You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

I RECEIVED A POSSIBLE PHISHING TEXT AT 2:55am (Central Time)

On my iPhone 14, I received a text stating, now I can reset my Apple ID password at apple.com/.recover

Be sure to do this before 11/07.



Now with that being said, I understand that “apple recovery” is very much legit. However, the thing that makes me question this particular text is the way the “link” to click on appeared. It was not in bold however, so disregard that from my topic all together, in fact it was blue. Anyways, what I noticed was the “/.recover” and to my knowledge I don’t remember seeing it being texted to me with a period after the dash and in front of the word recover. So, because I have had previous androids and iPhones hacked by my ex over the last 6yrs and 15 phones later (which I was granted a lifetime protection order against him in 2019), I decided to type in safari that exact “link.” It then came back with page not found (from apple). I clearly didn’t click the link and deleted the text asap. So am I most likely correct in thinking this is probably him/someone either trying to get into my Apple ID or my phone (which is all the same either way)?

iPhone 14, iOS 17

Posted on Oct 31, 2023 9:28 AM

Reply
Question marked as Top-ranking reply

Posted on Oct 31, 2023 10:01 AM

humble_j wrote:

So am I most likely correct in thinking this is probably him/someone either trying to get into my Apple ID or my phone (which is all the same either way)?

Yes, it was an attempt to get your Apple ID credentials.

Similar questions

5 replies

Nov 1, 2023 9:40 AM in response to humble_j

humble_j wrote:

@ IdrisSeabright

So I guess what I should’ve asked is do you think someone was just trying to get into my Apple ID and it truly was from Apple?

No, I do not believe it was from Apple.


Or was it a text that they could possibly have gained full remote access to my phone? Or hack it to then be able to view only certain things like texts, emails, call log, photos and hear audio of calls/VM? And that’s if I would’ve clicked on the link (apple.com/.recover).

Had you clicked on the link and entered your Apple ID and password, the scammers would have had access to your iCloud account. They would not have had direct access to your phone. However, if they changed your password (the first thing they would do), it would cause you no end of complications. This is why you should enabled Two-Factor Authentication on your account.


Two-factor authentication for Apple ID - Apple Support

And keep in mind that I first typed that link in Safari and it came back with “this page can not be found.” Or who’s to know either of those things since I didn’t click on the link? And I should just go with the fact that yes my Apple ID was trying to be compromised.

The scammers were not targeting you specifically. They send these texts out by the tens of thousands hoping a few people will be taken in. All you need to do is delete the text.

Nov 1, 2023 9:21 AM in response to IdrisSeabright

@ IdrisSeabright


Thank you, for your help! So, I read up more on phishing texts. I didn’t realize that they are usually scammers that portray themselves as a company. Next they then provide you with a link to click on, which then asks you for your financial information, in the hopes that you will obviously provide. However, and I may be reading too deep into the whole thing for the simple fact of what I have had to deal with. So I guess what I should’ve asked is do you think someone was just trying to get into my Apple ID and it truly was from Apple? Or was it a text that they could possibly have gained full remote access to my phone? Or hack it to then be able to view only certain things like texts, emails, call log, photos and hear audio of calls/VM? And that’s if I would’ve clicked on the link (apple.com/.recover). And keep in mind that I first typed that link in Safari and it came back with “this page can not be found.” Or who’s to know either of those things since I didn’t click on the link? And I should just go with the fact that yes my Apple ID was trying to be compromised. I’m sorry, I ask a ton of questions so I can fully understand each detail of it all. Thank you very much, in advance.

I RECEIVED A POSSIBLE PHISHING TEXT AT 2:55am (Central Time)

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.