Apple Details Terminal Anti-Scam Warning in macOS - MacRumors
Skip to Content

Apple Details Terminal Anti-Scam Warning in macOS

Back in March with the release of macOS Tahoe 26.4, Apple introduced a new security popup that warns Mac users when they paste a command into the Terminal app that could be harmful. Apple has now published a support document explaining why the popup warning appears.

macOS Tahoe 26 4 Terminal Warning

Screenshot via "Mr. Macintosh"

The warning says the following when it appears:

Possible malware, Paste blocked

Your Mac has not been harmed.

Scammers often encourage pasting text into Terminal to try and harm your Mac or compromise your privacy.

These instructions are commonly offered via websites, chat agents, apps, files, or a phone call.

There is a "Paste Anyway" option for users to proceed if they wish.

In a document titled "If your Mac blocks a Terminal command paste or script," spotted by 9to5Mac, Apple explains that the alert appears if you don't regularly use Terminal and you copied the command from somewhere like a website, chat agent, or messaging or email app.

"Scammers use these channels to instruct people to paste malicious commands into Terminal to harm your Mac or compromise your privacy," says Apple. "This alert helps make sure that you aren't tricked into running a command that you didn't expect."

The document also mentions two other types of Terminal-related alerts that are more proactive. If a "Malware Detected, Paste Blocked" or "Malicious Script Blocked" alert appears, macOS has detected a command or script that contains known malware and has blocked it, according to Apple. In such cases, no "Paste Anyway" option is provided.

Apple says that if you believe the command or script was mistakenly blocked, it could be because a website that it tries to access was incorrectly reported as deceptive. In that case, users can report the error.

Popular Stories

iOS 27 Next to iPhone

Here's When iOS 27 Rolls Out Today in Every Time Zone [Update: It's Out]

Sunday September 13, 2026 3:00 am PDT by
Update 10:04 a.m.: iOS 27 is rolling out now, though it may take a bit for all users to see it, so keep checking! Apple is about to release iOS 27, which will finally deliver more advanced Siri AI capabilities as well as a variety of other refinements, improvements, and new features to iPhones. It's Apple's biggest software update of the year, and Apple announced at Wednesday's iPhone event...
deep black iphone 18 pro

Apple Says iPhone 18 Pro Max Sold in U.S. Differs in One Way

Saturday September 12, 2026 3:27 pm PDT by
As noted by Nicolas Lellouche, who writes for the French tech website Numerama, Apple has updated its tech specs pages for the iPhone 18 Pro and iPhone 18 Pro Max to clarify which models are equipped with its new C2 cellular modem and where. Apple now says the iPhone 18 Pro has a C2 modem worldwide, while the iPhone 18 Pro Max uses the chip in every country except for the U.S. According...
iphone duo

IMAX Reacts to iPhone Duo's 1:1.4 Aspect Ratio Displays

Friday September 11, 2026 4:42 am PDT by
Production theater company IMAX has responded in a mixed way to Apple's embrace of a 1:1.4 aspect ratio on the iPhone Duo's inner and outer displays. The boxier ratio happens to be very close to the classic "full-frame" IMAX 1.43:1 aspect ratio, which comes from the geometry of the company's original 15-perforation/70mm film system. In response to an X post from someone wondering if we'll see...

Top Rated Comments

turbineseaplane Avatar
13 weeks ago
If you’re doing any interactions with the terminal, you need to know what you’re doing.
Score: 19 Votes (Like | Disagree)
pigeonguy Avatar
13 weeks ago
Very nice feature. Seems well thought out.
Score: 17 Votes (Like | Disagree)
jchap Avatar
13 weeks ago
Sites asking to use the Command Prompt utility on Windows to paste and execute code are getting to be an infamously popular scam. Too bad that scammers are also getting savvy to how to do the same with Mac users.

Any site that asks for command prompt or Terminal access should be avoided like the plague. I'm glad that Apple is seeing this trend and responding with verification as well.
Score: 10 Votes (Like | Disagree)
Hajj.david Avatar
13 weeks ago

Maybe it would be a good idea to just not ship the Terminal.app as part of the OS distribution. Advanced users will know how to get one, and there are many alternatives that are much better.
Why not just use ipadOS at that point
Score: 7 Votes (Like | Disagree)
13 weeks ago

Maybe it would be a good idea to just not ship the Terminal.app as part of the OS distribution. Advanced users will know how to get one, and there are many alternatives that are much better.
Saying this as someone who uses Terminal several times a week: Ship it but disable it by default. It would create an extra pain point for scammers to have to get through. 99.9% of users don’t need Terminal.
Score: 6 Votes (Like | Disagree)
13 weeks ago
An older relative of mine got taken in by a pop up that came up on her Mac from “Apple Security” with an 800 number to call. She called, and some very nice people took down her credit card details. She was able to reverse the charge, and I swept her machine for viruses and we reset all her bank passwords.

For all of us here, our radar would be up when we saw the pop-up, but for some people, everything on the computer is weird and confusing, so a janky pop up just seems par for the course. A warning like this with specific wording pertaining to the situation might well save a few people.
Score: 6 Votes (Like | Disagree)