Is this an email from Apple or fraud?
Is this email from Apple real?
From: ID Report Date:
February 15, 2019 at 9:20:10 AM EST To: ggwilson@me.com Subject: [TBA]
Your account has been temporarily disabled for security reason!
Dear ggwilson@me.com,
Your Apple ID was used to sign in to a new web browser.
Date and Time : Friday, February 15, 2019 IP Address : 79.171.55.205
Country : Albania Your Apple ID has been temporarily disabled for
security reason. When you see this alerts, you can go to
iforgot.apple.com to unlock your account with your existing password.
Your account will permanently disabled if you do not verify your
account under 24 hours.
Sincerely, Apple Support Apple ID45 | Support | Privacy Policy
Copyright © 2018 All Rights Reserved
email apple-id
New contributor
geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Is this email from Apple real?
From: ID Report Date:
February 15, 2019 at 9:20:10 AM EST To: ggwilson@me.com Subject: [TBA]
Your account has been temporarily disabled for security reason!
Dear ggwilson@me.com,
Your Apple ID was used to sign in to a new web browser.
Date and Time : Friday, February 15, 2019 IP Address : 79.171.55.205
Country : Albania Your Apple ID has been temporarily disabled for
security reason. When you see this alerts, you can go to
iforgot.apple.com to unlock your account with your existing password.
Your account will permanently disabled if you do not verify your
account under 24 hours.
Sincerely, Apple Support Apple ID45 | Support | Privacy Policy
Copyright © 2018 All Rights Reserved
email apple-id
New contributor
geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
1
Check the email address this email was sent from - most likely you will be able to tell then
– Benj
5 hours ago
3
@Benj That's bad advice; the "sent" address is ridiculously easy to fake.
– wizzwizz4
2 hours ago
1
Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.
– Benj
2 hours ago
@wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.
– jcaron
2 hours ago
2
In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.
– jcaron
2 hours ago
add a comment |
Is this email from Apple real?
From: ID Report Date:
February 15, 2019 at 9:20:10 AM EST To: ggwilson@me.com Subject: [TBA]
Your account has been temporarily disabled for security reason!
Dear ggwilson@me.com,
Your Apple ID was used to sign in to a new web browser.
Date and Time : Friday, February 15, 2019 IP Address : 79.171.55.205
Country : Albania Your Apple ID has been temporarily disabled for
security reason. When you see this alerts, you can go to
iforgot.apple.com to unlock your account with your existing password.
Your account will permanently disabled if you do not verify your
account under 24 hours.
Sincerely, Apple Support Apple ID45 | Support | Privacy Policy
Copyright © 2018 All Rights Reserved
email apple-id
New contributor
geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Is this email from Apple real?
From: ID Report Date:
February 15, 2019 at 9:20:10 AM EST To: ggwilson@me.com Subject: [TBA]
Your account has been temporarily disabled for security reason!
Dear ggwilson@me.com,
Your Apple ID was used to sign in to a new web browser.
Date and Time : Friday, February 15, 2019 IP Address : 79.171.55.205
Country : Albania Your Apple ID has been temporarily disabled for
security reason. When you see this alerts, you can go to
iforgot.apple.com to unlock your account with your existing password.
Your account will permanently disabled if you do not verify your
account under 24 hours.
Sincerely, Apple Support Apple ID45 | Support | Privacy Policy
Copyright © 2018 All Rights Reserved
email apple-id
email apple-id
New contributor
geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited 5 hours ago
Daniil Manokhin
3,8232931
3,8232931
New contributor
geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 5 hours ago
geri wilsongeri wilson
261
261
New contributor
geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
geri wilson is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
1
Check the email address this email was sent from - most likely you will be able to tell then
– Benj
5 hours ago
3
@Benj That's bad advice; the "sent" address is ridiculously easy to fake.
– wizzwizz4
2 hours ago
1
Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.
– Benj
2 hours ago
@wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.
– jcaron
2 hours ago
2
In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.
– jcaron
2 hours ago
add a comment |
1
Check the email address this email was sent from - most likely you will be able to tell then
– Benj
5 hours ago
3
@Benj That's bad advice; the "sent" address is ridiculously easy to fake.
– wizzwizz4
2 hours ago
1
Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.
– Benj
2 hours ago
@wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.
– jcaron
2 hours ago
2
In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.
