Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

App Store Security or Phishing

Was updating some iOS apps, when the App Store (assuming it was the app store), requested my password a second time, and then proceeded to request security questions and answers...


It looked like pushing, and since I'd not heard of Apple instituting this procedure I elected not to input the information.


Feedback submitted to Apple on this... Anyone else seen this before? Has Apple advertised this?


Thx

Bob

iMac, Mac OS X (10.7.2), Powerbook G4, Mac Plus

Posted on Apr 11, 2012 6:16 PM

Reply
42 replies

Apr 21, 2012 8:38 PM in response to Bob Gold

A very inconsistent factor is that the same questions are not being asked when an app is purchased (tonight) using iTunes on a PC nor is there any indication of any method existing for users to complete these questions on the PC rather than using the much more difficult reading and input options on the iPhone or iTouch. (especially those of us who may have reduced vision)


With no statement directly from Apple and inconsistancies such as this one raise the phishing flag for anyone paying attention.


Beverly Howard

Apr 21, 2012 8:45 PM in response to Bob Gold

My speculation is that there are increased rates of refund/chargeback calls from iTunes accounts with one-click purchase on, Apple is using this security measure as a preventive tool to prevent excessive chargebacks & refunds by making sure one-click users are absolutely rational about their purchases.


Do you have one click on in your case?


I do not experience this issue as my one-click is off, purchase of apps be it free or paid only only requires password verification in my case. All I have to is simply to re-type my CCV if I were to use my iTunes account on a new device.


My advice: Turn one-click off if you have it on.

Apr 22, 2012 8:47 AM in response to Encrypted11

>> Do you have one click on in your case? <<


Have never encountered "one click" in any apple setting or when purchasing... after your post I I went through all of the settings in the iTouch and in iTunes and could not find anything that looked like a "one click" toggle.


Where should I look?


A related point... I notice that this thread and other related responses go back to the first of this year... Pretty sure that I downloaded an app just a few days ago and this challenge was not triggered then.


Thanks for the response,

Beverly Howard

Apr 23, 2012 6:28 AM in response to Bob Gold

The same thing happened to me. When I received the confirmation email to verify my "rescue" email account, the email was from appleid@id.apple.com.akadns.net the phishy part was the .akadns.net of that address. If this was an apple.com domain, it should have been a "/" after the .com. I firmly believe this was a phishing attack and I did not verify my rescue email address. Just because Apples has instituted these tightened security measures does not mean that someone wouldn't take advantage of the fact and construct a phishing hack to look just like it was genuinely from apple. I did some research and it looks like the akadns.net might be legit but I'm not taking any chances...


I also went to ITunes and changed my security settings there this morning.

Oct 9, 2012 6:39 AM in response to Bob Gold

I am boycotting this.


I will be asking developers for an alternative, non app store link to download.

I'm sure most will oblidge. Most apps already do.


I've also opened a ticket with apple support to ask how to opt out of this and explained the issues with the questions and that I won't be filling them out.

The alternative email is fine with me.


I suggest others do the same.

Oct 9, 2012 6:47 AM in response to Meboy

Meboy wrote:


I will be asking developers for an alternative, non app store link to download.

I'm sure most will oblidge. Most apps already do.


In order to download an app to your iPad from anywhere other than the App Store, you would need to jailbreak it. While that is perfectly legal, it makes your iOS device vulnerable to malware and instabilities and voids your warranty.


Best of luck.

App Store Security or Phishing

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.