Someone registered an Apple ID with my email

On June 3 I got this email (Google translated from Danish):


Dear Xxxx Yyyy
Your Apple ID (XxxxYyyy@gmail.com) has been used to log into iCloud on an iPhone 13.
Date and time: 3 June 2024 at 07:42 UTC
If the information above looks familiar, please ignore this message.
If you recently signed in with your Apple ID on an iPhone 13 and you believe someone has accessed your account without your permission, go to Apple ID (https://appleid.apple.com ) and change your password as soon as possible.
With best regards
Apple support


I do not have an Apple ID connected to that email. The email address used is mine.


Later the same day I got this:


Dear Xxxx Yyyy
Your Apple ID (XxxxYyyy@gmail.com) has been used to log into iCloud on an iPad Pro 11-inch (4th generation).
Date and time: 3 June 2024 at 17:02 UTC
If the information above looks familiar, please ignore this message.
If you recently signed in with your Apple ID on an iPad Pro 11-inch (4th generation) and you believe someone has accessed your account without your permission, go to Apple ID (https: //appleid.apple.com) and change your password as soon as possible.
With best regards
Apple support


I didn't act on this at all. Yesterday, June 6, I got this.


Welcome to iCloud

Your Apple ID is XxxxYyyy@gmail.com.

iCloud gives you secure storage for your photos, files, contacts and personal information across all your devices. And you get 5 GB of free storage.


Should I do anything about this?


How can someone register an Apple ID with an email they don't have access to? Shouldn't Apples system prevent this by verifying the email before starting sending out emails to the email address?

Posted on Jun 7, 2024 11:33 AM

Reply
Question marked as Top-ranking reply

Posted on Jun 10, 2024 4:29 AM

If you think those are real messages from Apple and have not already registered with Apple for an Apple ID using that address then check the security of your email account. Anybody can set up an ID and Apple simply checks if they can also receive email there. The weakness in security is with you email account, nothing at Apple's end.


However, regardless of Google Translate being involved (you should have mentioned that before), I don't think Apple says anything like "With best regards" in any language in its messages. The only puzzle I see is the link you provide to appleid.apple.com does go to an Apple page. Typically phishing shows a valid link as you read it but in reality it goes to something similar to an Apple page. However, I am wondering if that is because you washed the original message through Google Translate and Apple's editing window is simply rendering it as a link.


So, this is either yet another one of the very, very, very common phishing messages that you should simply ignore, or this is an issue you have with your email provider and again has nothing to do with Apple other than you can report email phishing attempts to them.


Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support

Forward email attempts as an attachment (in MacOS Mail use the paperclip icon) to: reportphishing@apple.com then delete it.


If you are truly convinced your Apple Account has been compromised then If you think your Apple ID has been compromised - Apple Support


Similar questions

17 replies
Question marked as Top-ranking reply

Jun 10, 2024 4:29 AM in response to HenkeL

If you think those are real messages from Apple and have not already registered with Apple for an Apple ID using that address then check the security of your email account. Anybody can set up an ID and Apple simply checks if they can also receive email there. The weakness in security is with you email account, nothing at Apple's end.


However, regardless of Google Translate being involved (you should have mentioned that before), I don't think Apple says anything like "With best regards" in any language in its messages. The only puzzle I see is the link you provide to appleid.apple.com does go to an Apple page. Typically phishing shows a valid link as you read it but in reality it goes to something similar to an Apple page. However, I am wondering if that is because you washed the original message through Google Translate and Apple's editing window is simply rendering it as a link.


So, this is either yet another one of the very, very, very common phishing messages that you should simply ignore, or this is an issue you have with your email provider and again has nothing to do with Apple other than you can report email phishing attempts to them.


Recognize and avoid phishing messages, phony support calls, and other scams - Apple Support

Forward email attempts as an attachment (in MacOS Mail use the paperclip icon) to: reportphishing@apple.com then delete it.