– jcaron
2 hours ago
1
1
Check the email address this email was sent from - most likely you will be able to tell then
– Benj
5 hours ago
Check the email address this email was sent from - most likely you will be able to tell then
– Benj
5 hours ago
3
3
@Benj That's bad advice; the "sent" address is ridiculously easy to fake.
– wizzwizz4
2 hours ago
@Benj That's bad advice; the "sent" address is ridiculously easy to fake.
– wizzwizz4
2 hours ago
1
1
Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.
– Benj
2 hours ago
Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.
– Benj
2 hours ago
@wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.
– jcaron
2 hours ago
@wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.
– jcaron
2 hours ago
2
2
In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.
– jcaron
2 hours ago
In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.
– jcaron
2 hours ago
add a comment |
2 Answers
2
active
oldest
votes
There are several signs to show this is fake:
Poor grammar
It doesn’t say your name but it says your email Dear ggwilson@me.com
The sent address. It doesn’t contain Apple.
iForgot is a site to recover your password not to log-in
Apple’s Privacy Policy is 2019 Copyright and not 2018
What I would do:
Log-in to https://appleid.apple.com check the status of your account and change your password
Not clicking the iForgot link in the email
Report the email as encouraged by Apple:
If you receive what you believe to be a phishing email that's designed to look like it’s from Apple, please send it to reportphishing@apple.com
Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.
– trognanders
1 hour ago
add a comment |
Even without posting the headers or any hyperlinks in the message, it's easy to identify a message like that as a bogus message. Note the poor use of English ("see this alerts") and the creation of the sense of urgency ("permanently disabled if"). There is also almost certainly a bogus hyperlink for iforgot.apple.com in the message which would lead to a website that was designed to scare you into supplying your credentials to the scammer.
From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...
– Andrew T.
4 hours ago
Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.
– Nathan Young
2 hours ago
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "118"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
geri wilson is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fapple.stackexchange.com%2fquestions%2f351542%2fis-this-an-email-from-apple-or-fraud%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
There are several signs to show this is fake:
Poor grammar
It doesn’t say your name but it says your email Dear ggwilson@me.com
The sent address. It doesn’t contain Apple.
iForgot is a site to recover your password not to log-in
Apple’s Privacy Policy is 2019 Copyright and not 2018
What I would do:
Log-in to https://appleid.apple.com check the status of your account and change your password
Not clicking the iForgot link in the email
Report the email as encouraged by Apple:
If you receive what you believe to be a phishing email that's designed to look like it’s from Apple, please send it to reportphishing@apple.com
Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.
– trognanders
1 hour ago
add a comment |
There are several signs to show this is fake:
Poor grammar
It doesn’t say your name but it says your email Dear ggwilson@me.com
The sent address. It doesn’t contain Apple.
iForgot is a site to recover your password not to log-in
Apple’s Privacy Policy is 2019 Copyright and not 2018
What I would do:
Log-in to https://appleid.apple.com check the status of your account and change your password
Not clicking the iForgot link in the email
Report the email as encouraged by Apple:
If you receive what you believe to be a phishing email that's designed to look like it’s from Apple, please send it to reportphishing@apple.com
Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.
– trognanders
1 hour ago
add a comment |
There are several signs to show this is fake:
Poor grammar
It doesn’t say your name but it says your email Dear ggwilson@me.com
The sent address. It doesn’t contain Apple.
iForgot is a site to recover your password not to log-in
Apple’s Privacy Policy is 2019 Copyright and not 2018
What I would do:
Log-in to https://appleid.apple.com check the status of your account and change your password
Not clicking the iForgot link in the email
Report the email as encouraged by Apple:
If you receive what you believe to be a phishing email that's designed to look like it’s from Apple, please send it to reportphishing@apple.com
There are several signs to show this is fake:
Poor grammar
It doesn’t say your name but it says your email Dear ggwilson@me.com
The sent address. It doesn’t contain Apple.
iForgot is a site to recover your password not to log-in
Apple’s Privacy Policy is 2019 Copyright and not 2018
What I would do:
Log-in to https://appleid.apple.com check the status of your account and change your password
Not clicking the iForgot link in the email
Report the email as encouraged by Apple:
If you receive what you believe to be a phishing email that's designed to look like it’s from Apple, please send it to reportphishing@apple.com
answered 5 hours ago
Daniil ManokhinDaniil Manokhin
3,8232931
3,8232931
Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.
