Someone is trying to sign up for Apple ID with my email address

I have received dozens of emails so far today in multiple asian languages with verification links to sign up or change Apple ID accounts. I own my domain, so my email is xxx.@mydomain.com which acts as a catch-all for *anything*@mydomain.com and there is all sorts of random generated strings like kbd7$uj@mydomain.com or whatever. This is not an honest mistake that someone typed in a gmail/hotmail address incorrectly, and I want to make sure no one is using my private domain for Apple ID purposes, because the domain is registered to me personally and I don't want to be blacklisted.


What can I do? I have 2FA on my Apple, Google, and other accounts that allow it, and use long, random generated passwords for security. Is there a way to request that no Apple IDs be created with emails from that domain? I'm ok if the domain is blacklisted from apple (manually) but I don't want to be flagged as a spammer and then have it traced back to my name.

Posted on Feb 16, 2018 11:27 PM

Reply

Similar questions

8 replies

Feb 17, 2018 12:09 PM in response to JClark5093

want to make sure no one is using my private domain for Apple ID purposes, because the domain is registered to me personally and I don't want to be blacklisted.


They should not be able to ever finish creating an Apple ID, as they need to retrieve the verification email from Apple and respond with a code in it.


Is there a way to request that no Apple IDs be created with emails from that domain?

Again, that is built in to the system. No verification that you have access to the email address you just gave us? No Apple ID.

Feb 16, 2018 11:55 PM in response to ckuan

That's what I assumed, but surely apple servers are being spammed with requests containing my domain name. The domain registrar has my personal name and street address. This won't get flagged by apple servers automatically?


Either way, how do I get the request emails to stop? Do I need to set a filter in my email? Surely there must be a way for Apple to stop allowing requests from a domain I can prove belongs to me and is private, right?

Feb 17, 2018 3:01 PM in response to LACAllen

Thanks for the reassurance. I guess I don't have to worry, as long as I keep a record that I wasn't doing this. I have no info about what the IP address was, and some of the emails were about new Apple ID, and some were about changing email associated (not mine, I've used 2FA and changed password, no log of access from other IPs).


I wonder what the purpose of this would even be... What does some script kid have to gain by spamming requests for fake email addresses? Like you said, if I turn off catchall (or just filter them), they're never going to log into my email, which also has 2FA hosted by google... Is this a known thing that happens? I've never heard of it, and never seen it before.


Thanks again for your advice on all this!

Feb 17, 2018 3:08 PM in response to JClark5093

I wonder what the purpose of this would even be... What does some script kid have to gain by spamming requests for fake email addresses?

Don't introduce logic to this. No idea what their business model may be.


I'll guess they have been "attacking" your mail server as well, hoping to breach it and complete the loop. As noted... keep your mail accounts uber secure and let your provider protect you.


It's possible legit addresses return a different error message to them which allows different methods of phishing you and such.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Someone is trying to sign up for Apple ID with my email address

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.