Want to highlight a helpful answer? Upvote!

Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Rescue email phishing scam from id.apple.com

I think there's a new scam going around. This morning I recieved, completely out of the blue, an email supposedly from appleid@id.apple.com telling me to confirm my rescue email address. The email looked genuine and the links, when hovered over, seemed to go to the right place but id.apple.com isn't familiar to me, I've not made any account changes recently, and Apple don't use rescue emails do they?

Also - I don't think Apple just email people out of the blue with requests for personal information like this.

So this would appear to be a new phishing attempt. Looks like a scam, smells like a scam and tastes like a scam.

If anyone knows any different it would be interesting to hear their opinions. For the time being I forwarded the email to Apple's phishing dept and trashed it.


Email :

User uploaded file


Message was edited by: chrisell - added pic of email

iPhone 4S, Windows 7

Posted on Apr 20, 2012 8:54 AM

Reply
Question marked as Best reply

Posted on Apr 20, 2012 9:41 AM

Ok so I know what happened now. Someone else in my family was presented with the new security questions this morning on their phone but couldn't go any further without supplying a "rescue" email address. Like most people, they only have one email address and Apple won't let you use the same email for the primary and "rescue" address (obviously). So they used my email address instead, hence the verification email for their account coming to me.


This would appear to be genuine then.

61 replies

May 6, 2012 10:16 AM in response to chrisell

I received this yesterday and so apparently did a number of my friends. Some of us have followed the "Verify Now" link and some haven't. As one who hasn't, I can confirm that my Apple account is still working perfectly so my question is why should anyone take the risk? Why hasn't an Apple employee posted a message here to remove the uncertainty? Don't they read these threads?


Image removed by Host because it contained personal email address.

May 7, 2012 3:57 PM in response to Briana.

I got confused by this too, for me it was showing txxx@hotmail.co.uk , then I realised maybe the xxx was a placeholder, so the actual address being toadsaresupercool@hotmail.co.uk or similar, so I clicked to send it, and it was another email address of mine that started with a t . I don't know if that's the case for you but if like me you set it up in a rush to download something you wanted NOW then maybe this'll help :-)


Good luck anyway.


SH



P.S. Why is it that you can't write your own security questions? I had to make stuff up to actually have enough answers to their stupid presets...

May 9, 2012 8:33 PM in response to Briana.

What are people supposed to do if they don't have a backup email address? Don't answer, this is rhetorical. lol. And Apples followup email to my rescue account addressed me not by name but just by Thank You, and go here and enter your password at this javascript looking link which I am still only 90% convinced is real since wording is phishy about this.


You learn to be careful but this confirmation routine wasn't thought out carefully IMHO.

May 15, 2012 10:23 PM in response to chrisell

Has Apple officially responded to this issue? I got the eMail to my home email account on 12 May 2012. Unlike others in this thread, I do not have an account with Apple or its store. The only way they have my home email account is from a product registration over three years ago. Has this been confirmed as a phishing activity??

Jun 5, 2012 10:15 AM in response to chrisell

I know this is probably a pipe dream, but I had this same question, Googled, found this thread, and what I'd really like to know is:


Is there a way to contact Apple and express displeasure with their sending an email with links they expect me to click on? (I didn't click either. Don't want to take the chance, even though I *did* enter this information into my iTunes account recently when it was asked for. I just never click on links in emails from companies that then ask for sign-in information.)


I don't have AppleCare, so I don't get very far when requesting support either online or on phone. And I see that you can now request a waiver of the AppleCare requirement, but none of the reasons you can select fit this problem, and I'm pretty sure if I just choose one of those reasons lightly, they won't grant the request.


I just want to send them a quick note explaining that I don't like the email with links in it method they're using to confirm email addresses, and I don't need an email back from them. Is there any way on earth to do that???

Rescue email phishing scam from id.apple.com

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.