Apple Users
Related: About this forumI know that this is a scam but not sure whether I need to do anything
First email this morning:
Your Apple Account information has been updated.
Dear iPhone purchase 499 authorized If Not Call 18046308425,
The following changes to your Apple Account, jamesmrw71803@icloud.com, were made on April 13, 2026 at 9:37:54 PM GMT+9:
Date of birth
If you did not make these changes or you believe an unauthorized person has accessed your account, you should change your password as soon as possible from your Apple Account page at https://account.apple.com.
Apple Support
Several hours later, this one:
Your Apple Account information has been updated.
Dear User iPhone Purchase 749 USD Confirmed Cancel At 18203369247,
The following changes to your Apple Account, rmcjacklyn63570@icloud.com, were made on April 13, 2026 at 10:50:53 PM GMT+6:
Date of birth
If you did not make these changes or you believe an unauthorized person has accessed your account, you should change your password as soon as possible from your Apple Account page at https://account.apple.com.
Apple Support
Sender is
appleid_usen@email.apple.com
=====
I probably should change my password but will certainly not on the link provided.
I have not clicked on anything, except on the reply arrow to get the full address of the sender. Hope this was not a fatal mistake.
Ilikepurple
(722 posts)Im not sure whether it helps, but I think that if your account registered $749 iPhone purchase (mine was supposed $879), apple would have sent a receipt. Its also weird that they hit the recipient with both the iPhone purchase and birthday reason for contact. Im not exactly sure what this phishing scam is, but I didnt do anything. Of course I had the luxury of it being sent to a non Apple ID email.
Vogon_Glory
(10,310 posts)I hit the Reply All icon (But I DONT tap SEND!). I usually find that my response is supposed to go to some sleazy e-mail address belonging to some outfit that has nothing whatsoever to do with Apple. Once I see where my response was supposed to go, I delete the e-mail.
usonian
(25,746 posts)They might have a tracking pixel or image that verifies your email address ( a lot are just shotgunned hoping to find a real one. )
Fortunately, I often get a "unable to load remote content privately" warning because of my email security settings (recommended)
Even if the email was from Bernie.
Just check your account and cards, a good idea anyway.
Apple gets spoofed a lot. One can forward the email to abuse@apple.com, subject phishing email. I rarely get replies from companies, ISP's, agencies and banks, and have stopped in recent times.
Here's the latest that I didn't even open.
