I received an email from appleid@id.apple.com requesting that I verify my Apple ID and password. Is it legitmate?
iPhone 4
well someone on this discussion said that appleid.apple.com is a legit apple site....it's even a secure site https://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa/
Apple wouldn't send you an email if you don't have any apple products and don't have an Apple ID. Where do you think they would get your email address from?
Delivered-To:
Received: by 10.68.80.73 with SMTP id p9csp423275pbx;
Wed, 15 Jan 2014 23:56:03 -0800 (PST)
X-Received: by 10.68.203.163 with SMTP id kr3mr8334427pbc.33.1389858963485;
Wed, 15 Jan 2014 23:56:03 -0800 (PST)
Return-Path: <Do_not_reply@id.apple.com>
Received: from nwk-txn-msbadger0304.apple.com (nwk-txn-msbadger0304.apple.com. [17.151.1.54])
by mx.google.com with ESMTP id rx8si6218145pac.250.2014.01.15.23.56.03
for <
Wed, 15 Jan 2014 23:56:03 -0800 (PST)
Received-SPF: pass (google.com: domain of Do_not_reply@id.apple.com designates 17.151.1.54 as permitted sender) client-ip=17.151.1.54;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of Do_not_reply@id.apple.com designates 17.151.1.54 as permitted sender) smtp.mail=Do_not_reply@id.apple.com;
dkim=pass header.i=@id.apple.com;
dmarc=pass (p=REJECT dis=NONE) header.from=id.apple.com
DKIM-Signature: v=1; a=rsa-sha1; d=id.apple.com; s=id2048; c=relaxed/relaxed;
q=dns/txt; i=@id.apple.com; t=1389858963;
h=From:Subject:Date:To:MIME-Version:Content-Type;
bh=K7IYEB1/kNZIMS3miJW1nrCpdRQ=;
b=L/6gPBQ6x+Kj+ROJB72OqV+w3HWFbXeYW1IoXxtmoE7sqm8K6PeEIN3nS31aQxmq
p0LDFqRq67g70+eFRQWp7CFllD3O59aTVvaG3kFxFo6o5yglFXPc6IiAwsXMueuk
iR17/+nRdRjLSJOHDbQcJgkipOT1HiFUay+/pm6Ul4Et1olgF+OuI/itpmfoKzGx
eJ8A5a5GcfM0OX89c5G/mSgITop77xt3OFAnHd+QkruEFuTPbh2ih4DFmcchsTIr
B5abP80VLH0QA0xgQJuwOd6xeMNWs2wFODb5bxI5opFT4ld4B2ktNonERDG6Merx
PFZUwZpnW1dMrEjdGd+xvA==;
This is the email header associated to said email and it's clearly coming from apple (check the ip)
If someone created an apple id with my email address shouldn't that email addres be verified before you can continue using it on apple sites ? (I have't created any so I don't know the procedure there)
<Email Edited by Host>
dogla wrote:
How is someone else able to create an Apple account with somebody else's email address??
You can create an Apple ID using any email address that is not already the primary email address of an Apple ID. That's why Apple sends a verification email, to make sure that the email address is both valid (as in, it actually exists) and the correct email address for the user that just created the Apple ID.
It doesn't even have to have a valid domain. You could mispell the domain (i.e., @gmall.com instead of @gmail.com), and the Apple ID would still create. You'd never see the verification email, and eventually have to change the Apple ID's primary email to a valid email address, so that you could verify it..
dogla wrote:
well someone on this discussion said that appleid.apple.com is a legit apple site....
It is.
What's your question?
I was just told that I shouldn't have gone on this legit apple site (appleid.apple.com). How on earth would you go about changing your account info then?
How can I remove this apple account with my email? I have full control over this account at the moment but I want to close or deactivate it. Is that possible?
dogla wrote:
How can I remove this apple account with my email? I have full control over this account at the moment but I want to close or deactivate it. Is that possible?
It's never "technically" removed, it always exists. You just need to ensure that you are the only one who exerts control over it. Make sure it has a unique password (not being used by you on another site) that you have never shared with anyone.
dogla wrote:
I was just told that I shouldn't have gone on this legit apple site (appleid.apple.com). How on earth would you go about changing your account info then?
I see, there may have been some confusion. The original post mentioned an entirely different email address, appleid@id.apple.com. What may be happening is that someone is trying to access your Apple ID. The system has sent a verification email to you. This should let you know that you should act to protect your account and information.
Not really, cuz the emails I received are notifications that my email was used to create an appleid, to sign in to iCloud and Facetime....
The verification email I received when someone entered my email address in his apple id. Oh well, I already changed the password so the person who used my email won't be able to sign in with this email anyway.
id.apple.com is not from Apple, And yes, apple should do something about this adress
appleid@id.apple.com is not from Apple
or apple@id.apple.com is not from Apple
id.apple.com is not the same as apple.com
The REAL DEAL is appleid@apple.com and https://appleid.apple.com
have a nice day
Message was edited by me to put the real apple directions
Begin forwarded message:
From: AppleiT <itcustomid@apple.com>
Subject: ΙD: 762184602
Date: February 9, 2014 at 5:27:11 PM MST
To: Janet Davenport Sisson <jdsisson@ucalgary.ca>
Reply-To: AppleiT <itcustomid@apple.com>
Dear jdsisson@ucalgary.ca,
You have a new message !
Spoofed. No legitimate company will ever email you and ask you to click on a link to another domain like what you've posted. Spam it!
I have just received one of these spoof emails. I find, as with all spoof emails, that if you hover over the link that they want you to clcik (DON'T click it), then it reveals the url of where it's really going. Absolute giveaway mostl;y.
Nothing in that suggests it is anything to do with Apple
But like others have said, if you haven't changed anything, you won't get a confirmation email. And why would Apple suddenly make your id expire in 24 hours?
Just sayin.....
<Link Edited By Host>
I don't think this has been mentioned yet in this thread, so I would suggest that if you received a phishing email like these, forward it to reportphishing@apple.com.
Thanks... I have just done that very thing.
The link you posted actually redirects to a completely different one.
I will not post the entire URL here but it begins with
http://www.brazilianrhythms.com/
... which is in all likelihood a totally legitimate website.
I redacted the remainder of the brazilianrhythms URL, which if present will load what appears to be a perfect duplicate of Apple's "My Apple ID" page:
Completing the Apple ID and password fields and clicking Sign In loads another page with practically all the information required to steal your identity (none of which is required by Apple when changing your Apple ID password by the way). Completing that page loads this one:
Who knows what a "3D Secure Password" is but it doesn't matter - by the time the above page loads your information has already been lifted.
No matter what is entered clicking "Verify your account" loads the following page where it mercifully abandons the hapless user:
Notice the "Welcome to Paypal" title though. Oops!!
All the pages are fairly authentic-looking. Some of the links are even legitimate. If they fool even a tiny percentage of Apple's half billion iTunes account holders, that's a lot of Apple ID and credit card information in the wind.
These phishing scams are very easy to perpetrate and are becoming more common. Be careful.
I received an email from appleid@id.apple.com requesting that I verify my Apple ID and password. Is it legitmate?
