Chuck78

Q: I received an email from appleid@id.apple.com requesting that I verify my Apple ID and password.  Is it legitmate?

I received an email from appleid@id.apple.com requesting that I verify my Apple ID and password.  Is it legitmate?

iPhone 4

Posted on May 7, 2012 8:05 AM

Close

Q: I received an email from appleid@id.apple.com requesting that I verify my Apple ID and password.  Is it legitmate?

  • All replies
  • Helpful answers

Page 1 of 4 last Next
  • by Tgara,

    Tgara Tgara May 7, 2012 8:10 AM in response to Chuck78
    Level 4 (3,556 points)
    May 7, 2012 8:10 AM in response to Chuck78

    That email is only sent when you've made a change to your Apple ID on the Apple site.  If you did not, I would not respond, but rather check your account on the Apple ID site to make sure everything is OK.  There is a disclaimer there that says something about these emails and if you got them possibly by accident.  Worth checking.

  • by John Galt,

    John Galt John Galt May 7, 2012 8:25 AM in response to Chuck78
    Level 9 (50,065 points)
    Mac OS X
    May 7, 2012 8:25 AM in response to Chuck78

    ...  Is it legitmate?

     

    NO. This is a scam.


    Apple will send emails requesting verification only in response to a request you made.

     

    Identifying legitimate emails from the iTunes Store

     

    Never click on a link sent to you in an email. To manage your Apple ID navigate on your own to this URL, nothing else:

     

    https://appleid.apple.com/

     

    What is the email's content? Copy and paste it here but omit any personal information.

  • by John Galt,

    John Galt John Galt May 7, 2012 8:32 AM in response to Chuck78
    Level 9 (50,065 points)
    Mac OS X
    May 7, 2012 8:32 AM in response to Chuck78
  • by macminibruce,

    macminibruce macminibruce May 9, 2012 8:28 PM in response to John Galt
    Level 1 (5 points)
    May 9, 2012 8:28 PM in response to John Galt

    Hi John,

    You might be wrong from what an rep just told me.  I bought an itunes song today (first time in a couple months) and itunes prompted me to pick 3 security questions and answers and provide a backup rescue email.  I did so becuase I couldn't choose not to.  Got my song.  Got an email in my backup email account (good thing I had one, some people don't) addressed to not my name but just Thank You and it wanted me to click on a link highlighted VERIFY NOW.  I copied the link info into Textedit and it said //id.apple.com then slash cgi-bin and a bunch of characters - jargon, you know code.

     

    Your message above said it was a scam, and to go to appleid.apple.com and I went there and there was nothing available about verifying a rescue email so I thought, aha!  a good phishing scam tucked inside itunes almost got me!

     

    So, I called apple and got bumped up the chain a couple times(after first rep said it was a phishing attempt) and then higher up support said the rescue email and 3 questions are legit and they do own id.apple.com.

     

    I told them I had spotted a message (yours) in discussion forum that said otherwise and prompted me to call and they said they would try and post something or other but I thought I would throw this out tonight.  The way that email to my backup account didn't refer to me by name (just Thank You,) and then told me they want me to enter my password again just sounded phishy!  I hate it when websites add to their URLS with dots as I don't know the structure of whether someone else can buy a similar one easy and run a scam.

     

    So, am I still confused ?(honest question) and are you now right or wrong?  I don't feel like trusting just one apple rep since seeing your message and hearing the first rep I talked to agree it was a phishing attempt.

     

    Message was edited by: macminibruce

  • by John Galt,

    John Galt John Galt May 10, 2012 7:57 AM in response to macminibruce
    Level 9 (50,065 points)
    Mac OS X
    May 10, 2012 7:57 AM in response to macminibruce

    ... So, am I still confused ?(honest question) and are you now right or wrong? 

     

    Thanks for asking. There is not enough information in the OP to be completely certain, but if you (or someone else) did not make a request to reset your password then Apple will not send this. There is additional information in the body of the email that explains the reason it was sent, which is the reason I requested it.

     

    The domain is correct as you said, but it is a trivial matter to spoof the apparent "from" address in an scam attempt. You were right to navigate on your own using the correct URL to manage your account. Any links within the body of an email ought to be regarded with suspicion, much more so if you had no reason to expect the email to be sent.

     

    If Apple really sent the email, but you did not make such a request, the reasons can range from innocuous to less so. Someone with a similar Apple ID who merely mistyped it erroneously and entered a non-matching password too many times will cause it, as will someone repeatedly trying, and failing, to guess your password.

     

    So, lacking sufficient information to the contrary, assume it is a scam. If you navigated on you own to the correct URL, logged in with your usual name and password, and were able to manage your account, then all is well and you can disregard the email, and you can use your existing password as long as you want. It's a good idea to use a non-trivial password (Apple makes us do that anyway) and to change it once in a while.

