Apple Details Terminal Anti-Scam Warning in macOS - MacRumors
Skip to Content

Apple Details Terminal Anti-Scam Warning in macOS

Back in March with the release of macOS Tahoe 26.4, Apple introduced a new security popup that warns Mac users when they paste a command into the Terminal app that could be harmful. Apple has now published a support document explaining why the popup warning appears.

macOS Tahoe 26 4 Terminal Warning

Screenshot via "Mr. Macintosh"

The warning says the following when it appears:

Possible malware, Paste blocked

Your Mac has not been harmed.

Scammers often encourage pasting text into Terminal to try and harm your Mac or compromise your privacy.

These instructions are commonly offered via websites, chat agents, apps, files, or a phone call.

There is a "Paste Anyway" option for users to proceed if they wish.

In a document titled "If your Mac blocks a Terminal command paste or script," spotted by 9to5Mac, Apple explains that the alert appears if you don't regularly use Terminal and you copied the command from somewhere like a website, chat agent, or messaging or email app.

"Scammers use these channels to instruct people to paste malicious commands into Terminal to harm your Mac or compromise your privacy," says Apple. "This alert helps make sure that you aren't tricked into running a command that you didn't expect."

The document also mentions two other types of Terminal-related alerts that are more proactive. If a "Malware Detected, Paste Blocked" or "Malicious Script Blocked" alert appears, macOS has detected a command or script that contains known malware and has blocked it, according to Apple. In such cases, no "Paste Anyway" option is provided.

Apple says that if you believe the command or script was mistakenly blocked, it could be because a website that it tries to access was incorrectly reported as deceptive. In that case, users can report the error.

Popular Stories

iOS 27 Next to iPhone

Here's When iOS 27 Rolls Out Today in Every Time Zone [Update: It's Out]

Sunday September 13, 2026 3:00 am PDT by
Update 10:04 a.m.: iOS 27 is rolling out now, though it may take a bit for all users to see it, so keep checking! Apple is about to release iOS 27, which will finally deliver more advanced Siri AI capabilities as well as a variety of other refinements, improvements, and new features to iPhones. It's Apple's biggest software update of the year, and Apple announced at Wednesday's iPhone event...
iOS 27 Icon iPhone

iOS 27 Available Now With These 8 New Features

Monday September 14, 2026 9:00 am PDT by
Update — 10 a.m. Pacific Time: Apple has released iOS 27. During its iPhone 18 Pro and iPhone Duo event last week, Apple announced that iOS 27 will be released widely on Monday, September 14. iOS 27 should be available around 10 a.m. Pacific Time / 1 p.m. Eastern Time today via the Settings app, under General → Software Update. Below, we have highlighted eight new features and...
Apple iCloud Plus expansion hero

iCloud+ Now Includes Apple TV, Apple Arcade, and Curated Apple Music Stations in Over 100 Countries

Tuesday September 15, 2026 1:43 am PDT by
Apple today announced a new subscription initiative that turns paid iCloud+ subscriptions into a broader services bundle in more than 100 countries. In select countries, Apple says every paid iCloud+ plan, including the cheapest 50GB tier, now includes Apple TV and Apple Arcade "at no additional cost," while family sharing extends the storage, TV and Arcade access to up to five people....

Top Rated Comments

turbineseaplane Avatar
13 weeks ago
If you’re doing any interactions with the terminal, you need to know what you’re doing.
Score: 19 Votes (Like | Disagree)
pigeonguy Avatar
13 weeks ago
Very nice feature. Seems well thought out.
Score: 17 Votes (Like | Disagree)
jchap Avatar
13 weeks ago
Sites asking to use the Command Prompt utility on Windows to paste and execute code are getting to be an infamously popular scam. Too bad that scammers are also getting savvy to how to do the same with Mac users.

Any site that asks for command prompt or Terminal access should be avoided like the plague. I'm glad that Apple is seeing this trend and responding with verification as well.
Score: 10 Votes (Like | Disagree)
Hajj.david Avatar
13 weeks ago

Maybe it would be a good idea to just not ship the Terminal.app as part of the OS distribution. Advanced users will know how to get one, and there are many alternatives that are much better.
Why not just use ipadOS at that point
Score: 7 Votes (Like | Disagree)
13 weeks ago

Maybe it would be a good idea to just not ship the Terminal.app as part of the OS distribution. Advanced users will know how to get one, and there are many alternatives that are much better.
Saying this as someone who uses Terminal several times a week: Ship it but disable it by default. It would create an extra pain point for scammers to have to get through. 99.9% of users don’t need Terminal.
Score: 6 Votes (Like | Disagree)
13 weeks ago
An older relative of mine got taken in by a pop up that came up on her Mac from “Apple Security” with an 800 number to call. She called, and some very nice people took down her credit card details. She was able to reverse the charge, and I swept her machine for viruses and we reset all her bank passwords.

For all of us here, our radar would be up when we saw the pop-up, but for some people, everything on the computer is weird and confusing, so a janky pop up just seems par for the course. A warning like this with specific wording pertaining to the situation might well save a few people.
Score: 6 Votes (Like | Disagree)