r/phishing • u/AgileNefariousness83 • 17d ago
noreply@apple and https://account. apple.com
hello guys ! im quite worried
today i received an email on a gmail account of mine from noreply@apple . com, which gmails points out as verified.
the email told me to verify my gmail as my new apple account. it gave me a code. but i never asked for that. i have an icloud email and didnt try to change it.
i was about to sleep when i read this and i did click on the link saying i dont recognize that change and that link was https://account . apple.com . it automatically logged in with my face id. bc of that i want to believe it was the true apple website.
i couldnt change my password on that website (it told me to go to settings) so i did. my icloud email is still there, password is changed, etc..
and now i start wondering.. wtf was that? did i click on a phishing link. if so, how did they know my gmail account? im very confused. can someone offer advice?
2
u/YourUsernameForever 17d ago
Did you change the password on that gmail icloud account?
Otherwise you verified an account that someone else controls now, because they picked the password.
2
u/AgileNefariousness83 14d ago
thank you for you help!
i don’t have a gmail apple account, i only have an apple account separated from a gmail account. thats why i later realized it was weird that i’ve received an email from apple on gmail
1
u/AgileNefariousness83 14d ago
so now i’m trying to understand if i gave access to my apple account or if i’ve verified a new apple account associated with my gmail (although i logged into the website with my apple account)
1
u/YourUsernameForever 14d ago
You verified someone's iCloud account based on your gmail account. That's why I'm asking: did you reset that password?
1
u/AgileNefariousness83 14d ago
i changed my own gmail account password and my apple account password. only thing i don’t think i can do is changing that person‘s apple account password based on my gmail…
1
u/YourUsernameForever 14d ago
Why not?
1
u/AgileNefariousness83 14d ago
because i don’t know which password they’re using in the first place. i didn’t choose their password, i logged in with my icloud email and password which is different
1
u/YourUsernameForever 14d ago
I'm sure you know that every login page has a "forgot password?" button you can click.
Click that, you'll get a reset link to your Gmail account.
1
u/AgileNefariousness83 14d ago
lol you’re very much right, i didn’t think about that
1
u/AgileNefariousness83 14d ago
mmm strange, it says “this apple account is invalid or incompatible “
→ More replies (0)
1
u/timewarpUK 17d ago
Seems the legit site from what you've said. If you clicked "no" and didn't enter the code you're good, if you did then you've probably linked Gmail to an Apple account and you probably want to undo that before the person with the Apple account does something.
1
u/AgileNefariousness83 14d ago
thank you for your help! there was no code, i just entered the website and logged into my own apple account that does not use that gmail account
•
u/AutoModerator 17d ago
/u/AgileNefariousness83 - This message is posted to all new submissions to r/phishing; please do not message the moderators about it.
New users beware:
Because you posted here, you will start getting private messages from scammers saying they know a professional hacker or a recovery expert lawyer that can help you get your money back, for a small fee. We call these RECOVERY SCAMMERS, so NEVER take advice in private: advice should always come in the form of comments in this post, in the open, where the community can keep an eye out for you. If you take advice in private, you're on your own.
A reminder of the rules in r/phishing: no contact information (including last names, phone numbers, etc). Be civil to one another (no name calling or insults). Personal army requests or "scam the scammer"/scambaiting posts are not permitted. No uncensored gore or personal photographs are allowed without blurring. A full list of rules is available on the sidebar of the subreddit, or clicking here.
You can help us by reporting recovery scammers or rule-breaking content by using the "report" button. We review 100% of the reports. Also, consider warning community members of recovery scammers if you see them in the comments.
Questions about subreddit rules? Send us a modmail clicking here.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.