  • by CONSTANTIN 83,

    CONSTANTIN 83 CONSTANTIN 83 Aug 7, 2012 5:07 AM in response to Chuck78
    Level 1 (0 points)
    Aug 7, 2012 5:07 AM in response to Chuck78

    NO

  • by Elphidieus,

    Elphidieus Elphidieus Nov 23, 2012 1:10 AM in response to Chuck78
    Level 1 (0 points)
    Nov 23, 2012 1:10 AM in response to Chuck78

    I got the same email... And a subsequent email stating that details on my email associated with the apple ID has been updated...

     

    I don't know what is going on from Apple's side, but I've changed my password even though I still feel insecure about this.

     

    If it's a case of hacks onto Apple IDs, that makes iCloud and indeed the current OS X Mountain Lion deemed unsafe for paranoid freaks like me... This is one big wrong move on Apple's part in trying to universalised everything they do.

     

    I'd prefer the old fashion way of getting things done...

  • by Simshine70,

    Simshine70 Simshine70 Nov 20, 2013 10:49 AM in response to Chuck78
    Level 1 (0 points)
    Nov 20, 2013 10:49 AM in response to Chuck78

    how can i verify it and the link which i should go to is not show in the email yet so what can i do in this situation

  • by Sonj ,

    Sonj Sonj Dec 14, 2013 9:42 AM in response to John Galt
    Level 1 (0 points)
    Dec 14, 2013 9:42 AM in response to John Galt

    I just got the same email from appleid@id.apple.com

     

    "As we strive to secure your account, please be informed to upgrade to our latest security platform here.

     

    Your privacy and protection is our concern.

     

    Apple Support"

     

    It's definitely a really good scam email. Thanks for helping to clear it up John!

  • by mcoull,

    mcoull mcoull Dec 14, 2013 11:16 AM in response to Sonj
    Level 1 (10 points)
    Dec 14, 2013 11:16 AM in response to Sonj

    this is the one i got.........SPAMMED IT

     

    The password for your Apple ID ************ has been suspended.


    We detect unauthorized Login Attempts to your AppleID from other IP address Location. or that an unauthorized person has accessed your account.

    To confirm your AppleID, we recommend that you go to: forget.*****.. >>


    Apple Customer Support

    <bottom.gif>

     

    <Link Edited By Host>

  • by John Galt,

    John Galt John Galt Dec 14, 2013 11:24 AM in response to mcoull
    Level 9 (50,065 points)
    Mac OS X
    Dec 14, 2013 11:24 AM in response to mcoull

    Thanks.

     

    Looks authentic, right?

     

    Check the URL at the top of the page that loads when you clicked the link you posted (I asked the Hosts to remove it):

     

    Screen Shot 2013-12-14 at 2.16.31 PM.png

     

    Tiger Landscaping... ok.

     

    These "phishing" scams are easy to perpetrate. Be careful.

  • by Zilli3,

    Zilli3 Zilli3 Dec 17, 2013 8:42 PM in response to Chuck78
    Level 1 (9 points)
    iWork
    Dec 17, 2013 8:42 PM in response to Chuck78

    I got one this morning from do_not_reply@apple.com telling me that all my apps would be deleted from the app store if I don't verify.

     

    Apple

    Dear Apple Customer ( ************* ),

           This is an automatic message sent by our security system to inform you know that you have to confirm your account information in 48 hours.
           Your iTunes - Account & Billing is prone to be frozen because we are unable to validate your account information. If you do not confirm your account your applications will be deleted from your App Store.
         This process does not take more than 3 minutes. To proceed to confirm your account details please click on the link below and follow the instructions.

    Verify Now >

    Wondering why you got this email?
    It's sent when someone adds or changes a contact email address for an Apple ID account. If you didn't do this, don't worry. Your email address cannot be used as a contact address for an Apple ID without your verification.

    For more information, see our frequently asked questions.

    Thanks,
    Apple Customer Support

    _
  • by Dirty Vegas,

    Dirty Vegas Dirty Vegas Dec 17, 2013 8:50 PM in response to Zilli3
    Level 4 (1,434 points)
    Dec 17, 2013 8:50 PM in response to Zilli3

    The broken English should be the most telltale sign that you're dealing with a phishing attempt.

  • by Zilli3,

    Zilli3 Zilli3 Dec 17, 2013 9:49 PM in response to Chuck78
    Level 1 (9 points)
    iWork
    Dec 17, 2013 9:49 PM in response to Chuck78

    Apple should be knowing abouting this phishing shmishing and be doing someting to putting stopping it.

Page 1 of 4 last Next