not locked to either carrier's network. That's no longer the case, and now iPhones financed...
iPhone 18 Pro Deep Red Feature

iPhone 18 Pro Launching in Two Months With These 12 New Features

Friday July 17, 2026 10:39 am PDT by
It is now mid-July, and that means the iPhone 18 Pro and iPhone 18 Pro Max are now just two months away. The devices are expected to look similar to the iPhone 17 Pro and iPhone 17 Pro Max, but there will still be many year-over-year changes, with rumored features including a smaller Dynamic Island, 5G via satellite, and more. Apple is expected to unveil the iPhone 18 Pro, iPhone 18 Pro Max, ...

Top Rated Comments

turbineseaplane Avatar
4 weeks ago
If you’re doing any interactions with the terminal, you need to know what you’re doing.
Score: 19 Votes (Like | Disagree)
pigeonguy Avatar
4 weeks ago
Very nice feature. Seems well thought out.
Score: 17 Votes (Like | Disagree)
jchap Avatar
4 weeks ago
Sites asking to use the Command Prompt utility on Windows to paste and execute code are getting to be an infamously popular scam. Too bad that scammers are also getting savvy to how to do the same with Mac users.

Any site that asks for command prompt or Terminal access should be avoided like the plague. I'm glad that Apple is seeing this trend and responding with verification as well.
Score: 10 Votes (Like | Disagree)
Hajj.david Avatar
4 weeks ago

Maybe it would be a good idea to just not ship the Terminal.app as part of the OS distribution. Advanced users will know how to get one, and there are many alternatives that are much better.
Why not just use ipadOS at that point
Score: 7 Votes (Like | Disagree)
4 weeks ago

Maybe it would be a good idea to just not ship the Terminal.app as part of the OS distribution. Advanced users will know how to get one, and there are many alternatives that are much better.
Saying this as someone who uses Terminal several times a week: Ship it but disable it by default. It would create an extra pain point for scammers to have to get through. 99.9% of users don’t need Terminal.
Score: 6 Votes (Like | Disagree)
4 weeks ago
An older relative of mine got taken in by a pop up that came up on her Mac from “Apple Security” with an 800 number to call. She called, and some very nice people took down her credit card details. She was able to reverse the charge, and I swept her machine for viruses and we reset all her bank passwords.

For all of us here, our radar would be up when we saw the pop-up, but for some people, everything on the computer is weird and confusing, so a janky pop up just seems par for the course. A warning like this with specific wording pertaining to the situation might well save a few people.
Score: 6 Votes (Like | Disagree)