chrisell
Level 1 (18 points)
iPhone

Q: Rescue email phishing scam from id.apple.com

I think there's a new scam going around. This morning I recieved, completely out of the blue, an email supposedly from appleid@id.apple.com telling me to confirm my rescue email address. The email looked genuine and the links, when hovered over, seemed to go to the right place but id.apple.com isn't familiar to me, I've not made any account changes recently, and Apple don't use rescue emails do they?

Also - I don't think Apple just email people out of the blue with requests for personal information like this.

So this would appear to be a new phishing attempt. Looks like a scam, smells like a scam and tastes like a scam.

If anyone knows any different it would be interesting to hear their opinions. For the time being I forwarded the email to Apple's phishing dept and trashed it.

 

Email :

applephish.jpg

 

Message was edited by: chrisell - added pic of email

iPhone 4S, Windows 7

Posted on Apr 20, 2012 9:06 AM

by chrisell,Solvedanswer
chrisell chrisell
Level 1 (18 points)
iPhone
A:

Ok so I know what happened now. Someone else in my family was presented with the new security questions this morning on their phone but couldn't go any further without supplying a "rescue" email address. Like most people, they only have one email address and Apple won't let you use the same email for the primary and "rescue" address (obviously). So they used my email address instead, hence the verification email for their account coming to me.

 

This would appear to be genuine then.

Posted on Apr 20, 2012 9:41 AM

Close
chrisell

Q: Rescue email phishing scam from id.apple.com

  • All replies
  • Helpful answers

first Previous Page 3 of 5 last Next

  • by JAWX,

    JAWX JAWX May 3, 2012 1:53 PM in response to chrisell
    Level 1 (0 points)
    May 3, 2012 1:53 PM in response to chrisell

    I attempted to buy a 99 cent app today.  Before the purchase was completed, I was asked to add three security questions and give an alternate "rescue" email address. I puzzled at this unusual request, but I complied, especially since I had never been asked these questions before. (In the worse case, I would not use these question/answers again).  I was asked if I still wanted to purchase the app.  I clicked "yes", but nothing happened.  No app, no message, no link.

     

    I checked my alternate "rescue" address.  There was a verification email, but it did not include my name... It was addressed only to the email address!  I became suspicious of a phishing scam and directly contacted apple instead of using the "verify" link.  At the verified Apple site I discovered that the new questions were already added, but the new alternate "rescue" address was not.  I offered the same alternate "rescue" email address at the verified apple site, but I was immediately told that this address could not be used because it was being used for me.com!  I entered a different email address and received a very different email addressed to me by name, which I verified.

     

    Is this a sloppy Apple update procedure or a phishing scam?  And what happened to my app purchase? I've been told that Apple's security is just as vulnerable as Microsoft's but Apple has just been too small.  I would like to believe that Apple's OS and systems are more secure, but now I wonder.  Can anybody provide an official answer?

  • by Tim Richards,

    Tim Richards Tim Richards May 3, 2012 2:26 PM in response to JAWX
    Level 1 (25 points)
    May 3, 2012 2:26 PM in response to JAWX

    I had exactly the same experience and was just as confused. I finally logged onto my .mac account and requested that the verification email be resent. That came through so I decided it was legit and went ahead and verified. I completely agree that this was a poorly implemented "security enhancement" from Apple.

  • by Zande1r,

    Zande1r Zande1r May 3, 2012 7:10 PM in response to chrisell
    Level 1 (0 points)
    May 3, 2012 7:10 PM in response to chrisell

    Is there anyway to change your rescue email?

  • by dantenoto,

    dantenoto dantenoto May 4, 2012 7:04 PM in response to chrisell
    Level 1 (0 points)
    May 4, 2012 7:04 PM in response to chrisell

    Hi - I just got off the phone with Apple and they confirmed that this is LEGIT and that appleid@id.apple.com is definitely a legit address.  I mentioned that a number of people were concerned about this and they said they would post an official response.  I agree, very poorly handled and extremely confusing. 

  • by Briana.,

    Briana. Briana. May 5, 2012 7:05 AM in response to chrisell
    Level 1 (0 points)
    May 5, 2012 7:05 AM in response to chrisell

    I have never entered a rescue email address, but it is telling me that I have one at "mxxx@yahoo.com" and every time I enter the answers to my security questions (which I am quite certain are correct) it tells me that they are wrong. And since mxxx@yahoo.com is no email address of mine I cannot recieve any verification email?!

