Toad2001 and others...
I got the same email, too, and came to the discussions and found your posts. So I did a bit more digging and under the "AppleID" FAQ's found the following.
"When you create a new Apple ID or make certain changes to your account, Apple will require you to sign in by following the link in a verification email. This is to help prevent fraud and to help protect your identity. Some Apple services, such as FaceTime and GameCenter, require email validation."
Looks like this is not phishing even though it does lead to a page that asks for both your AppleID and password. I'm going to trust the site. If there are ramifications I will post something more. Otherwise, no news is good news.
I also received this email. What bothers me about it is that is says this email is "sent when someone adds or changes a contact email address for an Apple ID account." I did not add or change anything on my Apple account.
Exactly! Neither had I done anything to trigger this.
Still haven't heard anything from Apple officially on this thread. Maybe no one from Apple monitors this forum?
I've not responded to the email and nothing dreadful has happened to my Apple account access either--so if it's a legitimate email, why send it if nothing will happen if I don't respond?
Today I received the same email.
I did not add or change any email-addresses.
Although it may not have been wise, I did click the link.
It brought me to an apple website that looked legit,
and showed me a message: "This email address has been previously verified".
If it does turn out to be phishing, and if anything bad starts to happen, I'll be sure to post again here..
Hi - What's going on Apple?
Ive rec'd a similar msg 4 times in the past 3 weeks:
Subject (all caps mine): HOW TO RESET YOUR APPLE ID PASSWORD
Dear ZZZ ZZZZZ,
To reset your Apple ID password, simply click the link below. That will take you to a web page where you can create a new password.
Please note that the link will expire three hours after this email was sent.
Reset your Apple ID password > ( I didn't click it but on hover I can see that this URL goes to an "iForgot" cgi.)
Questions? There are lots of answers on our Apple ID support page >
If you weren't trying to reset your password, don't worry — your account is still secure and no one has been given access to it. Most likely, someone just mistyped their email address while trying to reset their own password.
Apple Customer Support
I asked about this at the SnowLeopard forum, and finally got an address at Apple. I copied the spam message and emailed it to "Spam@me.com". Then I got a response from SPAM@ME.COM. I wonder if it only applies to folks with a ME account? Anyway - here's what they sent:
Thank you for contacting MobileMe. We have received the spam report that you submitted.
MobileMe takes all violations of the Acceptable Use Policy very seriously.
A MobileMe security member will investigate the incident and will contact you if required.
All reported spam must be provided as an attachment.
If you are using the application Mail in Mac OS X please follow these steps:
1) Select the spam message in your Inbox
2) From the Menu bar select Message => Forward As Attachment
3) Address to firstname.lastname@example.org and Send
The Mobileme Membership Agreement and Acceptable Use Policy are available online at:
Thank you for taking the time to contact us.
The mails I believe to be authentic however you should not be receiving them unless you have changed something in your apple account profile. If you have received a mail keep an eye on you itunes purchase history. I receive one these mails on 5th Dec and on the 6th Dec an In App Purchase for several orders went through my itunes account costing me £30. I only spotted this today and have reported it to Apple so will update when I get a response.
I got the same email late last night. I made no change to my account and it just didn't look right to me so I ignored them till this evening when I could look a little closer.
a few other things made me worry:
- the first email was immediately followed by a "Thank you for creating your Apple Id" email
- both emails showed up in a gmail account that I never use for Apple stuff
- both emails show an Apple Id the same as the gmail account but missing a "." in the name, so the Apple Id is "lastNamefirstName@gmail.com" but the email address that I received these with is "lastName.firstName@gmail.com"
After reading this thread I decided to take my chances on my iPad and click on the "Verify Now" link. I obviously did not know the password to this new account, so using the "I forgot my password" link I was able to get a reset password email to my gmail account.
I changed the password and logged in to look around. The name is my name, but the Apple Id (which also seconds as the contact email address) is my gmail account but missing the "."
I don't understand how the email got to me missing the "."
Everything looked normal with this account, and then checking the address I see a west coast address and I am on the east coast.
This got me worried about someone trying to order stuff (I had something like this happen with my ATT account once), so I took a quick look in the Apple Store with this Id, but the order history and the cart was empty, so hopefully nothing happening there.
I also changed the security question, which was a question I would never choose, and the birthdate was wrong so I changed that also.
Now to add to the weirdness, I googled the west coast address, and it turns out to be a business that has my last name in it!
This got me thinking that maybe I just hijacked someone else's account! So I called the business, got voice mail and left a message to call me back if someone with my name works there. I'll see if they call back.
I have two Apple Ids already which is confusing enough, so I want to delete this account, unless I just screwed someone else up, in which case I guess I will work out something with my name twin on the west coast and somehow give the account back to him.