Does this e-mail from Apple look legitimate?

[Gary S]

Does this e-mail from Apple look legitimate?

I live in WI.

It looked like phishing to me but I thought I'd ask here.

[attachment=3369:gary_adjusted.jpg]

TIA








Edited by kimmer to modify the attachment

[daryl66]

Gary:   If that log on info  was NOT you  then yes it is bogus. Whatever you do do NOT click on that link.

Daryl

[Xairbusdriver]

1. Does Apple use your Charter.net email address for notifications?
2. What is the actual email address for the "Gary Swiech" in the "To:" area? Hovering over it in Mail should offer a pop-up item showing the actual address. Same for the "Apple" as the sender.
3. What is the actual url connected to the "www.appleid.apple.com" link? Simple hovering the cursor over a link should display the actual url. If they don't match, delete the email after marking it as SPAM in Spamsieve. I generally don't even open emails I question. In this case, I'd just visit the Apple site.

In other words, we can't simply go on what an email looks like. We have to check a few indicators. Then we can simply take a chance on opening the message and having the sender be notified that we opened it. I'd rather check the site using my own, or known url.

Of course, I assume you already have Mail Prefs->Viewing: "Load remote content in messages" UN-checked.

[kimmer]

You are correct, it's NOT legit! Mark it as spam and dump it. Don't click, don't reply.

First, when I've logged in with a new machine, the email uses MY REAL NAME, not "Dear customer"; but most important: that link is wrong. You can verify what I'm going to share by googling, but the correct link to verify your apple id is:

https://appleid.apple.com

Notice the HTTPS at the beginning, not WWW—and that shows in the email from apple, I've never needed to hover over it to verify it (although that's a good idea).

Check this at google: https://www.google.com/search?client=safari...-8&oe=UTF-8

Lastly, I edited the attachment in your original post and removed your email address.

QUOTE(Gary S @ Mar 5 2017, 01:38 PM) <{POST_SNAPBACK}>

Does this e-mail from Apple look legitimate?

I live in WI.

It looked like phishing to me but I thought I'd ask here.

[kimmer]

Just for comparison, I'm attaching a legitimate email from apple regarding my apple id being used to log in from a different machine. You'll see it vastly different from the email you received, Gary. I have blacked out my real name and my apple id, but note that my full name was used. Also notice that the email has the correct url to visit—although I never, ever click on the link, I have the verification url bookmarked and I use that.

[attachment=3370:apple_email.jpg]

[Xairbusdriver]

The basic rules for emails:
1. NEVER EVER CLICK ANY LINK until you've verified it.
2. See rule #1.

Standard operations:
1. Don't try to remember what a "legit" email looks like. Every company/site can have a different style. Just apply the above rules.
2. Keep remote content hidden. Even an "invisible", one pixel image can be inside any email. When your email app downloads it, you're sending a message to the sender that you are not only real, but that you will open all emails. The next one you get may be really bad.
3. Don't do business with anyone who calls you "Customer".
4. Question everything (except your spouse). Especially emails, even if it claims to be from your spouse!
5. Consider disabling HTML email, if you can.
6. Always apply the rules about emails.

[Gary S]

First of all thanks to all. I did delete it.

kimmer,

When I go to (https://appleid.apple.com), and log-in with my email address and password and the screen changes to the 6 box code, what do I do? Do I make up my own 6 letter/number code? Because I was never assigned one by Apple.

[Paddy]

QUOTE(Gary S @ Mar 6 2017, 01:12 PM) <{POST_SNAPBACK}>

First of all thanks to all. I did delete it.

kimmer,

When I go to (https://appleid.apple.com), and log-in with my email address and password and the screen changes to the 6 box code, what do I do? Do I make up my own 6 letter/number code? Because I was never assigned one by Apple.

Gary, that's two-factor authentication - you should have received a 6 digit code on your cell phone to use to login. It's not a permanent code - it changes and you have to have access to your cell phone to see what the code is when you sign in. You must have enabled two factor-authentication at some point.

