Learn, share, and get recognized

Learn more about the Apple Support Community >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

User profile for user: DaxFlame
DaxFlame Author
User level: Level 1
0 points

Is this email and website fake?

Hey guys, so I was emailed by 'apple' saying that someone has apparently logged in my account and bought an app. Here is a picture. http://gyazo.com/edbcbe4c300c4b80df6574604ae597c3

So I clicked on the link they provided at the bottom to cancel this transaction and get a refund. Here is the link - http://ktmcapital.net.au/au/?jeqldvexfzmvmgurvpq/M=5033325&N=18261&L=0720&F=H#34 01952154

I'm no computer expert and don't have the knowledge to know if it's fake or not but I just had a bad feeling. The email looked legit and the website looked pretty normal but when i logged in, it asked for my credit card details. Which I found quite odd, so I didn't bother. I quickly changed my password after that.

So basically, I just want to know if this email was really from apple?

Thanks!

Posted on May 14, 2015 3:08 AM

Reply
Question marked as Best reply
User profile for user: stedman1
stedman1
Community+ 2024
User level: Level 10
256,290 points

Posted on May 14, 2015 3:10 AM

It is a phishing attempt. Do not respond. Do not divulge any personal or financial information. You can use the address below to forward the suspect email message to Apple.

reportphishing@apple.com



The link below has information to help identify fraudulent emails.

http://support.apple.com/kb/HT4933

View in context
4 replies
User profile for user: ChitlinsCC
ChitlinsCC
User level: Level 7
20,924 points

May 14, 2015 11:49 AM in response to DaxFlame

You were very smart and LUCKY that you did not fall for this one - it is one of the slickest forgeries I have yet seen.


Your link for ktmcapital.net.au actually redirects takes you to the URL


appleid-co.uk-refund-updateid-8055.ammico.com/*****


this is the screenshot that is absolutely PERFECT with the exception of the URL of where it comes from and where it goes on [Sign in]

User uploaded file

All the links an the page are genuine on hover -

Page Source is very suspect (see UNindented source code)

> download and OPEN with a text editor <

https://www.dropbox.com/s/v6za53gfvq4k8ph/appleid-co.uk-refund-updateid-8055.amm ico.com.htm?dl=0


FILL out with FAKE AppleID = BugsBunny & password = wascallywabbit > [Sign in] button = >


>> the data collection page (I'll let the detectives get to the bottom of where this actually is sent on [Submit]

User uploaded file


Oddly enough... the URL's "Domains" are legit businesses


- they have been hacked! - just a file stuck down deep in the directories is all it takes


ktmcapital.net.au is A1 legit - http://www.scamadviser.com/check-website/ktmcapital.net.au

User uploaded file


ammico.com seems legit - a TANGO school no less! - http://www.scamadviser.com/check-website/ammico.com

**but could be in cahoots?

User uploaded file


Suspicious minds are definitely in order in the days in which we live

ÇÇÇ

Reply

Is this email and website fake?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.
Learn more Sign up