is this a fake email?

email says apple id locked, then another says review your case about someone in russia attempting to use it?

is this fake email..how would I know?

thanks

Posted on Feb 10, 2017 8:28 AM

Reply
Question marked as ⚠️ Top-ranking reply

Posted on Feb 10, 2017 8:41 AM

What address is it coming from? Is the email using your name? Does it have any links?


Identifying legitimate emails from the iTunes Store - Apple Support

http://www.apple.com/legal/more-resources/phishing/


The email its coming from should always end in apple.com.


Emails from Apple will always address you by name, and never by "Dear customer" or "Dear Sir or Madame"


Apple will never ask for private details through email.


You can always log in to http://appleid.apple.com with your Apple Id and passworrd, and if it is locked it will tell you there, and will tell you what to do to unlock it.

12 replies
Sort By: 
Question marked as ⚠️ Top-ranking reply

Feb 10, 2017 8:41 AM in response to Lassieloo

What address is it coming from? Is the email using your name? Does it have any links?


Identifying legitimate emails from the iTunes Store - Apple Support

http://www.apple.com/legal/more-resources/phishing/


The email its coming from should always end in apple.com.


Emails from Apple will always address you by name, and never by "Dear customer" or "Dear Sir or Madame"


Apple will never ask for private details through email.


You can always log in to http://appleid.apple.com with your Apple Id and passworrd, and if it is locked it will tell you there, and will tell you what to do to unlock it.

Reply

Feb 16, 2017 1:20 PM in response to Deborah Gotto

The email is fake. Its a phishing attempt to get your details. The URL in the "Click Here" link takes you to a fake site that is trying to imitate Apple's website.


Forward the email to Apple as per the instructions in this support document:

http://www.apple.com/legal/more-resources/phishing/


And then delete the email.

Reply

Feb 10, 2017 9:01 AM in response to Phil0124

Hi, thanks for your reply...It is addressed to me using my name

it says - your apple id and then name my apple id..was used to sign in to iCloud via a web browser ..it then gives IP address then Russian Federation Moscow.

i received another email saying my account need some issues dealt with..but I deleted it..as that one definitely looked suspicious.


Donna

Reply

Sep 23, 2017 11:14 AM in response to Phil0124

I have this email coming to me too, but I'm pretty sure it is a fake. The email it is sent from is noreply@email.apple.***. It also starts out as Dear User. I've gotten several of these in the past few days.


EMAIL TEXT


Dear User,


Your AppleID has been locked for security reasons.


Due to a suspicious activity we require additional verification

to confirm your identity by signing in and resolving this dispute

Please Click Here to re-activate your account.


We may also take action to terminate your account if we are unable to verify or

authenticate any information you provide to us.




Thank You


Apple Support


<Links Edited by Host>
Reply

Sep 19, 2017 4:52 AM in response to Lassieloo

I was confused because the email came from what appeared to be a legitimate apple email address; "iTunes Store <itunes-security@email.apple.****>". The subject line was "[Apple Disabled] Fraud Activity : Please review your receipt from AppIe iTunes". It just delivered a NETFLIX receipt for $44 in the body. Since I logged onto this apple forum my apple ID was obviously not compromised.
<Email Edited by Host>

Reply

Sep 23, 2017 8:34 AM in response to Rarebear14

Rarebear14 wrote:


I just got this 'locked' email, the address

points to

yqnsbmkasmisa9551133-kaks541255e-e9@berhandsdev.com


Looks a phishing attempt, they want my

creditcard number and CVC code !


No way !!!!

It very likely is a phishing attempt. You can submit the address to Apple as explained above.

Reply

Sep 23, 2017 9:50 AM in response to Phil0124

When you simply FORWARD a suspicious email, the original sender information and its route through the Internet to you are typically deleted. Forwarded emails are of limited value to the webmaster.


You can be most helpful if you use this recipe to send the email to a webmaster as an example of a phishing attempt:


1) In Apple mail, select the message.

2) From the View menu choose "Raw Source". A new window with the internal addressing information appears (looks like a whole lot of numbers and letters, not nice text).

3) Start a new email to:

reportphishing@apple.com

or if it came though your iCloud account:

abuse@icloud.com


4) cut and paste the entire "Raw Source" window into the body of the new email.

5) give it a subject like "possible phishing email included" and click send.


You may also be able to ATTACH the email you received as an Attachment to a new email you create, but I am not certain of whether this works as expected in all cases.

Reply

Oct 5, 2017 9:02 PM in response to Lassieloo

BEWARE!!! DO NOT LOGIN when you see this message! They are trying to steal your credentials. It looks like this "https:://appleid.apple.com/activity" and if you click the link it actually takes you to this address - https://techaccount.gq/Login.php?sslchannel=true&sessionid=OdQzMRzw07U61gJy4u8g1BCV88j2H7uwlk67cGEcNyj OO3mTyv9A6MvfVPhDW…


NOTICE - techaccount.gq vs what appeared to be appleid.apple.com in the original email.

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

is this a fake email?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.