I got a text in the middle of the night from an unknown number that said “Your AppIe lD is being used to sign in to a new device near Johor, Malaysia. [ #(random code I cut out) ]”. I’m based in the US and know no one in Malaysia. I did not follow that link. I changed my password immediately after seeing the message. Has anyone else seen this? (If Apple support wants me to contact, I will send screen shot if they tell me where to send it to.)
[Link Edited by Moderator]
You could post the screenshot here. Except for the distance involved, it sounds like what you experienced is a location error.
See See the following from Two-factor authentication for Apple ID https://support.apple.com/en-us/HT204915.
When you sign in on a new device, you’ll get a notification on your other trusted devices that includes a map showing the approximate location of the new device. This is an approximate location based on the IP address the device is currently using, rather than the exact location of the device. The location shown might reflect the network you're connected to, and not your physical location.
If you know you’re the person trying to sign in but you don’t recognize the location shown, you can still tap Allow and continue signing in. However, if you ever see a notification that your Apple ID is being used to sign in on a new device and you're not the one signing in, tap Don’t Allow to block the sign in attempt.
At this point, you can Check your Apple ID device list (https://support.apple.com/en-us/HT205064) and remove any device that shouldn't be signed in using the steps in the link.
If there are none that shouldn’t be signed in, then you should not have a problem at this point. But, if an unauthorized device is signed in, Change your Apple ID password https://support.apple.com/en-us/HT201355 (again at this point).
Here is What to do after you change your Apple ID or password https://support.apple.com/en-us/HT204071. Do this even if you don't change it again.
Multiple people have posted about receiving a similar scam text. As long as you didn't click the link and enter any data, you should be okay.
Phishing text?
