Q: I received an email from appleid@id.apple.com requesting that I verify my Apple ID and password.  Is it legitmate?

Yes

Zilli3 wrote:

 

Apple should be knowing abouting this phishing shmishing and be doing someting to putting stopping it.

Apple does not control the internet.

Zilli3 wrote:

 

Apple should be knowing abouting this phishing shmishing and be doing someting to putting stopping it.

Every legitimate company in the world would love to stop spam and phishing attempts in their name.  But with 7+ Billion people in the world, hundreds of millions of computers, some 196 national borders (depends who you ask how many nations there actually are) all with different laws, and an internet system that inherently freely roams actoss those borders, nationalities and nation's laws, it is simply impossible to stop someone from setting up a basement server and doing pretty much whatever they wish to.  Even if you stop some of them in some countries, some other one pops up somewhere else - often in a country where the authorities truly have far more pressing issues than someone being bothered by some spam and really do not care about such relatively trivial things.

It is ridiculous to expect any one corporation to be able stop all spam and phishing emails originating from anywhere on the planet.

it was a joke.

Zilli3 wrote:

 

it was a joke.

This forum community exists to suggest strategies to help with your problems.  Might I sugggest enrolling in classes at your local community center? Specifically look for ones focusing on irony, idioms and creative writing for comedy.

Hi ppl,

I got the same email, when i tryed to update my apps on my ipad, my pw would not work, i have been to apple official website my self and changed my pw, but i am very worried that this was possible.

if you get this email, play safe, just goto apple account your self (not from the email) and change ur pw

Hi, this morning I received 3 emails from Apple (or so I think).

For one....my name ISN'T Abdallah al zain, I never create an apple id  simply becaue I don't have any apple products. Then I went to appleid.apple.com and tried to log in, but clicked on forgot password, so I was able to reset the password. After succesfully logging in with this id I could see the account info.....I checked the addresses and this is what I got:

Primary Address

Abdallah  Al zain

Ghhh

Bbzjb

Dnzjbshnz

00966

Saudi Arabia

How is someone else able to create an Apple account with somebody else's email address??

Because that was not apple. It's a hacker. You should not have gone on that website. The email address that you used is now at risk if it was a real one.

well someone on this discussion said that appleid.apple.com is a legit apple site....it's even a secure site https://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa/

Apple wouldn't send you an email if you don't have any apple products and don't have an Apple ID. Where do you think they would get your email address from?

Delivered-To:

Received: by 10.68.80.73 with SMTP id p9csp423275pbx;

        Wed, 15 Jan 2014 23:56:03 -0800 (PST)

X-Received: by 10.68.203.163 with SMTP id kr3mr8334427pbc.33.1389858963485;

        Wed, 15 Jan 2014 23:56:03 -0800 (PST)

Return-Path: <Do_not_reply@id.apple.com>

Received: from nwk-txn-msbadger0304.apple.com (nwk-txn-msbadger0304.apple.com. [17.151.1.54])

        by mx.google.com with ESMTP id rx8si6218145pac.250.2014.01.15.23.56.03

        for <

        Wed, 15 Jan 2014 23:56:03 -0800 (PST)

Received-SPF: pass (google.com: domain of Do_not_reply@id.apple.com designates 17.151.1.54 as permitted sender) client-ip=17.151.1.54;

Authentication-Results: mx.google.com;

       spf=pass (google.com: domain of Do_not_reply@id.apple.com designates 17.151.1.54 as permitted sender) smtp.mail=Do_not_reply@id.apple.com;

       dkim=pass header.i=@id.apple.com;

       dmarc=pass (p=REJECT dis=NONE) header.from=id.apple.com

DKIM-Signature: v=1; a=rsa-sha1; d=id.apple.com; s=id2048; c=relaxed/relaxed;

q=dns/txt; i=@id.apple.com; t=1389858963;

h=From:Subject:Date:To:MIME-Version:Content-Type;

bh=K7IYEB1/kNZIMS3miJW1nrCpdRQ=;

b=L/6gPBQ6x+Kj+ROJB72OqV+w3HWFbXeYW1IoXxtmoE7sqm8K6PeEIN3nS31aQxmq

p0LDFqRq67g70+eFRQWp7CFllD3O59aTVvaG3kFxFo6o5yglFXPc6IiAwsXMueuk

iR17/+nRdRjLSJOHDbQcJgkipOT1HiFUay+/pm6Ul4Et1olgF+OuI/itpmfoKzGx

eJ8A5a5GcfM0OX89c5G/mSgITop77xt3OFAnHd+QkruEFuTPbh2ih4DFmcchsTIr

B5abP80VLH0QA0xgQJuwOd6xeMNWs2wFODb5bxI5opFT4ld4B2ktNonERDG6Merx

PFZUwZpnW1dMrEjdGd+xvA==;

This is the email header associated to said email and it's clearly coming from apple (check the ip)

If someone created an apple id with my email address shouldn't that email addres be verified before you can continue using it on apple sites ? (I have't created any so I don't know the procedure there)

<Email Edited by Host>

dogla wrote:

 

How is someone else able to create an Apple account with somebody else's email address??

You can create an Apple ID using any email address that is not already the primary email address of an Apple ID.  That's why Apple sends a verification email, to make sure that the email address is both valid (as in, it actually exists) and the correct email address for the user that just created the Apple ID.

It doesn't even have to have a valid domain.  You could mispell the domain (i.e., @gmall.com instead of @gmail.com), and the Apple ID would still create.  You'd never see the verification email, and eventually have to change the Apple ID's primary email to a valid email address, so that you could verify it..

dogla wrote:

 

well someone on this discussion said that appleid.apple.com is a legit apple site....

It is. 

What's your question?

I was just told that I shouldn't have gone on this legit apple site (appleid.apple.com). How on earth would you go about changing your account info then?

How can I remove this apple account with my email? I have full control over this account at the moment but I want to close or deactivate it. Is that possible?

dogla wrote:

 

How can I remove this apple account with my email? I have full control over this account at the moment but I want to close or deactivate it. Is that possible?

It's never "technically" removed, it always exists.  You just need to ensure that you are the only one who exerts control over it.  Make sure it has a unique password (not being used by you on another site) that you have never shared with anyone.

dogla wrote:

 

I was just told that I shouldn't have gone on this legit apple site (appleid.apple.com). How on earth would you go about changing your account info then?

I see, there may have been some confusion.  The original post mentioned an entirely different email address, appleid@id.apple.com.  What may be happening is that someone is trying to access your Apple ID.  The system has sent a verification email to you.  This should let you know that you should act to protect your account and information.