You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

User profile for user: adstastic
adstastic Author
User level: Level 1
15 points

Phishing email in sent folder - as if I sent it!

One of my non-iCloud email addresses received a phishing email about an iPhone XS offer that seemed spoofed to come from my iCloud email address.


I’ve experienced this before, and know that little can be done about it, but that it’s mostly harmless as the spoofer doesn’t have access to my emails.


I was shocked to check my iCloud Sent Messages folder and find the same email there, as it would be if it was actually sent from that address.


I immediately changed my Apple ID password, and am quite concerned that someone got access to my emails.


How is this possible? What more can I do to protect myself? Has anyone else experienced this?

Posted on Aug 26, 2019 11:53 PM

Reply
Question marked as Top-ranking reply
User profile for user: adstastic
adstastic Author
User level: Level 1
15 points

Posted on Aug 27, 2019 9:13 AM

Try looking at the Headers of the emails being sent and received.

iCloud: https://support.apple.com/kb/PH2640?locale=en_US

Gmail: https://support.google.com/mail/answer/29436?hl=en


See if you can find out which client (iOS, macOS) sent the email, and any other useful information such as the originating IP address.


I hope this thread gets some attention from Apple representatives soon!

View in context

Similar questions

4 replies
Question marked as Top-ranking reply
User profile for user: adstastic
adstastic Author
User level: Level 1
15 points

Aug 27, 2019 9:13 AM in response to moore123456

Try looking at the Headers of the emails being sent and received.

iCloud: https://support.apple.com/kb/PH2640?locale=en_US

Gmail: https://support.google.com/mail/answer/29436?hl=en


See if you can find out which client (iOS, macOS) sent the email, and any other useful information such as the originating IP address.


I hope this thread gets some attention from Apple representatives soon!

Reply
User profile for user: adstastic
adstastic Author
User level: Level 1
15 points

Aug 27, 2019 8:34 AM in response to moore123456

No further emails (that I know of) but the recipient Google account's calendar was also phished. This has been reported by others on Google forums (see here: hhttps://support.google.com/calendar/thread/12665854?hl=en)

I'm not sure these are related, as the Google calendar phishing seems just like standard phishing, whilst the phishing email appearing to be sent by me seems much more serious.

I also changed my Apple ID password as soon as I discovered this.

Reply

Phishing email in sent folder - as if I sent it!

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.
Learn more Sign up