HT201363: About Apple ID security questions

Learn about About Apple ID security questions
Cowboybuddha

Q: Apple Security Can't Reset Security Questions? Apple ID loophole

I just got off the phone with Apple Security and I'm a bit baffled and annoyed that they can't 1) reset an account's security questions, or 2) outright delete it. Here's the scenario:

 

1) Someone in Vietnam creates an Apple ID, password, security questions, etc using my mom's gmail account. This is a complete stranger, and they don't have access to my mom's gmail account so they can't verify it. I'm not sure when this was done, but it's saved to Apple's account.

 

2) I bought my mom her first Apple product, an iPad, we're in Canada. I can't create an Apple ID, so I reset the password... I'm confused as this account shouldn't exist. I successfully reset the password, and when I log in, the First Name, Last Name, birthday are all foreign. I change the names, but I can't change the birthday without answering security questions in Vietnamese. ???  I try to reset the security questions, and it prompts me again to answer the security questions I didn't create nor can I read.

 

3) I call in, the Security team can't reset the security questions or delete them. I get escalated and the manager can't do it either, they get these prompts, so she gives up and tells me to abandon ship and use a different email account or use iCloud. I don't want to use iCloud or a different email address...

 

So I'm wondering, how in the world is this possible? How can a stranger sabotage someone's potential or future Apple ID? And why can't Apple close this loophole?

 

PS: Here's the reference. It makes no sense as I get prompted when I try to reset the Security Questions...

If you forgot the answers to your Apple ID security questions - Apple Support.

iPad Air, iOS 9.0.2

Posted on Jan 5, 2016 1:19 PM

Close

Q: Apple Security Can't Reset Security Questions? Apple ID loophole

  • All replies
  • Helpful answers

  • by ChitlinsCC,

    ChitlinsCC ChitlinsCC Jan 5, 2016 2:06 PM in response to Cowboybuddha
    Level 5 (7,468 points)
    Notebooks
    Jan 5, 2016 2:06 PM in response to Cowboybuddha

    Wow! Bummer!

     

    Out of curiosity... how far up the ladder did you progress? (I have actually gone 5 levels and 7 fone transfers once - different issue, of course)

     

    The reason I ask is that you may have stumped the last specialist, but there MAY be another even more experienced. Ultimately, every Apple ID is merely a database record and CAN be gotten to on the "table" level - i.e., it looks like a spreadsheet where one can make anything at all happen if you have permission to "save" it

     

    EDITadded

    This last is a ROYAL PAIN for Apple. They may believe that the trouble is not worth it and not be saying so?

  • by Cowboybuddha,Solvedanswer

    Cowboybuddha Cowboybuddha Jan 5, 2016 3:04 PM in response to Cowboybuddha
    Level 1 (0 points)
    Jan 5, 2016 3:04 PM in response to Cowboybuddha

    I called again and had the issue solved! Got someone from the Security team again, and we were able to troubleshoot it together. The iPad wasn't showing in their system (serial number), despite being logged in to iTunes (iPad) and in Apple ID to generate PIN (desktop). However, I logged into to iCloud in the iPad with her account, and after that, the iPad showed up in their system. He was able to send the iPad a verification code, and after confirming it, was able to reset the security questions!

     

    I'm not sure why the first two support folks I talked to couldn't figure this one out with me, but regardless, happy that I can use my mom's email address as her Apple ID and not iCloud! Great support the second time around. Yes!!

  • by ChitlinsCC,

    ChitlinsCC ChitlinsCC Jan 5, 2016 3:18 PM in response to Cowboybuddha
    Level 5 (7,468 points)
    Notebooks
    Jan 5, 2016 3:18 PM in response to Cowboybuddha

    Excellent!!

     

    This is not the first report of an Apple device of some kind not showing up in their very own database = very weird - they should form a Task Force to investigate!

     

    I have always advocated that polite persistence, insisting on elevating the issue until it is resolved, is the only course to accept - Apple is chock full of very smart folks with lots of tricks that their underlings know nothing of (I believe there are "levels" of Knowledge Base access, deduced from my experiences)

     

    Happy New Year

    https://bhikkhucintita.files.wordpress.com/2012/03/dalailamacowboy.jpg