"use this iphone ro reset your Apple ID password"

bouchra149 wrote:

Yesterday, I got a notification as shown below - followed by a pop-up to enable to allow "use this iphone to reset your Apple ID password" - I clicked on "allow" but then when I was asked to type in my new password, I exited the screen. It was an Apple pop-up so sounded legit. Is my account at risk? What should I do?

https://discussions.apple.com/content/attachment/3e0de24d-5a8e-405f-bab4-1eae7647670b

It was a system message exactly like on the screenshot. Does that mean the scammer had my user and password and attempted to reset my password? Again, I clicked on "allow" so I am worried.

After exciting the screen, I did go in my settings and changed my apple id password.

You did ALL the right things. You were skeptical as you should have been. Apple doesn't ask us to change our Apple Account Passwords, so yes, someone was likely trying to get into your account, but you stopped them and good for you.

bouchra149 wrote:

Thank you - do you know how I can make it right? :)

I don't think you need to do anything. You changed your Apple Account Password, which should be good enough and what we would recommend doing.

Anon8xdtv wrote:

I had the same "system message" pop-up and I have a couple follow-up questions.

1) Shouldn't I be concerned it was even possible for this message to be displayed at all (given it wasn't from an email, or text)?

2) If they're asking me to change my password, then they don't have it correct?

3) What about changing my password would prevent them from making this message show up again, and what information do they have of mine, that would make it possible in the first place?

thanks.

I have never had Apple tell me to change the password, ever, and they don't.

The pop up was generated by some website based cookie, no need to be concerned, just be wise to ignore it.

If you want to change your password you can, but not by following a popup like this.

"2) If they're asking me to change my password, then they don't have it correct?"

Correct, but they soon will have it of you follow the request!

As lobsterghost1 said and I might have misunderstood, if you never clicked on anything in the messages you saw, and all you did was go to Settings > [your name] > Sign-In & Security to change your password, you are fine.

Otherwise:

If you think your Apple Account has been compromised - Apple Support

It certainly sounds like you have been lured into doing something bad.

Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Apple Support

I had the same "system message" pop-up and I have a couple follow-up questions.

1) Shouldn't I be concerned it was even possible for this message to be displayed at all (given it wasn't from an email, or text)?

2) If they're asking me to change my password, then they don't have it correct?

3) What about changing my password would prevent them from making this message show up again, and what information do they have of mine, that would make it possible in the first place?

thanks.