Somebody is repeatedly trying to reset my Apple ID password, is there anything I can do?

pepucci wrote:

Hi,

I have been receiving repeated legit emails from Apple saying I have asked to reset my password (I have not). I have two-factor authentication enabled and I just changed my password for good measure, but I am worried as this is my corporate email and corporate Apple ID account. Is there anything else I can do or somebody I can notify at Apple about this?

Complete all of the steps recommended in: If you think your Apple ID has been compromised - Apple Support

"If you think your Apple ID was compromised, use these steps to gain control of it and review your account information:

1. Sign in to your Apple ID account page. If you can't sign in or you receive a message that the account is locked when you try to sign in, try to reset or unlock your account. If you still can't sign in, contact Apple Support.
2. Change your Apple ID password and choose a strong password.
3. Review all the personal and security information in your account. Update any information that isn't correct or that you don’t recognize, including:Check with your email address provider to make sure that you control every email address associated with your Apple ID. If you don't control the email addresses associated with the Apple ID, you should change the password for the email address or use a different email address. Check with your email address provider to make sure that you control every email address associated with your Apple ID. If you don't control the email addresses associated with the Apple ID, you should change the password for the email address or use a different email address.
   • Your name.
   • Your primary Apple ID email address. If you need to change your email address, update the features and services that you use with Apple ID, so that each one is using your updated Apple ID.
   • All alternate email addresses, rescue email addresses, and phone numbers.
   • Security questions and answers. If you think they might be easy to guess, you should change your security questions.
4. Check with your email address provider to make sure that you control every email address associated with your Apple ID. If you don't control the email addresses associated with the Apple ID, you should change the password for the email address or use a different email address.
5. Set up two-factor authentication or two-step verification for your Apple ID. These additional security features are designed to prevent anyone from accessing your account, even if they know your password.

If you completed the steps above and think your account might still be compromised, contact Apple Support.

pepucci wrote:

Ferd,

thank you for your reply. However, I do not think my account was compromised (yet). I just think somebody is trying to gain access to it, and I would like to see if there's anything else I can do to avoid that. I believe that two-factor is strong, but nothing is infallible.

If someone is trying to gain access, they must know at least your your primary Apple ID email address. If you do not think your account was compromised, and you are using TFA, you can live with the repeated attempts, or consider changing your Apple ID (if possible)...Change your Apple ID - Apple Support

When changing your password with 2FA, you provide your verified trusted phone number.

You then see this dialog. No email is sent to you.

Email is not secure enough when you use 2FA. Only a trusted device or phone number (via SMS) is used.

I have been receiving repeated legit emails from Apple saying I have asked to reset my password (I have not). I have two-factor authentication enabled a

Why do you believe this to be true?

These sound like phishing attempts and can be ignored.

If you think the e-mails are phishing requests, report them to Apple.

reportphishing@apple.com

Apple ID email address or password - What to do after you change I suggest doing this before you change your Apple ID.