Want to highlight a helpful answer? Upvote!

Did someone help you, or did an answer or User Tip resolve your issue? Upvote by selecting the upvote arrow. Your feedback helps others! Learn more about when to upvote >

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Email received from "iCloud”

Hi received an email from what looks to be an apple email address with a from tag of "iCloud" and address of noreply@ email.apple.***. It asked me to subscribe to a website promoting a calendar event from what is supposedly an Online Clearance Store of Polo Ralph Lauren selling T-shirts for $19. The website is poloshirtaas.***. Does anyone know if this is a legitimate promo through apple iCloud or is it a phishing scam?


Thanks,


Stephen


<Link Edited by Host>

MacBook Pro, Mac OS X (10.7.5), null

Posted on Jul 12, 2016 12:46 AM

Reply
13 replies

Apr 2, 2017 2:52 PM in response to In_need

My iphone 7 was stolen a week ago and I received emails about your iphone was erased and then another email about last location of my iphone7. ---This is a scam!


Apple Thieves are getting smarter-- trying to hack my icloud password after I remotely erased my stolen iPhone7: watch out for emails titled 'Find my iPhone' and sent from noreply@email.apple.*** or icloudserverapple@gmail.***--- These emails are fake! iCloud never records last location if the phone's erased or went offline!


You will realised that it's fake when you tried to enter the password in a web browser through its link because your correct ID or password was never recognised! -- They already stole your password by then. After a second later, you will receive an email from the real Apple store saying that someone tried to access your icloud through a firefox web browser even though you use a Chrome browser.


These emails below are from the scammers! If you see one of these, do you click into their links and enter your info! Go to icloud website directly and login there, then you will see the difference!


User uploaded file




<Links Edited by Host>

Nov 6, 2016 7:24 AM in response to In_need

noreply@email.apple.com.


I have censored my personal info.

Above is the email i got as well....i dont know if its legit it said ..

Dear Rxxxxx
Your Apple ID (xxxxxxxx93@live.ca) was used to sign in to iMessage on an iPhone 4s named “iPhone”.

Date and Time: November 6, 2016, 4:47 AM PST

Operating System: iOS 9.3.1

If the information above looks familiar, you can disregard this email.
If you have not recently signed in to an iPhone 4s with your Apple ID and believe someone may have accessed your account, go to Apple ID (https://appleid.apple.com) and change your password as soon as possible.
Apple Support

Apple ID | Support | Privacy Policy

Copyright © 2016

Apple Canada Inc., 120 Bremner Blvd., suite 1600, Toronto ON M5J 0A8, Canada. All rights reserved.




I dont even have an iphone 4s....infact only 7s Plus ....this is strange

Nov 6, 2016 7:41 AM in response to rabbyy1993

That email looks legitimate to me, the wording's correct, and the links in it go to Apple's sites (not phishing sites which I would expect if it wasn't legitimate). You haven't had a 4s, or let anybody know your id and password ? If it is legitimate, and your id is still logged in, the phone should show on your account on http://appleid.apple.com : Check your Apple ID device list to see where you're signed in - Apple Support


After you sign in on a device with your Apple ID, that device appears in the list. Here's where you need to sign in:

For iOS 9, sign in to iCloud, iMessage, FaceTime, the iTunes and App Store, or Game Center on the device. You can also see your paired Apple Watch.

...


As a precaution you should change the account's password via http://appleid.apple.com

And after changing it : What to do after you change your Apple ID email address or password - Apple Support

Nov 6, 2016 10:18 AM in response to rabbyy1993

This is the email that is a precursor to the Bad Actors using iMessage to SPAM folks in China

Your email address & password are apparently the same on some site that was compromised by hackers who then sell them on the Dark Web. There are no reports of which I am aware that Apple ID data has been hacked - so this means that they just "got lucky" that you used the same credentials in two (or more?) places


Changing your password everywhere that you use the same credentials will foil their nefarious plans

Email received from "iCloud”

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.