Is this an email from Apple or fraud?












5















Is this email from Apple real?




From: ID Report Date:
February 15, 2019 at 9:20:10 AM EST To: ggwilson@me.com Subject: [TBA]
Your account has been temporarily disabled for security reason!



Dear ggwilson@me.com,



Your Apple ID was used to sign in to a new web browser.



Date and Time : Friday, February 15, 2019 IP Address : 79.171.55.205
Country : Albania Your Apple ID has been temporarily disabled for
security reason. When you see this alerts, you can go to
iforgot.apple.com to unlock your account with your existing password.
Your account will permanently disabled if you do not verify your
account under 24 hours.



Sincerely, Apple Support Apple ID45 | Support | Privacy Policy
Copyright © 2018 All Rights Reserved











share|improve this question









New contributor




geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
















  • 1





    Check the email address this email was sent from - most likely you will be able to tell then

    – Benj
    5 hours ago






  • 3





    @Benj That's bad advice; the "sent" address is ridiculously easy to fake.

    – wizzwizz4
    2 hours ago






  • 1





    Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.

    – Benj
    2 hours ago











  • @wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.

    – jcaron
    2 hours ago






  • 2





    In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.

    – jcaron
    2 hours ago
















5















Is this email from Apple real?




From: ID Report Date:
February 15, 2019 at 9:20:10 AM EST To: ggwilson@me.com Subject: [TBA]
Your account has been temporarily disabled for security reason!



Dear ggwilson@me.com,



Your Apple ID was used to sign in to a new web browser.



Date and Time : Friday, February 15, 2019 IP Address : 79.171.55.205
Country : Albania Your Apple ID has been temporarily disabled for
security reason. When you see this alerts, you can go to
iforgot.apple.com to unlock your account with your existing password.
Your account will permanently disabled if you do not verify your
account under 24 hours.



Sincerely, Apple Support Apple ID45 | Support | Privacy Policy
Copyright © 2018 All Rights Reserved











share|improve this question









New contributor




geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
















  • 1





    Check the email address this email was sent from - most likely you will be able to tell then

    – Benj
    5 hours ago






  • 3





    @Benj That's bad advice; the "sent" address is ridiculously easy to fake.

    – wizzwizz4
    2 hours ago






  • 1





    Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.

    – Benj
    2 hours ago











  • @wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.

    – jcaron
    2 hours ago






  • 2





    In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.

    – jcaron
    2 hours ago














5












5








5








Is this email from Apple real?




From: ID Report Date:
February 15, 2019 at 9:20:10 AM EST To: ggwilson@me.com Subject: [TBA]
Your account has been temporarily disabled for security reason!



Dear ggwilson@me.com,



Your Apple ID was used to sign in to a new web browser.



Date and Time : Friday, February 15, 2019 IP Address : 79.171.55.205
Country : Albania Your Apple ID has been temporarily disabled for
security reason. When you see this alerts, you can go to
iforgot.apple.com to unlock your account with your existing password.
Your account will permanently disabled if you do not verify your
account under 24 hours.



Sincerely, Apple Support Apple ID45 | Support | Privacy Policy
Copyright © 2018 All Rights Reserved











share|improve this question









New contributor




geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.












Is this email from Apple real?




From: ID Report Date:
February 15, 2019 at 9:20:10 AM EST To: ggwilson@me.com Subject: [TBA]
Your account has been temporarily disabled for security reason!



Dear ggwilson@me.com,



Your Apple ID was used to sign in to a new web browser.



Date and Time : Friday, February 15, 2019 IP Address : 79.171.55.205
Country : Albania Your Apple ID has been temporarily disabled for
security reason. When you see this alerts, you can go to
iforgot.apple.com to unlock your account with your existing password.
Your account will permanently disabled if you do not verify your
account under 24 hours.



Sincerely, Apple Support Apple ID45 | Support | Privacy Policy
Copyright © 2018 All Rights Reserved








email apple-id






share|improve this question









New contributor




geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











share|improve this question









New contributor




geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









share|improve this question




share|improve this question








edited 5 hours ago









Daniil Manokhin

3,8232931




3,8232931






New contributor




geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









asked 5 hours ago









geri wilsongeri wilson

261




261




New contributor




geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





New contributor





geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.








  • 1





    Check the email address this email was sent from - most likely you will be able to tell then

    – Benj
    5 hours ago






  • 3





    @Benj That's bad advice; the "sent" address is ridiculously easy to fake.