If you are truly convinced your Apple Account has been compromised then If you think your Apple ID has been compromised - Apple Support


Jun 9, 2024 5:25 PM in response to Kurt Lang

Kurt Lang wrote:

It's close, but it's fake. Real Apple notices do not mention what type of device logged in.

I tested it just now to confirm by logging into icloud.com from my iPhone 14 Pro, which I have never done before. Naturally, Apple's system informed me. Such emails always use your real name and email address for the account you logged into, which I x-d out.

A real message also does not say, With best regards.

-----------------------------------

Dear xxxx xxxxxxxxx,

Your Apple ID (xxxxxxx@xxxx.com) was used to sign in to iCloud via a web browser.

Date and Time: June 7, 2024, 12:20 PM PDT

If the information above looks familiar, you can ignore this message.

If you have not signed in to iCloud recently and believe someone may have accessed your account, go to Apple ID (https://appleid.apple.com) and change your password as soon as possible.

Apple Support

-----------------------------------

I then logged in to icloud.com again from my Mac and got an identical message. With the main point being that all it said was via a web browser. Not from what type of Mac I have.

You can double check by going into the settings and tapping/clicking on your name. The only devices listed should be ones you own. Anything else is someone who shouldn't have access to your account.


Please note that the text I posted was Google translated from Danish.


I still don't believe this is fake. Let's check the headers of the email. Seems legit, right?




Jun 7, 2024 12:33 PM in response to HenkeL

It's close, but it's fake. Real Apple notices do not mention what type of device logged in.


I tested it just now to confirm by logging into icloud.com from my iPhone 14 Pro, which I have never done before. Naturally, Apple's system informed me. Such emails always use your real name and email address for the account you logged into, which I x-d out.


A real message also does not say, With best regards.


-----------------------------------


Dear xxxx xxxxxxxxx,


Your Apple ID (xxxxxxx@xxxx.com) was used to sign in to iCloud via a web browser.


Date and Time: June 7, 2024, 12:20 PM PDT


If the information above looks familiar, you can ignore this message.


If you have not signed in to iCloud recently and believe someone may have accessed your account, go to Apple ID (https://appleid.apple.com) and change your password as soon as possible.


Apple Support


-----------------------------------


I then logged in to icloud.com again from my Mac and got an identical message. With the main point being that all it said was via a web browser. Not from what type of Mac I have.


You can double check by going into the settings and tapping/clicking on your name. The only devices listed should be ones you own. Anything else is someone who shouldn't have access to your account.

Jun 10, 2024 3:10 PM in response to HenkeL

>No, this email is not used for my own Apple ID, and not for anyone elses Apple ID either.<


Then by your own admission/statement, if it’s not anyone’s email associated with an Apple ID, the email is a scam.


No one here will be able to convince you otherwise. Please contact official Apple Support using the information in the Apple Support article I linked below


Contact Apple for support and service - Apple Support


Jun 10, 2024 2:12 PM in response to HenkeL

Then you're on your own.


I went out of my way to post a real message and explained the differences between it and whatever that was you got. In particular, Apple never, never, never, EVER, includes the phrase, With best regards, with their login notices.


But since you seem to be determined to get scammed, then by all means, go right ahead.

Jun 10, 2024 3:38 PM in response to Kurt Lang

Kurt Lang wrote:
I went out of my way to post a real message and explained the differences between it and whatever that was you got. In particular, Apple never, never, never, EVER, includes the phrase, With best regards, with their login notices.


How can you be so sure about how Apples *danish* login notices are phrased?


Let's take a look at a *swedish* login notice. This one is 100% legit, and was sent to me recently when my kid logged in for the first time on an old iPhone 7.


https://i.postimg.cc/XNxGHzjm/temp-Image-SWDXb-A.avif


In the bottom it says "Vänliga hälsningar". That is Swedish for "Best regards".


