Possible scam email

this email - appleaccount@insiderapple.apple.com is a scam , a phishing attempt. Do not click on any links. I just verified with the IOS apple support app team. Verify information from legitimate sources - download Apple support on IOS and ask them. They will tell you the same, not some random dude... Only forward the email to reportphishing@apple.com them delete it permanently!

The email domain is legitimate. I still possess emails from Apple using @insideapple.apple.com as far back as 2006.

Additionally, I answered a question expressing similar concerns as you have here in this conversation.

Why is it that Apple has not responded to this and other emails and others regarding whether or not this is a scam?

Why have you, Apple not responded?

I got the e-mail too. It was delivered to a test account I had apparently setup in 2015 and only ever used with Apple. I think I was testing iCloud aliases or something.

So congratulations on thinking that this is a scam. It does have almost all of the classic phishing e-mail attributes.

Alas, it is a genuine Apple e-mail.

It's probably legitimate, but to be sure (since any email address can be spoofed), do not click on any links contained in that email nor call any phone numbers it may contain. If you want to take any recommended steps that require any logins, enter in the website address for your Apple Account directly into your web browser.

Regards.

"Why have you, Apple not responded?"

Because this is a user to user forum, Apple isn't here.

Contact Apple for support & service.

Contact Apple for support and service - Apple Support

or call

Canada/United States

1-800-275-2273

For other locations, look here -

Contact Apple for support and service – Apple Support (AU)

Can we get an official statement from Apple on appleaccount@insiderapple.apple.com emails?

Not sure if this helps but I received this same email this morning. In the source email I found:



ARC-Authentication-Results: i=1; mx.google.com;

       dkim=pass header.i=@insideapple.apple.com header.s=insideapple0517 header.b=wjtEVcbx;

       spf=pass (google.com: domain of appleaccount_i_bounces@insideapple.apple.com designates 17.32.227.100 as permitted sender) smtp.mailfrom=appleaccount_i_bounces@insideapple.apple.com;

Whois of :17.32.227.100

NetRange:       17.0.0.0 - 17.255.255.255

CIDR:           17.0.0.0/8

NetName:        APPLE-WWNET

NetHandle:      NET-17-0-0-0-1

Parent:          ()

NetType:        Direct Allocation

OriginAS:       

Organization:   Apple Inc. (APPLEC-1-Z)

RegDate:        1990-04-16

Updated:        2023-11-15

Comment:        Geofeed https://ip-geolocation.apple.com

Ref:            https://rdap.arin.net/registry/ip/17.0.0.0

All that being said I'd still go directly to my account rather than click on the link provided.

My 2 cents

I am wondering if this is a scam. I have done a little digging, see below, although I have not contacted Apple to ask if the email is a scam. I don't think it's worth the time honestly, because I will never click links from an email anyway; I'll only take actions by logging in directly.

I have only ever ONCE fallen prey to a phishing email, and it was an Apple imitator, in 2018. It looked so legit, and after I clicked on the links and logged in (thereby providing my credentials to the bad guys), I realized my error (although I can't remember now how I figured it out).

The things about this email that seem suspicious to me (and FWIW, I am a designer who has been observing Apple design trends for decades, which may not be worth much anymore, as they seem to change things constantly now!):

• The reply-to as 'Apple Account' instead of just Apple, although this may be to differentiate the Apple retail from account services; when I log in to iCloud, there is a message that says 'AppleID is now 'Apple Account', so it may be legit.

• In the message body: the Apple logo with no space between it and the word 'Apple'. The space between logo and logotype feels random, and nothing Apple does design-wise (or any designer for that matter) is random (although perhaps less so these days)

• The typeface for the bold subheadings is HUGE and not really in Apple vein (although when I go to icloud the typography on the login screen seems REALLY HUGE THERE TOO, which feels more Microsoft-y and not what Apple would normally do; compare to the typography on the account dashboard once you log in; perhaps styles are changing, but if so they are inconsistently applied across touchpoints)

• The 'subscribe' link in the footer. I'm already 'subscribed' right, otherwise why would I be receiving the email to begin with?

If you log in to iCloud and go to your Apple Account settings you can see options to set a legacy contact, and account recovery contact. So if this is a legit email, they are actually coming off as an Apple impersonator, which indicates they are having an identity crisis design-wise, otherwise why would so many be suspicious of it? Hope that helps someone.

FWIW also, I have tried to post this reply half a dozen times and I have had to re-login three times, and tried to upload screenshots six times with resulting errors. This used to be a typical Microsoft-type experience, but now it's just as frustrating to use.

I received an e-mail like this, but have not clicked on any of the links in it.

One of the the sections said "Keep your contact information up to date" and asked you to "confirm your primary email address", with a link to "Verify now". It occurs to me that this is exactly. the sort of request and link that a scam e-mail might contain.

I got similar email very early this morning at my work email. I’m a federal employee, so I asked my network security team if it’s safe. They quickly confirmed it was a phishing attempt & had me delete it fully.

I got an email today from iCloud telling me my Apple ID has been temporarily disabled and unless I click on the enclosed link within 48 hours it will be permanently disabled I double clicked on the email signature and the address was e*****@palmetto.coop. Needless to say I did not click on that!

[Edited by Moderator]

persian puss wrote:

I'm glad I am not the only one who noticed the r in the aforementioned email address.

You are not, but that was always irrelevant. Whether "insideapple" or "insiderapple", the domain is still on "apple.com" which Apple owns.

This e-mail was legitimate. It's simply unfortunate that so many large organizations continue to send out these marketing e-mails with all the classic traits of phishing e-mails. Apple isn't the only organization to do this. They all do it. And then they lecture us about responding to phishing e-mails.

If you’re in the US please call 1-800-MY-APPLE or outside the US, consult the support articles below.

Contact Apple for support and service - Apple Support

Why have you, Apple not responded?

Apple is not here. This is a user-to-user site.

Where exactly are you looking for Apple to respond?