[Paddy]

And not to terrify anyone or anything...but if you do select two-factor authentication with Apple, make SURE that you keep your Recovery Key in a very safe place (1Password would be a good start).

Read on:

https://thenextweb.com/apple/2014/12/08/los...W#.tnw_bnsPGzJE

[kimmer]

Well, this is terrifying, err, unsettling.  I don't recall being given a recovery key, and I sure don't have a copy. I've gone through 1Password (which is where I would store this information); plus I've searched my hard drive and checked the folder I have with printed paper of a few things (nothing major or I wouldn't have printed it out). I have no recovery key. None. Nada. Zip. Zilch.

Since my acct hasn't been hacked, is it possible to follow that link and get a new recovery key? I'm unclear on this. If it is, I'll do it asap. Otherwise, I'll wait until (may it never happen) someone tries to hack my acct, and then start over. What a mess.

QUOTE(Paddy @ Mar 6 2017, 11:17 AM) <{POST_SNAPBACK}>

And not to terrify anyone or anything...but if you do select two-factor authentication with Apple, make SURE that you keep your Recovery Key in a very safe place (1Password would be a good start).

Read on:

https://thenextweb.com/apple/2014/12/08/los...W#.tnw_bnsPGzJE

[Xairbusdriver]

I don't remember it being a problem when I turned two-factor OFF. You should find an option, probably talking to an actual person, and answer a couple of questions that you have stored at Apple. After all, cell phones are easily lost or stolen, so there must be a procedure to change the phone/code. I would not be alarmed or even worried, but it is something that needs correcting.

I turned the system off after getting tired of the delays caused by it. It is difficult to confirm a code when the device you get it on is not with you. DOH! There were too many times when I did not have my iPhone with me. So I through the baby out...

I prefer the way 1Password uses authentication when the app updates. But that is rare, easy and 'just works'. What a concept!

[Paddy]

Kimmer, I'd recommend turning it OFF if you have it on and have no idea where the recovery key is. I never turned it on - too much hassle, as Jim notes.

Here's how to do it:

http://osxdaily.com/2016/08/17/disable-two...ation-apple-id/

This unfortunately doesn't help Gary if he has to enter the authentication code to disable the darn thing; although if the authentication code IS sent to a cell phone, then it should be available.

[kimmer]

QUOTE(Paddy @ Mar 6 2017, 04:03 PM) <{POST_SNAPBACK}>

Kimmer, I'd recommend turning it OFF if you have it on and have no idea where the recovery key is. I never turned it on - too much hassle, as Jim notes.

It is a hassle, and it's now off. Thanks.

[Xairbusdriver]

Only marginally On Topic, it involves the iPhone...

A couple of weeks ago, I miss placed my iPhone. Unfortunately, I had not yet turned the speaker back on after awaking that morning. Also a bit unfortunate, Find my iDevice is only accurate to a house-sized area and I was pretty sure I had not left the house yet...

Fortunately, decided to see if there was any hope with that service. As a matter of fact, if your ears are good enough, you can even find your phone when it's outside and you are not! it was even easier for me since I knew it was in the house somewhere! It just so happens that Find my iDevice can make it deliver a rather loud and shril sound, even with the sound switch off!!! I didn't know that!

Just one important reason to have that Apple ID and password!

I've been out of town all day and using the iPhone with a search engine is not fun. I will attempt to a certain what problems will ensue if one gets a new Apple ID. I assume all purchases with the old one will be considered null & void?! Would emailed receipts help? Can I find the few I might still have?!

[Gary S]

Thanks all.

Paddy, I found my 6 number code.

I also found this in my drafts folder in Mail: please pay attention to the last paragraph.

[attachment=3371:Apple_2_...ion_code.jpg]

And my 1Password says I have the 2 step also.

[attachment=3373:Apple_iPassword02.jpg]

I would like to go back to just one step code, my email address.

Do you think I should go to the link to deactivate the 2 step, given the fact that

the 6 number code is from November, 2011?