You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Is this email fake?

User uploaded file

i got this after I pre ordered the iPhone 7. Thing is: I placed 2 separate orders. Shouldn't I have gotten 2 of these? The link take you to this address: https://buyiphone2.apple.com/WebObjects/IPACustomer.woa/wa/IPAPreAuthAction/edit Order

i looks legit, but it's very sketch. Never mentions my name. Order number. It wants me to log in with either my Apple ID & password.... Or the reservation number in the email and my phone number.

I Tried the reservation and a fake phone number and it says it cant find my reservatio. It then props me to login with Apple ID and password again.

I Tried to go thro the I forgot my password link and it brings you here:

https://iforgot.apple.com/password/verify/appleid?&language=US-EN&app_id=2083&pr s_account_nm=sab333%40cornell.edu&newWin…

ANother funny thing is that the Apple ID email box was already filled out... And I don't recognize it:

****

i don't know if I'm just being paranoid or being smart. Please help me out.



<Personal Information Edited by Host>

Posted on Sep 9, 2016 7:54 AM

Reply
21 replies

Sep 9, 2016 8:21 AM in response to Kurt Lang

Extra info if you want to help get this jerk arrested for running a scam. The address does indeed resolve to Cornell University.


Domain Name: CORNELL.EDU


Registrant:

Cornell University

Cornell Information Technologies

Network Operations Center 729 Rhodes Hall

Ithaca, NY 14853

UNITED STATES


Administrative Contact:


Cornell Information Technologies

Cornell Information Technologies

Cornell University

729 Rhodes Hall

Ithaca, NY 14853

UNITED STATES

+1-607-255-5500

noc@cornell.edu


Technical Contact:

Daniel Eckstrom

Cornell Information Technologies

Cornell University

731 Rhodes Hall

Ithaca, NY 14853

UNITED STATES

+1-607-255-5902

de10@cornell.edu


They don't offer a toll free number, but you can ask for the admin staff and let them know you received an email from someone through their email server running an illegal scam operation. May have come from inside the campus, or from the user's home if they live close enough to commute and accessed their assigned email account from there.


Either way, the university will know who sab333 is assigned to and can take action from there. Save the email in case they ask you to forward it to them for confirmation of such illegal activity.

Sep 9, 2016 8:37 AM in response to elamparo

it is very fishy. But even the Header at the top of the link has the green secure lock symbol and APPLE INC. Never once gives me any of my info that it shud already know. Name, address, order number, nothing. What's scary is the urgency of the email too. If I do not confirm by 4:00pm pdt, then i wont have my order processed. might as well threaten to start cutting off my kids fingers as you count down the minutes!

Sep 9, 2016 8:49 AM in response to elamparo

Apple will never, ever, send out an email with a generic "Dear Apple Customer" salutation. You will always be addressed by name.


You can call Apple's Customer Service and give them that supposed reservation number. I can almost 100% guarantee you they will not have such a number on record.


iforgot.apple.com and buyiphone2.apple.com are indeed both owned by Apple. They also resolves to Apple in a DNS search. However, that only proves the person who sent the email stuck in legitimate links.

Sep 9, 2016 8:53 AM in response to elamparo

Hello elamparo,

I'm very skeptical that a student at Cornell university would be running a scam like this, and under his own e-mail no less. One would think that a Cornell student could afford to buy his own phones and would be smart enough not to hack under his own name. I think it is far more likely that Apple did not hire Cornell students to run its pre-ordering system. It got overloaded and started recycling web sessions. You accidentally wound up with some one else's HTTP connection. This certainly wouldn't be the first time a bug like this happened on an Apple server.


You should be able to check the status of your order here: http://www.apple.com/shop/help/viewing_changing_orders


If not, you can call Apple directly.

Sep 9, 2016 3:51 PM in response to Kurt Lang

What address resolves to Cornell? The domain in the link, https://iforgot.apple.com/password/verify/appleid?&language=US-EN&app_id=2083&pr s_account_nm=sab333%40cornell.edu&newWin… is apple.com. The link provided by the OP goes to Apple's web site. The login box is pre-populated with an email address at Cornell. I suspect this email address is the OP's since the link was originated by him to retrieve a forgotten password.

Sep 9, 2016 5:19 PM in response to elamparo

i do not know this email address at all. I used my iPhone to go through these steps and it automatically fills this in when I follow the "I forgot" my password links. Yes very fishy! and I called the number by hand (punched in the numbers my self) from the official apple website. Over an hour wait this morning bc the launch of the 7's and gen 2 watches

Sep 9, 2016 6:07 PM in response to elamparo

If email is unknown to you, the only conclusion one can make is that Apple "got its wires crossed" somehow.

It is not unheard of... but rare.

When *I* choose the first link, I am presented with a login page...

Did you enter YOUR OWN Apple ID credentials? (email addy + password)

When I try it, I get an error

We’re sorry. We can’t find your reservation. Please verify your information and try again.

iForgot link on that page takes me to the page I would expect to see = BLANK

User uploaded file

Is this email fake?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.