In the danish email, it says "Med venlig hilsen". That is Danish for "With best regards".


So, I don't think you should be so categorical and say that Apple "never, never, never, EVER, includes the phrase, With best regards, with their login notices.". You are obviously wrong about the matter.


But since you seem to be determined to get scammed, then by all means, go right ahead.


No need to worry, no one is being scammed here. I'm just trying to understand why these three emails have been sent to me. The natural thing would of course have been to dismiss these as scams, but to do that I need to have evidence to support this. There is no such evidence yet.

Jun 10, 2024 2:41 PM in response to Limnos

Limnos wrote:
If you think those are real messages from Apple and have not already registered with Apple for an Apple ID using that address then check the security of your email account.


I have. There is no suspicious activity. I also use 2FA so I can't see the weakness you mention.


However, regardless of Google Translate being involved (you should have mentioned that before)


I did mention that the message I posted was Google Translated from Danish, in my original post.


However, I am wondering if that is because you washed the original message through Google Translate and Apple's editing window is simply rendering it as a link.


Nope, the link is legit all the way from the email source code:


Hvis du for nylig har logget ind med dit Appl=
e=E2=80=91id p=C3=A5 en=C2=A0iPhone=C2=A013, og du mener, at nogen har f=C3=
=A5et adgang till din konto uden din tilladelse, skal du g=C3=A5 til Apple=
=E2=80=91id (<a href=3D"https://appleid.apple.com/dk" style=3D"color: #333;=
 text-decoration: none;"><nobr>https://appleid.apple.com</nobr></a>) og =C3=
=A6ndre din adgangskode hurtigst muligt.</td>


So, this is either yet another one of the very, very, very common phishing messages that you should simply ignore, or this is an issue you have with your email provider and again has nothing to do with Apple other than you can report email phishing attempts to them.


Clearly not a phishing attempt and clearly not an issue with my email provider. I think all the facts in this threads shows this. My original questions still stands unanswered: "How can someone register an Apple ID with an email they don't have access to? Shouldn't Apples system prevent this by verifying the email before starting sending out emails to the email address? "


If you are truly convinced your Apple Account has been compromised then...


No, this email is not used for my own Apple ID, and not for anyone elses Apple ID either.




Jun 10, 2024 4:11 PM in response to HenkeL

No one can confirm anything. No one here works for Apple. Everyone commenting is another Apple user relating our experiences.


You don’t seem to want contact Apple and resolve the issue? Why? Are you a scammer trying to add legitimacy to your scam emails? I don’t know. Only you can resolve the issue with a simple phone call. But now you’ve got me wondering what your motives are? Why?

Jun 12, 2024 2:22 PM in response to Jeff Donald

You don’t seem to want contact Apple and resolve the issue?

How have I indicated that I do not want to contact Apple? In any case, it is completely wrong. I wanted to seek answers on my own first, hoping to resolve the matter that way and not waste Apple's resources.

Why? Are you a scammer trying to add legitimacy to your scam emails?

Wow. No, I'm just an ordinary user with very long experience with Apple products and ecosystem who likes to seek answers on his own and with the help of other like-minded people.

But now you’ve got me wondering what your motives are? Why?

This is a question you have to answer on your own. I have only tried to be very clear and base my comments on facts rather than opinion.

Jun 12, 2024 4:38 PM in response to HenkeL

Now you're just being duplicitous.

How have I indicated that I do not want to contact Apple? In any case, it is completely wrong. I wanted to seek answers on my own first, hoping to resolve the matter that way and not waste Apple's resources.

You say it's wrong you don't want to contact Apple. Then immediately follow that with not wanting to waste Apple's resources. And if you think being in this forum counts as contacting Apple, you are very wrong. While this site is maintained and operated by Apple, everyone you're talking to is another end user such as yourself.


You can continue talking to the wall if you want, I won't be wasting any more of my time in this topic.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Someone registered an Apple ID with my email

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.