Quick question to see if I'm not alone in this... I get Apple ID Password Reset request e-mails every couple of days but I never requested that my Apple ID password to be reset.
Usually it is two or three times in a row on the same day and then nothing for 3 or 4 days and then again once or twice on a day. This has been happening pretty consistently since at least May of 2011.
The e-mail is a pretty standard reset e-mail from Apple. It comes from email@example.com and it provides a link which the message says will expire in 3 hours. It also says that if you didn't request this reset, that it is most likely someone who has mistyped their e-mail address and you can safely ignore this message. But this is happening far too often for someone to honestly be mistyping their email address. My name is not a common name nor is the domain name of e-mail address easily mistaken for common ones. I'm using a private domain not any one of the big free e-mail services.
At first I thought that these might be phishing attempts so I never clicked on them. However when they didn't stop, I dug a bit deeper. They seem to be legitimate messages from Apple. The URL linked to is a unique URL which is at iforgot.apple.com. So I took a chance one day and when I clicked on the link, it took me to a page which I confirmed is on the Apple site and allows me to enter my security questions. Again I never actually completed this process since I never needed to reset the password of my Apple ID but based on my research, the e-mails seem to be legitimate.
Note that I have a personal Apple ID as well as one for work and this seems to happen primarily with only my personal Apple ID. Although it does happen with the other one but that is very rare. With the personal one it is happeneing at least once every few days.
Is anybody else experiencing this? Any idea how to stop them or what to do about them? For now I'm just ignoring the e-mails but they are anoying and they make me wonder what (or who) is triggering them and what else that means.
P.S. If there are any Apple ID product managers/engineers on here, maybe you folks want to look at how you send out those e-mails or manage the password reset process, because with this system it would be pretty easy for a malicious person use such e-mails to phish info from customers. I'm more suspicious of password reset e-mails (especially if I didn't knowingly trigger them) but not every one is.
P.P.S. Moderators: There isn't an Apple Support Community specifically for Apple ID so I posted this in the Using Support Communities commuity. However Apple ID is a very important service/product that Apple has and so I think it would be wise to add such a community.