Today I received an email purportedly from Apple to say my password had been reset as requested on my sfr account. We left sfr 18 months ago. Obvs I did not click on anything as suggested in the email. Has anyone else been getting these. It seems , after googling it that it is the latest phishing attempt going on this year. I just hate it as it leaves you feeling so insecure online where you have to do pretty much everything nowadays
1 Like
Not specifically Apple, but such emails are pretty common.
If you didn’t request it, your email password won’t have been reset, since most providers require two-factor authentication to do that (so there would also be a confirmatory text message to your phone, for example).
You can spot most of the scams quite easily by looking at the underlying email address in the “from” field in your email program - in most cases it will be a gobbledygook username at a domain you have never heard of, like this:
manonchoir.45 (at) technicianauditordiet.info
Then you can just tag it as “spam” and say goodbye.
1 Like
Wasn’t a gobbledegook address though. Was Apples address in Cork!
These spamming bastards can spoof their originating email addresses too, I’ve no idea why Apple Cork would be contacting you and there is no way they would be resetting an SFR email password. Just erase it.
BTW, is your main email address SFR or an Apple ID one, that is @icloud.com or if ten years or more old @me.com.
1 Like
I wouldn’t think Apple have a specific email domain for Cork - it would just be @apple.com or @subdomain.apple.com
It is very, very easy to spoof the “from” address on an email, or to make it look legit but not be.
E.g. would you spot that “Apple customer support <customer-support@аpple.com>” is not legit?
Or realise that “Apple customer support <customer@apple-support.com>” is hookey? (the domain is registered in Latvia!)
If you get anything strange - don’t panic. Look for clues that the message is not legitimate - poor grammar, pushing you to make a hasty decision, odd slight changes in the appearance of letters in the email address. Then - if you do want to follow up do not click links in the email itself, always type the address into your browser, or phone using a known reliable number.
4 Likes
I have deleted it now. My main address is I cloud with Apple ID. It seems this is quite a current scam from what I have been reading. They are such evil little shits aren’t they
2 Likes
Yup!
4 Likes
A password reset through Apple for an iCloud account requires entering a multi-digit code (6 digits, I think) that is sent to the phone number or possibly backup email account that was registered when you first opened the iCloud account (or your Apple store account). Without that digital code, in theory at least, it isn’t possible to reset the password.
1 Like
Yes indeedy - but as I understand it this was a scam purporting to “reset” her SFR account password not her Apple account password, so it’s doubly scammy! 
1 Like
It seems this scam is rampant at the moment. They must have accessed some SFR data I knew straight away I had not asked for a password reset on anything whatsoever so that was a red flag They are just unsettling though
Possibly, but not necessarily.
If your email address is “guessable” - e.g. “chris99 @ myinternetsupplier dot com” - then it may simply have had a scam email sent to it from an automated mail program. Especially with GMail, Apple or other very popular email services.
ETA: This is why it’s a bad idea for businesses to have a generic email address such as “info at” or “sales at” their domain.
Also if your email address is published anywhere publicly accessible such as social media then it may simply have been collected from there and added to a list.
1 Like