You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

is this a fake email?

email says apple id locked, then another says review your case about someone in russia attempting to use it?

is this fake email..how would I know?

thanks

Posted on Feb 10, 2017 8:28 AM

Reply
Question marked as Top-ranking reply

Posted on Feb 10, 2017 8:41 AM

What address is it coming from? Is the email using your name? Does it have any links?


Identifying legitimate emails from the iTunes Store - Apple Support

http://www.apple.com/legal/more-resources/phishing/


The email its coming from should always end in apple.com.


Emails from Apple will always address you by name, and never by "Dear customer" or "Dear Sir or Madame"


Apple will never ask for private details through email.


You can always log in to http://appleid.apple.com with your Apple Id and passworrd, and if it is locked it will tell you there, and will tell you what to do to unlock it.

12 replies
Question marked as Top-ranking reply

Feb 10, 2017 8:41 AM in response to Lassieloo

What address is it coming from? Is the email using your name? Does it have any links?


Identifying legitimate emails from the iTunes Store - Apple Support

http://www.apple.com/legal/more-resources/phishing/


The email its coming from should always end in apple.com.


Emails from Apple will always address you by name, and never by "Dear customer" or "Dear Sir or Madame"


Apple will never ask for private details through email.


You can always log in to http://appleid.apple.com with your Apple Id and passworrd, and if it is locked it will tell you there, and will tell you what to do to unlock it.

Feb 10, 2017 9:01 AM in response to Phil0124

Hi, thanks for your reply...It is addressed to me using my name

it says - your apple id and then name my apple id..was used to sign in to iCloud via a web browser ..it then gives IP address then Russian Federation Moscow.

i received another email saying my account need some issues dealt with..but I deleted it..as that one definitely looked suspicious.


Donna

Sep 23, 2017 11:14 AM in response to Phil0124

I have this email coming to me too, but I'm pretty sure it is a fake. The email it is sent from is noreply@email.apple.***. It also starts out as Dear User. I've gotten several of these in the past few days.


EMAIL TEXT


Dear User,


Your AppleID has been locked for security reasons.


Due to a suspicious activity we require additional verification

to confirm your identity by signing in and resolving this dispute

Please Click Here to re-activate your account.


We may also take action to terminate your account if we are unable to verify or

authenticate any information you provide to us.




Thank You


Apple Support


<Links Edited by Host>

Sep 19, 2017 4:52 AM in response to Lassieloo

I was confused because the email came from what appeared to be a legitimate apple email address; "iTunes Store <itunes-security@email.apple.****>". The subject line was "[Apple Disabled] Fraud Activity : Please review your receipt from AppIe iTunes". It just delivered a NETFLIX receipt for $44 in the body. Since I logged onto this apple forum my apple ID was obviously not compromised.
<Email Edited by Host>

Sep 23, 2017 9:50 AM in response to Phil0124

When you simply FORWARD a suspicious email, the original sender information and its route through the Internet to you are typically deleted. Forwarded emails are of limited value to the webmaster.


You can be most helpful if you use this recipe to send the email to a webmaster as an example of a phishing attempt:


1) In Apple mail, select the message.

2) From the View menu choose "Raw Source". A new window with the internal addressing information appears (looks like a whole lot of numbers and letters, not nice text).

3) Start a new email to:

reportphishing@apple.com

or if it came though your iCloud account:

abuse@icloud.com


4) cut and paste the entire "Raw Source" window into the body of the new email.

5) give it a subject like "possible phishing email included" and click send.


You may also be able to ATTACH the email you received as an Attachment to a new email you create, but I am not certain of whether this works as expected in all cases.

Oct 5, 2017 9:02 PM in response to Lassieloo

BEWARE!!! DO NOT LOGIN when you see this message! They are trying to steal your credentials. It looks like this "https:://appleid.apple.com/activity" and if you click the link it actually takes you to this address - https://techaccount.gq/Login.php?sslchannel=true&sessionid=OdQzMRzw07U61gJy4u8g1BCV88j2H7uwlk67cGEcNyj OO3mTyv9A6MvfVPhDW…


NOTICE - techaccount.gq vs what appeared to be appleid.apple.com in the original email.

is this a fake email?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.