    – wizzwizz4
    2 hours ago






  • 1





    Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.

    – Benj
    2 hours ago











  • @wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.

    – jcaron
    2 hours ago






  • 2





    In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.

    – jcaron
    2 hours ago














  • 1





    Check the email address this email was sent from - most likely you will be able to tell then

    – Benj
    5 hours ago






  • 3





    @Benj That's bad advice; the "sent" address is ridiculously easy to fake.

    – wizzwizz4
    2 hours ago






  • 1





    Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.

    – Benj
    2 hours ago











  • @wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.

    – jcaron
    2 hours ago






  • 2





    In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.

    – jcaron
    2 hours ago








1




1





Check the email address this email was sent from - most likely you will be able to tell then

– Benj
5 hours ago





Check the email address this email was sent from - most likely you will be able to tell then

– Benj
5 hours ago




3




3





@Benj That's bad advice; the "sent" address is ridiculously easy to fake.

– wizzwizz4
2 hours ago





@Benj That's bad advice; the "sent" address is ridiculously easy to fake.

– wizzwizz4
2 hours ago




1




1





Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.

– Benj
2 hours ago





Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.

– Benj
2 hours ago













@wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.

– jcaron
2 hours ago





@wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.

– jcaron
2 hours ago




2




2





In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.

– jcaron
2 hours ago





In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.

– jcaron
2 hours ago










2 Answers
2






active

oldest

votes


















8














There are several signs to show this is fake:




  • Poor grammar


  • It doesn’t say your name but it says your email Dear ggwilson@me.com


  • The sent address. It doesn’t contain Apple.


  • iForgot is a site to recover your password not to log-in


  • Apple’s Privacy Policy is 2019 Copyright and not 2018



What I would do:




  • Log-in to https://appleid.apple.com check the status of your account and change your password


  • Not clicking the iForgot link in the email


  • Report the email as encouraged by Apple:




If you receive what you believe to be a phishing email that's designed to look like it’s from Apple, please send it to reportphishing@apple.com







share|improve this answer
























  • Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.

    – trognanders
    1 hour ago



















7














Even without posting the headers or any hyperlinks in the message, it's easy to identify a message like that as a bogus message. Note the poor use of English ("see this alerts") and the creation of the sense of urgency ("permanently disabled if"). There is also almost certainly a bogus hyperlink for iforgot.apple.com in the message which would lead to a website that was designed to scare you into supplying your credentials to the scammer.






share|improve this answer
























  • From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...

    – Andrew T.
    4 hours ago













  • Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.

    – Nathan Young
    2 hours ago











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "118"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});






geri wilson is a new contributor. Be nice, and check out our Code of Conduct.










draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fapple.stackexchange.com%2fquestions%2f351542%2fis-this-an-email-from-apple-or-fraud%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























2 Answers
2






active

oldest

votes








2 Answers
2






active

oldest

votes









active

oldest

votes






active

oldest

votes









8














There are several signs to show this is fake:




  • Poor grammar


  • It doesn’t say your name but it says your email Dear ggwilson@me.com


  • The sent address. It doesn’t contain Apple.


  • iForgot is a site to recover your password not to log-in


  • Apple’s Privacy Policy is 2019 Copyright and not 2018



What I would do:




  • Log-in to https://appleid.apple.com check the status of your account and change your password


  • Not clicking the iForgot link in the email


  • Report the email as encouraged by Apple:




If you receive what you believe to be a phishing email that's designed to look like it’s from Apple, please send it to reportphishing@apple.com







share|improve this answer
























  • Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.

    – trognanders
    1 hour ago
















8














There are several signs to show this is fake:




  • Poor grammar


  • It doesn’t say your name but it says your email Dear ggwilson@me.com


  • The sent address. It doesn’t contain Apple.


  • iForgot is a site to recover your password not to log-in


  • Apple’s Privacy Policy is 2019 Copyright and not 2018



What I would do:




  • Log-in to https://appleid.apple.com check the status of your account and change your password


  • Not clicking the iForgot link in the email


  • Report the email as encouraged by Apple:




If you receive what you believe to be a phishing email that's designed to look like it’s from Apple, please send it to reportphishing@apple.com







share|improve this answer
























  • Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.

    – trognanders
    1 hour ago














8












8








8







There are several signs to show this is fake:




  • Poor grammar


  • It doesn’t say your name but it says your email Dear ggwilson@me.com


  • The sent address. It doesn’t contain Apple.