– trognanders
1 hour ago
add a comment |
Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.
– trognanders
1 hour ago
Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.
– trognanders
1 hour ago
Any email can say support@apple.com, this is a weakness of SMTP. The only domain that means anything is that on a valid and verified DKIM signature.
– trognanders
1 hour ago
add a comment |
Even without posting the headers or any hyperlinks in the message, it's easy to identify a message like that as a bogus message. Note the poor use of English ("see this alerts") and the creation of the sense of urgency ("permanently disabled if"). There is also almost certainly a bogus hyperlink for iforgot.apple.com in the message which would lead to a website that was designed to scare you into supplying your credentials to the scammer.
From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...
– Andrew T.
4 hours ago
Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.
– Nathan Young
2 hours ago
add a comment |
Even without posting the headers or any hyperlinks in the message, it's easy to identify a message like that as a bogus message. Note the poor use of English ("see this alerts") and the creation of the sense of urgency ("permanently disabled if"). There is also almost certainly a bogus hyperlink for iforgot.apple.com in the message which would lead to a website that was designed to scare you into supplying your credentials to the scammer.
From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...
– Andrew T.
4 hours ago
Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.
– Nathan Young
2 hours ago
add a comment |
Even without posting the headers or any hyperlinks in the message, it's easy to identify a message like that as a bogus message. Note the poor use of English ("see this alerts") and the creation of the sense of urgency ("permanently disabled if"). There is also almost certainly a bogus hyperlink for iforgot.apple.com in the message which would lead to a website that was designed to scare you into supplying your credentials to the scammer.
Even without posting the headers or any hyperlinks in the message, it's easy to identify a message like that as a bogus message. Note the poor use of English ("see this alerts") and the creation of the sense of urgency ("permanently disabled if"). There is also almost certainly a bogus hyperlink for iforgot.apple.com in the message which would lead to a website that was designed to scare you into supplying your credentials to the scammer.
answered 5 hours ago
ChristopherChristopher
311313
311313
From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...
– Andrew T.
4 hours ago
Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.
– Nathan Young
2 hours ago
add a comment |
From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...
– Andrew T.
4 hours ago
Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.
– Nathan Young
2 hours ago
From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...
– Andrew T.
4 hours ago
From my experience, the fake login site is almost identical to Apple ID login site (except the URL), and the form will accept any emails and passports (no validation check because its purpose is to gather credentials), and after inputting them, the user will be redirected to the real Apple ID login. Although, it's better not to open the link in the first place...
– Andrew T.
4 hours ago
Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.
– Nathan Young
2 hours ago
Even better would be if the fake login site intentionally refuses a few logins, prompting the phished user to try again a few more times. Whether that is because they might have typo'd, or because they think they may have used a different password, it's in the phisher's better interest to collect but refuse for a few attempts.
– Nathan Young
2 hours ago
add a comment |
geri wilson is a new contributor. Be nice, and check out our Code of Conduct.
geri wilson is a new contributor. Be nice, and check out our Code of Conduct.
geri wilson is a new contributor. Be nice, and check out our Code of Conduct.
geri wilson is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Ask Different!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fapple.stackexchange.com%2fquestions%2f351542%2fis-this-an-email-from-apple-or-fraud%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Check the email address this email was sent from - most likely you will be able to tell then
– Benj
5 hours ago
3
@Benj That's bad advice; the "sent" address is ridiculously easy to fake.
– wizzwizz4
2 hours ago
1
Unless there are ways to mask your real address, I'd say this method filters out most scammers. You wouldn't believe the number of people who invest loads into scamming technologies, yet will completely overlook simple things like getting a legitimate-looking domain name. However, I agree totally that you should be vigilant in more ways than one when it comes to security.
– Benj
2 hours ago
@wizzwizz4 It is, but nowadays with SPF and DKIM, most e-mail providers (and I hope that includes Apple) will block e-mails sent with a fake e-mail address belonging to most important senders (including Apple). Still, one can easily be fooled by e-mail addresses that vaguely look like they belong to Apple. But in this case, it probably belongs to a random domain with no relationship with Apple whatsoever.
– jcaron
2 hours ago
2
In other words, seeing an e-mail that apparently comes from Apple does not mean it actually comes from them. But seeing an e-mail that comes from a random completely unrelated domain surely is a big red flag.
– jcaron
2 hours ago