  • by Colin Jones,

    Colin Jones Colin Jones May 6, 2012 10:16 AM in response to chrisell
    Level 1 (5 points)
    May 6, 2012 10:16 AM in response to chrisell

    I received this yesterday and so apparently did a number of my friends. Some of us have followed the "Verify Now" link and some haven't. As one who hasn't, I can confirm that my Apple account is still working perfectly so my question is why should anyone take the risk? Why hasn't an Apple employee posted a message here to remove the uncertainty? Don't they read these threads?

     

    Image removed by Host because it contained personal email address.

  • by mansoor82,

    mansoor82 mansoor82 May 6, 2012 8:02 AM in response to Colin Jones
    Level 1 (0 points)
    May 6, 2012 8:02 AM in response to Colin Jones

    how can i change my rescue email ??

  • by Alley_Cat,

    Alley_Cat Alley_Cat May 6, 2012 9:52 AM in response to Colin Jones
    Level 6 (19,593 points)
    May 6, 2012 9:52 AM in response to Colin Jones

    No they don't read the threads.

  • by square_halo,

    square_halo square_halo May 7, 2012 3:57 PM in response to Briana.
    Level 1 (0 points)
    May 7, 2012 3:57 PM in response to Briana.

    I got confused by this too, for me it was showing txxx@hotmail.co.uk , then I realised maybe the xxx was a placeholder, so the actual address being toadsaresupercool@hotmail.co.uk or similar, so I clicked to send it, and it was another email address of mine that started with a t . I don't know if that's the case for you but if like me you set it up in a rush to download something you wanted NOW then maybe this'll help :-)

     

    Good luck anyway.

     

    SH

     

     

    P.S. Why is it that you can't write your own security questions? I had to make stuff up to actually have enough answers to their stupid presets...

  • by macminibruce,

    macminibruce macminibruce May 9, 2012 8:33 PM in response to Briana.
    Level 1 (5 points)
    May 9, 2012 8:33 PM in response to Briana.

    What are people supposed to do if they don't have a backup email address?  Don't answer, this is rhetorical. lol.  And Apples followup email to my rescue account addressed me not by name but just by Thank You, and go here and enter your password at this javascript looking link which I am still only 90% convinced is real since wording is phishy about this.

     

    You learn to be careful but this confirmation routine wasn't thought out carefully IMHO.

  • by macminibruce,

    macminibruce macminibruce May 9, 2012 8:37 PM in response to square_halo
    Level 1 (5 points)
    May 9, 2012 8:37 PM in response to square_halo

    I like the favorite relative questions because I usually put the ones I don't like and lol but hope I will remember I did that.  This routine from apple could have been designed better especially for those with just one email address.

  • by Snorkeler,

    Snorkeler Snorkeler May 12, 2012 8:36 AM in response to JabLab
    Level 1 (10 points)
    May 12, 2012 8:36 AM in response to JabLab

    AppleIDphish-.png

    If anyone at Apple sent this, they are truly clueless. It looks and smells like phish.

    I separately logged on to my Apple ID account, and there is no such 'rescue email address' there, not even that

    category. There is main email and alternate email.

    Someone official from Apple should respond to this.

  • by dustinawsome,

    dustinawsome dustinawsome May 12, 2012 9:55 PM in response to Briana.
    Level 1 (0 points)
    May 12, 2012 9:55 PM in response to Briana.

    im having the same issue. i dont remember the scurity questions and i dont know my rescue email

  • by lupo18,

    lupo18 lupo18 May 15, 2012 7:07 AM in response to dustinawsome
    Level 1 (0 points)
    May 15, 2012 7:07 AM in response to dustinawsome

    yeah i also have problems with my rescue email and security questions, simply forgot then. How can i change my id, none of the above is working

  • by jfdoby,

    jfdoby jfdoby May 15, 2012 10:23 PM in response to chrisell
    Level 1 (0 points)
    May 15, 2012 10:23 PM in response to chrisell

    Has Apple officially responded to this issue?  I got the eMail to my home email account on 12 May 2012.  Unlike others in this thread, I do not have an account with Apple or its store.  The only way they have my home email account is from a product registration over three years ago.  Has this been confirmed as a phishing activity??

first Previous Page 3 of 5 last Next