  • iForgot is a site to recover your password not to log-in


  • Apple’s Privacy Policy is 2019 Copyright and not 2018



What I would do:




  • Log-in to https://appleid.apple.com check the status of your account and change your password


  • Not clicking the iForgot link in the email


  • Report the email as encouraged by Apple:




If you receive what you believe to be a phishing email that's designed to look like it’s from Apple, please send it to reportphishing@apple.com







share|improve this answer













There are several signs to show this is fake:




  • Poor grammar


  • It doesn’t say your name but it says your email Dear ggwilson@me.com


  • The sent address. It doesn’t contain Apple.


  • iForgot is a site to recover your password not to log-in


  • Apple’s Privacy Policy is 2019 Copyright and not 2018



What I would do:




  • Log-in to https://appleid.apple.com check the status of your account and change your password


  • Not clicking the iForgot link in the email


  • Report the email as encouraged by Apple:




If you receive what you believe to be a phishing email that's designed to look like it’s from Apple, please send it to reportphishing@apple.com








share|improve this answer












share|improve this answer



share|improve this answer










answered 5 hours ago









Daniil ManokhinDaniil Manokhin

3,8232931




3,8232931













  • Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.

    – trognanders
    1 hour ago



















  • Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.

    – trognanders
    1 hour ago

















Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.

– trognanders
1 hour ago





Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.

– trognanders
1 hour ago













7














Even without posting the headers or any hyperlinks in the message, it's easy to identify a message like that as a bogus message. Note the poor use of English ("see this alerts") and the creation of the sense of urgency ("permanently disabled if"). There is also almost certainly a bogus hyperlink for iforgot.apple.com in the message which would lead to a website that was designed to scare you into supplying your credentials to the scammer.






share|improve this answer
























  • From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...

    – Andrew T.
    4 hours ago













  • Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.

    – Nathan Young
    2 hours ago
















7














Even without posting the headers or any hyperlinks in the message, it's easy to identify a message like that as a bogus message. Note the poor use of English ("see this alerts") and the creation of the sense of urgency ("permanently disabled if"). There is also almost certainly a bogus hyperlink for iforgot.apple.com in the message which would lead to a website that was designed to scare you into supplying your credentials to the scammer.






share|improve this answer
























  • From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...

    – Andrew T.
    4 hours ago













  • Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.

    – Nathan Young
    2 hours ago














7












7








7







Even without posting the headers or any hyperlinks in the message, it's easy to identify a message like that as a bogus message. Note the poor use of English ("see this alerts") and the creation of the sense of urgency ("permanently disabled if"). There is also almost certainly a bogus hyperlink for iforgot.apple.com in the message which would lead to a website that was designed to scare you into supplying your credentials to the scammer.






share|improve this answer













Even without posting the headers or any hyperlinks in the message, it's easy to identify a message like that as a bogus message. Note the poor use of English ("see this alerts") and the creation of the sense of urgency ("permanently disabled if"). There is also almost certainly a bogus hyperlink for iforgot.apple.com in the message which would lead to a website that was designed to scare you into supplying your credentials to the scammer.







share|improve this answer












share|improve this answer



share|improve this answer










answered 5 hours ago









ChristopherChristopher

311313




311313













  • From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...

    – Andrew T.
    4 hours ago













  • Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.

    – Nathan Young
    2 hours ago



















  • From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...

    – Andrew T.
    4 hours ago













  • Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.

    – Nathan Young
    2 hours ago

















From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...

– Andrew T.
4 hours ago







From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...

– Andrew T.
4 hours ago















Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.

– Nathan Young
2 hours ago





Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.

– Nathan Young
2 hours ago










geri wilson is a new contributor. Be nice, and check out our Code of Conduct.










draft saved

draft discarded


















geri wilson is a new contributor. Be nice, and check out our Code of Conduct.













geri wilson is a new contributor. Be nice, and check out our Code of Conduct.












geri wilson is a new contributor. Be nice, and check out our Code of Conduct.
















Thanks for contributing an answer to Ask Different!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fapple.stackexchange.com%2fquestions%2f351542%2fis-this-an-email-from-apple-or-fraud%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Paul Cézanne

UIScrollView CustomStickyHeader Resize height generates problems when scroll is too fast

Angular material date-picker (MatDatepicker) auto completes the date on focus out