Email received from "iCloud”

I got this today to all 3 of my apple mail accounts:

From this email address: noreply@email.apple.com

I take it this is scam !

<Image Edited by Host to Remove Personal Information>

That email looks legitimate to me, the wording's correct, and the links in it go to Apple's sites (not phishing sites which I would expect if it wasn't legitimate). You haven't had a 4s, or let anybody know your id and password ? If it is legitimate, and your id is still logged in, the phone should show on your account on http://appleid.apple.com : Check your Apple ID device list to see where you're signed in - Apple Support

After you sign in on a device with your Apple ID, that device appears in the list. Here's where you need to sign in:

For iOS 9, sign in to iCloud, iMessage, FaceTime, the iTunes and App Store, or Game Center on the device. You can also see your paired Apple Watch.

...

As a precaution you should change the account's password via http://appleid.apple.com

And after changing it : What to do after you change your Apple ID email address or password - Apple Support

Yep = Phishing - the real key is that Apple knows your RealName and would never address you as "Dear User"

Avoid phishing emails, fake 'virus' alerts, phony support calls, and other scams - Apple Support

My iphone 7 was stolen a week ago and I received emails about your iphone was erased and then another email about last location of my iphone7. ---This is a scam!

Apple Thieves are getting smarter-- trying to hack my icloud password after I remotely erased my stolen iPhone7: watch out for emails titled 'Find my iPhone' and sent from noreply@email.apple.*** or icloudserverapple@gmail.***--- These emails are fake! iCloud never records last location if the phone's erased or went offline!

You will realised that it's fake when you tried to enter the password in a web browser through its link because your correct ID or password was never recognised! -- They already stole your password by then. After a second later, you will receive an email from the real Apple store saying that someone tried to access your icloud through a firefox web browser even though you use a Chrome browser.

These emails below are from the scammers! If you see one of these, do you click into their links and enter your info! Go to icloud website directly and login there, then you will see the difference!

<Links Edited by Host>

This is the email that is a precursor to the Bad Actors using iMessage to SPAM folks in China

Your email address & password are apparently the same on some site that was compromised by hackers who then sell them on the Dark Web. There are no reports of which I am aware that Apple ID data has been hacked - so this means that they just "got lucky" that you used the same credentials in two (or more?) places

Changing your password everywhere that you use the same credentials will foil their nefarious plans

I've asked the hosts to remove your Apple ID email address which is contained within your image - absolutely not safe to show that in an open forum; for your own safety, make sure you redact such info before posting something online.

An apple article is there for guidance : Identifying fraudulent "phishing" email - Apple Support

It is bogus. The domain http://poloshirtaas.us/ was registered yesterday in Jamaica.

tt2

You're welcome. 🙂

tt2

noreply@email.apple.com.

I have censored my personal info.

Above is the email i got as well....i dont know if its legit it said ..

Apple ID | Support | Privacy Policy

Copyright © 2016

Apple Canada Inc., 120 Bremner Blvd., suite 1600, Toronto ON M5J 0A8, Canada. All rights reserved.

I dont even have an iphone 4s....infact only 7s Plus ....this is strange

Wow...I agree thank you so much thats very helpful...I'm pretty sure someones gained access or something. I hope its not too late!!

typo in the last sentence: do * NOT click into their links and enter your info!