Q: iTunes store account hacked

Ok, so I found in app purchases under "restrictions" where all is greyed out/switched off which seems odd. For anyone else looking it's under SETTINGS then GENERAL. it's asking me to enter my passcode twice to "enable restrictions". Is it safe to do this or is this now some sort of compromise meaning I can't now enable restrictions without them getting my passcode? And blinkie - where is the country bit as I want to see if they have changed mine too?

I've had exactly the same thing happen to me on 20th and 21st January. Initial email from iTunes telling me that I've changed telephone nimber and credit card details, then 4 lots of receipts from ITunes for Castle HD Favor Points, each one for £31.99. I managed to contact Apple via expresslane.apple.com, got them to call me back straight away (this is only an option I think in afternoon in UK as the call comes back from the States, so try late afternoon). They were helpful, it looks like it's being fraudulently taken from account in China. Apple credited the account the full amount - however I'm a little confused because the card number they have used ends in 4001 which my cards do not do. My concern at the moment is that the VISA card has been set up in my name and address, so I'll soon get a bill through for other card payments that I haven't made. It's a bit of a worry!

I am not sure anyone has addressed how this might have happened.  One way is for another party to link a different device to your Apple ID without you realizing it.  (You can see what devices are authorized to access your account by following the links to your Apple ID and service.) Using that newly registered device they could then acesss your itunes without the use of  your laptop.  Furthermore it is possible for an unauthorized party to gain access an Apple computer simply by having their email address in your contact list, as long as it is a .me or .mac contact.  This functionality has existed since snow leopard I believe and is an intentional design aspect of the operating system to ease the linking of computers into networks.

I am familiar with your situational some degree because I experienced a similar nightmare myself from a former employer who was also a sociopathic control freak.  A horrible situation - which has made me consider dashing myn dumb computer, phone and iPad against the rocks and joining the neo-Luddites.(lol)  mostlybive come to realize what hoopty systeh all this is and to limit my reliance on it.  Hope you get to the bottom of your situation satisfactorily.

Thanks for sharing - sounds identical to my situation. And I hadn't thought that they may have now set up a new credit card with my details (seeing as they now have all my personal data from iTunes). Excellent point. I have a call back scheduled with Apple for 5.30pm today (UK time). Will I be charged for this on my mobile phone as I assume it will be an international incoming call and I thought the recipient had to pay too to receive international calls? I sincerely hope not!

Thanks for your post leaf eric - it did make me smile. I am not on a mac - but windows 7 PC. If you want to start up a neo-luddite group I shall certainly join you. Just reading up on mucho philosophy and I'm sure there is a more meaningful life to be had from the simpler things - I feel a major purge of possessions coming on very soon!   Blur certainly got it right: Modern Life is Rubbish!

Hi Chris. My account has been hacked. I have tried to change my security questions but the only way it will allow me to do it is to send an email to an old work email address which I do not have access to anymore :/ Nor was this work address showing as my "alternative email address" under my manage my account page? All very strange.

I clicked on the link where it said send email to xxx to reset security questions to see what it would do and whether it would give me an option to change the alternative email address. It just sent the email to the old work email address which I cannot click on. I then updated my alternative email address to one I do have access to. But it now won't let me send another reset email and the one showing is still the old work email address <sigh>. How do I get this old email address removed as I cannot seem to be able to do it myself and then send myself a reset security questions email to my new alternative email address? Many thanks, N

Hi Chris (or anyone else that know the answer!). My account has been hacked. I have tried to change my security questions but the only way it will allow me to do it is to send an email to an old work email address which I do not have access to anymore :/ Nor was this work address showing as my "alternative email address" under my manage my account page? All very strange.

I clicked on the link where it said send email to xxx to reset security questions to see what it would do and whether it would give me an option to change the alternative email address. It just sent the email to the old work email address which I cannot click on. I then updated my alternative email address to one I do have access to. But it now won't let me send another reset email and the one showing is still the old work email address <sigh>. How do I get this old email address removed as I cannot seem to be able to do it myself and then send myself a reset security questions email to my new alternative email address? Many thanks, N

Hi Smaxbeast

I have tried and tried and tried to do this callback thing but it just doesn't seem to work for me. Three times now I have requested "call me now" via the Apple Support section. It sends me a confirmation email. I wait by the phone for 10-15 minutes, then I get an email saying "missed appointment". I'm seriously losing the will to live with this :/ Any ideas? I really want to speak with a human being about this as opposed to sending a email. I'm tired of typing!

Many thanks, Nicci

njb72, I can see why you are tired of typing. Looking at pages of your postings. I personally would have saved my strength and sent one email:

http://www.apple.com/feedback/itunes.html

Now that's just plain rude. Go and pick on someone else :-P

njb72

If you compile your problem of Fraudulent transaction of you iTunes account into an email, which is what I did using the identified link then after about two return replies from myself Apple addressed it.  As my fraudulent transaction was a debit from my bank account and with the evidence I had then the money was refunded.

I then removed my bank details from the account which means that either the hackers have ONLY my redemption credit or they enter a.n.other card details.

Also, if your card details are changes then, as I have said, cancel your cards and request new ones to be safe. 

Also get the bank to mark your account (UK banks do that) which means certain flags are set to trigger with any unusual transactions and in my case the bank actually phone me.

I would also use a NON-Apple email as my store ID.

Regards

Mark

Thanks Mark. As I set up my iTunes account so long ago I cannot remember entering my bank details nor can I find where they would be in the account page. Could you tell me where I find these please? I have cancelled all of my cards and ordered new ones. I already use a non-apple email as my store ID. I'm having problems re-setting my security questions though (post further up relates) I will get on to the bank to flag the account presumably for iTunes transactions? Thanks once again, Nicci

Nicci

I was the same as you, set up in 2008 and this occurred for me last year.

Right, in iTunes Store, with you logged in to your account, (version 11.0.1-latest) click your account name and select account from the drop down. It is also an option under the store drop down called 'view account'.  You have to enter your apple password.  Here you can edit things including "payment information" by selecting edit and you have various payment options including NONE.

On iPad/iPhone you click the 'Apple ID' box at the bottom of the App Store/iTunes store page and follow the similar way to the MAC info above.  PC's will be similar.

Regards

Mark

Should be renamed Express Lame Service!

Many thanks. I already did this part and removed the credit card information that was there and selected none. So under "payment information" it reads "no credit card on file". Is that all I need to do at this point? I can't remember ever giving my bank account details anywhere else on the site? I've just double checked the Accounts page and it still says "no credit card on file".

I've only just reached page 25 of the posts - it's going to take me some time to get to the end. I can't believe how often this sort of thing is happening and nothing is being done about it nor are any explanations given. Shocking! Nicci