branch
Level 1 (4 points)
Desktops

Q: email from apple support/ id will be locked-legit?

Is this a scam?

Your Apple ID will be locked in the next 24 hours because we suspect some fraudulents actions that belong to your account.

Case id : 9000321-128. Login attemt from unkown device.

We recently noticed a pattern of account activity that, in our experience, is usually high risk. It's usually pretty easy to take care of things like this. Most of the time, we just need a little more information about your account.To help us with this and to see what you can and can't do with your account please reset your account by clicking reset my account.

iMac, Mac OS X (10.7.5), 27 inch, Mid2011, 2.7 Ghz Intel Cor

Posted on Jun 19, 2015 10:44 AM

by Lawrence Finch,Solvedanswer
Lawrence Finch Lawrence Finch
Level 8 (38,305 points)
Mac OS X
A:

Also forward it to reportphishing@apple.com. They will have the site shut down.

Posted on Aug 30, 2015 2:13 PM

Close
branch

Q: email from apple support/ id will be locked-legit?

  • All replies
  • Helpful answers

  • by Ralph Landry1,

    Ralph Landry1 Jun 19, 2015 10:47 AM in response to branch
    Level 8 (41,782 points)
    Jun 19, 2015 10:47 AM in response to branch

    Scam - see: https://support.apple.com/en-us/HT204759

     

    If in doubt, contact Apple directly, contact information is on these communities pages...do not respond or click on any link in that email.

  • by branch,

    branch branch Jun 19, 2015 4:19 PM in response to Ralph Landry1
    Level 1 (4 points)
    Desktops
    Jun 19, 2015 4:19 PM in response to Ralph Landry1

    It looked so official, but apparently you are right it is a scam. the hotlink to reset my account address is htpps://tr.im/loginss!404

    The email came from: My apple-ID <yourappleid.en@icloud.com> Had the apple logo even.

     

    Dear Client,                                                                                          

     

    Your Apple ID will be locked in the next 24 hours because we suspect some fraudulents actions that belong to your account.

    Case id : 9000321-128. Login attemt from unkown device.

    We recently noticed a pattern of account activity that, in our experience, is usually high risk. It's usually pretty easy to take care of things like this. Most of the time, we just need a little more information about your account.To help us with this and to see what you can and can't do with your account please reset your account by clicking reset my account.

    To reset your account please enter the link below :

    Reset my account

    Sincerely,

    Apple Support

    apple.com/support

     

         Support Resources         Express Lane    

    My Support Profile

    Support Telephone Numbers Worldwide

    Apple Support Communities

    Need more help? Use Express Lane to contact us for personalized and convenient support.

    TM and copyright © 2015 Apple Inc. 1 Infinite Loop, MS 96-DM, Cupertino, CA 95014.

    All Rights Reserved / Privacy Policy / Apple Support

     

    While trying to copy the address, I accidently clicked the link.  Now what do I need to do?

  • by Niel,

    Niel Niel Jun 19, 2015 4:22 PM in response to branch
    Level 10 (314,589 points)
    Mac OS X
    Jun 19, 2015 4:22 PM in response to branch

    If you didn't provide any personal information at the site the link pointed to, nothing. If you did, even if you didn't submit any forms, consider it to be compromised.

     

    If you'd like to be absolutely sure, keep an eye out for odd behavior on the computer.

     

    (128922)

  • by Ralph Landry1,

    Ralph Landry1 Jun 19, 2015 5:21 PM in response to branch
    Level 8 (41,782 points)
    Jun 19, 2015 5:21 PM in response to branch

    That is a scam, Apple does not work that way even if you received an email with the Apple logo on it.  I agree with Niel, if you did not respond with any personal information you are fine.  If you did, you need to take steps to protect that information.  If anything like a credit card or card information, contact the credit card issuer and report a compromised card and get a replacement.  If any other kind of account information, including Apple ID, change the passwords immediately.

     

    In the US you can get one free credit report a year from each of the three credit bureaus so that is three reports a year.

     

    To request a free credit report: http://www.AnnualCreditReport.com or 1-877-322-8228.  The three credit bureaus are - Equinox, Experian, and TransUnion.  Their contact information is available at http://www.ftc.gov

  • by Ralph Landry1,

    Ralph Landry1 Jun 19, 2015 5:32 PM in response to branch
    Level 8 (41,782 points)
    Jun 19, 2015 5:32 PM in response to branch

    A further tip: the first site you are directed to, htpps://tr.im/loginss!404 is absolutely bogus - Apple does not do business of this nature from the Isle of Man (the .im domain).  Anything from Apple that is legitimate will direct you to an Apple.com domain.  And most common is to see Apple spelled Appel or some other variation that most users gloss over while reading the directions - the scare tactics are very effective at getting you to ignore or not see the discrepancies.  These people are great at psychology.

  • by Lawrence Finch,

    Lawrence Finch Lawrence Finch Jun 19, 2015 6:04 PM in response to Ralph Landry1
    Level 8 (38,305 points)
    Mac OS X
    Jun 19, 2015 6:04 PM in response to Ralph Landry1

    I've also seen app1e.com, and many other variations. One tip that I will offer is that you should make your email app a little less friendly. Go to mail Preferences, Viewing tab, and UNCHECK "Use Smart Addresses". This will force mail to display the actual email address of the sender rather than what they want you to see.

  • by TheGuyintheProjectionBooth,

    TheGuyintheProjectionBooth TheGuyintheProjectionBooth Aug 30, 2015 1:29 PM in response to Lawrence Finch
    Level 2 (208 points)
    Mac OS X
    Aug 30, 2015 1:29 PM in response to Lawrence Finch

    Just got one myself. I hovered over the "Reset my account" link and got, http://ow.ly/RxH7d as the link address which is attached to a lot of curious places if Googled. Which if legal, I would imagine that it would have an Apple something in there. Although as per another Apple article that talks about phishing and scams, the way they tell you to find out where it came from using header information, on mine, shows it's from Apple as are all the other links on the page. Some homework was done there. It even has the TRUSTe logo.

     

    But one of the first gave-a-ways is the typos in the error line: Case id : 9000321-128. Login attemt from unkown device.

     

    When that happens and it has legitimately, I get an immediate eMail with the correct and proper information on it as to the device and where it was used to login into. Which would happen if you have many Apple devices that you use on these services.

     

    Another eMail off to SPAMCop.

  • by Lawrence Finch,Solvedanswer

    Lawrence Finch Lawrence Finch Aug 30, 2015 2:13 PM in response to TheGuyintheProjectionBooth
    Level 8 (38,305 points)
    Mac OS X
    Aug 30, 2015 2:13 PM in response to TheGuyintheProjectionBooth

    Also forward it to reportphishing@apple.com. They will have the site shut down.

  • by TheGuyintheProjectionBooth,

    TheGuyintheProjectionBooth TheGuyintheProjectionBooth Aug 30, 2015 2:20 PM in response to Lawrence Finch
    Level 2 (208 points)
    Mac OS X
    Aug 30, 2015 2:20 PM in response to Lawrence Finch

    Done. Set to both.