Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Is an email from @email.apple.com legit?

I had a user receive an email from noreply@email.apple.com saying their account was logged into with iMessage. Is this a phishing email?

iPad Pro, iOS 10.0.1, apple id

Posted on Oct 20, 2016 7:50 AM

Reply
Question marked as Best reply

Posted on Oct 20, 2016 9:18 AM

It's where my emailed iTunes receipts come from. If it is a legitimate email, and if you didn't log or re-log into your account in Messages on an iOS device or computer yourself, change the account's password via http://appleid.apple.com (What to do after you change your Apple ID email address or password - Apple Support)

6 replies
Question marked as Best reply

Oct 20, 2016 9:18 AM in response to ronald fromfairfield

It's where my emailed iTunes receipts come from. If it is a legitimate email, and if you didn't log or re-log into your account in Messages on an iOS device or computer yourself, change the account's password via http://appleid.apple.com (What to do after you change your Apple ID email address or password - Apple Support)

Oct 20, 2016 9:22 AM in response to ronald fromfairfield

@email.apple.com is, yes, a subdomain (not an account) Apple uses normally for informational emails. From the iTunes store, iCloud services such as find my iPhone etc...


But as was said this can be easily faked or spoofed, so just because the address is one apple uses, does not guarantee the email is from Apple.


The no_reply bit means there is no actual account behind that address to send email to.

Dec 16, 2018 4:37 PM in response to Phil0124

The body of the message was as follows:


"

Dear *******,

Your Apple ID (*******) was used to sign in to iMessage on an iPhone 4s named “iPhone”.

Date and Time: ******

Operating System: iOS 8.3

If the information above looks familiar, you can disregard this email.

If you have not recently signed in to an iPhone 4s with your Apple ID and believe someone may have accessed your account, go to Apple ID (https://appleid.apple.com) and change your password as soon as possible."

Apple Support



I removed the users name. He did not login on a 4s and his apple id was locked for security reasons. For preventative measures we reset password and checked the devices linked to account.

Oct 20, 2016 7:54 AM in response to ronald fromfairfield

Is the email personalised, and have proper English (or whatever language you have emails set to be in) and grammar ? And if the email has any links in it you've checked them (e.g. by hovering your mouse pointer over them ? My emailed iTunes store receipts come from 'no_reply@email.apple.com', but it's fairly easy to spoof the 'sent from' address on an email

Is an email from @email.apple.com legit?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.