MacBook Pro stolen - Apple ID hacked via phishing

Read this document if you think your Apple ID has been compromised. --> If you think your Apple ID has been compromised - Apple Support

For iOS 15 or earlier, if you want to see if anyone else has access to your device or accounts, click here --> See who has access to your iPhone or iPad - Apple Support

For iOS 16 or later see how Safety Check on iPhone works to keep you safe. How Safety Check on iPhone works to keep you safe - Apple Support

Use the information in this document to check your Apple ID device list to find where you're signed in --> Check your Apple ID device list to find where you're signed in - Apple Support

Related materials:

Personal Safety User Guide

Personal Safety User Guide - Apple Support

> open the Table of Contents and review the articles

A document with general information about security and your Apple ID --> Security and your Apple ID - Apple Support

Contact Apple for help with Apple ID account security. This page provides country-specific Apple Support contact information ➞ Contact Apple for support and service - Apple Support

I have never had this happen to me so I don't know the details.

I would never click on a link even if I was fairly sure it was from Apple. I would instead go to an Apple web page and try to find a link there.

If you know how to look at mail headers (normally hidden from you but present in every email, tracking is route), look for IPs starting with "17".

About identifying legitimate emails from the App Store and iTunes Store --> Identify legitimate emails from the App Store or iTunes Store - Apple Support

Recognize and avoid phishing messages, phony support calls, and other scams - Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support

- Apple e-mails address you by your real name, not something like "Dear Customer", "Dear Client", or an e-mail address*.

- Apple e-mails originate from @apple.com or @itunes.com but it is possible to spoof a sender address. "Apple email related to your Apple ID account always comes from appleid@id.apple.com." - About your Apple ID email addresses - Apple Support

- Set your email to display Show Headers or Show Original to view Received From. Apple emails originate from IP addresses starting with "17.".

- Mouse-over links to see if they direct to real Apple web sites. Do not click on them as this just tells the spammer they have a working e-mail address in their database. If you are unsure, contact Apple using a link from the Apple.com web site, not one in an email.

- Phishing emails may include account suspension or similar threats in order to panic you into clicking on a link without thinking. They may report a fake purchase in order to infuriate you into rashly clicking on a false link to report a problem. March 2018 post by Niel https://discussions.apple.com/message/33129140#message33129140 - "Emails saying that your Apple ID has been locked or disabled are always phishing. If one actually gets disabled, its owner will be told when they try logging into it instead of through email."

- Apple will not ask for personal information in an e-mail and never for a social security number.

- Scams may have bad grammar or spelling mistakes.

- Apple will not phone you unless it is in response to a request from you to have them call you.

* Exception: https://discussions.apple.com/thread/8483395?answerId=33701414022#33701414022

Forward email attempts as an attachment (in MacOS Mail use the paperclip icon) to: reportphishing@apple.com then delete it.