Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
'Unsuccessful order' email from Apple
- Thread starter shellbryson
- Start date
- Sort by reaction score
Are you sure the link isn't going to a different site and then auto forwarding you to Apple's order page? Thus getting you to log in with some sort of key logger or input scanner or something which gives them your login data to the Apple Store?
Hmm - very odd then.
Do you want to forward the headers of the e-mail to me? I'll check the IP addresses and see if it genuinely came from Apple.
Doesn't look like anything odd in the headers to me, but knock yourself out
PHP:
Return-Path: <do_not_reply@orders.apple.com>
Delivery-Date: Mon, 12 Mar 2012 12:40:18 +0100
Received-SPF: pass (mxbap1: domain of orders.apple.com designates 17.254.6.191 as permitted sender) client-ip=17.254.6.191; envelope-from=do_not_reply@orders.apple.com; helo=badger1501.apple.com;
Received: from badger1501.apple.com (badger1501.apple.com [17.254.6.191])
by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
id 0MGgin-1SBALA1DX7-00E5Qu for (my email address); Mon, 12 Mar 2012 12:40:18 +0100
Received: from unknown (HELO coldbay.apple.com) ([17.128.113.95])
by badger-txnvip.apple.com with ESMTP; 12 Mar 2012 04:40:16 -0700
Date: Mon, 12 Mar 2012 11:40:16 +0000 (GMT)
From: "do_not_reply_con_en@euro.apple.com" <do_not_reply_con_en@euro.apple.com>
To: (my email address)
Message-ID: <1251671750.38162381331552416281.JavaMail.cboxp@coldbay.apple.com>
Subject: Your Apple Store order ('my' order number)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_1908025_934860988.1331552416280"
X-EmailType-Id: 11436
X-Sent-To: (my email address),2,b%2Bv4TqPBUZrQ0spypQQhv06%2BiK04NerXm%2F0giXaEIZZ3IK1TZArD%2FtgTRG47geMKbjIyG7qmAEwocIF3sBvGZb8xkNa1RFzAaUslKEeGf2jp0KwYYh07f7sxZsy1IPV1%2FfSAFz60Zm6qSgnsZ%2BEJV46Mc52x9gNIS90UjO2jC7RosDFosd7KL6oDHs30xSLjAeXznpO2Q7JIeDkQ8GeLxVu2O1jEe3CqFBbyL4ByfPS8raOhGup1kM%2F0UhKeEDKoJPnfXquM%2FhvkJ2O9ZfrREAQLJq%2FlTRCfD8jfVRgHRaGnQvO%2B0OHPPr1bRa%2BnJAsth9AILInHcgSDh75sChmTMNpdQ2dIFXH7gkLtvG0bx7gxwow6ohIu%2BFRFVANqPNdkG0o1M06d%2FN39jYOa%2F4Hv8JkhMi030w%2F79DHEk67UBI16ce05v9HDVYn43W5eoXj5mawCvm17keNL%2B%2FA2ur%2FVj7T373BCbotUHSN7TX%2BvczNcfInjRGmA2MHa%2BwzVfeiF5c%2BVsUziReGQ1DJcKFSXS4T0hSPd8fhM9LDeHz3HeoNX6dT76eauC1aVhaBMG%2Bkq
X-DKIM_SIGN_REQUIRED: YES
X-UI-Loop: V01:ZDLJWs85vfo=:l45Oo1ol2Q/tdofdz6ZRL1dBunnzRe+WFjITK2NeW5w=
X-UI-Junk: AutoMaybeJunk +0 ();
V01:cmZqYFn2:py/wB2iPvEaTNT7pk0A11kV3pDvaZonkoFV6qYoVpo3wZtCsFwP
wAAJNHtFQZSJPQ0tvoIK4icEtXc4Xla4zBNFLQ+c9ghZNesptzsWA/dsD9wkxqv0
kFJFG8xfLj+yhByAx4yQXFq6CLJ6BDYUltGeu4ikpnLh3JDH5zQ3L+R9MHDjkorp
4XYF4e42mhBXLS/1G0xgUzy54BR85ZXp55w==
Envelope-To: (my email address)
------=_Part_1908025_934860988.1331552416280
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: QUOTED-PRINTABLE
Content-Disposition: inline
Dear Apple Customer,
Thank you for shopping at the Apple Store online.
Unfortunately your attempt to place an Order with us has been unsuccessful.
Your credit card has been authorised and we are in the process of reversing=
this authorisation. Please contact your bank directly to confirm when the =
authorization will be cancelled.
If you would like to place an order with us please call one of our Sales Re=
presentatives on 0845 600 1683 who will be more than happy to facilitate th=
is for you.
Kind regards,
Apple Online Store
Terms & Conditions =09| http://store.apple.com/uk/open/salespolicies
Privacy Policy =09| http://www.apple.com/uk/legal/privacy/
Terms of Use =09| http://www.apple.com/uk/legal/terms/site.html
Contact Us =09| http://www.apple.com/uk/contact/
Copyright =A9 2012 Apple Inc. All rights reserved.
Apple Sales International Hollyhill Industrial Estate, Cork, Republic of Ir=
eland
Directors: Cathy Kearney (Irish), Tim Cook, Jae Allen, Peter Oppenheimer an=
d Elizabeth S. Rafael (United States of America).
------=_Part_1908025_934860988.1331552416280
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: QUOTED-PRINTABLE
Content-Disposition: inline
<html>
<head>
<META http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF-8">
<meta content=3D"text/html; charset=3Dutf-8" http-equiv=3D"Content-Type">
<meta content=3D"width =3D 665" name=3D"viewport">
<title>AOS Adhoc Emails</title>
<style type=3D"text/css">
=09.aapl-link {text-decoration:none}
=09.aapl-link:hover {text-decoration:underline}
=09</style>
<style type=3D"text/css" media=3D"only screen and (max-device-width: 480px)=
">
=09* {line-height: normal !important;}
=09</style>
</head>
<body style=3D"margin:0;padding:0" bgcolor=3D"#D0D8DB">
<table align=3D"center" cellspacing=3D"0" cellpadding=3D"0" bgcolor=3D"#D0D=
8DB" width=3D"100%">
<tr>
<td style=3D"padding:20px;background-color:#D0D8DB">
<table bgcolor=3D"#ffffff" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"=
align=3D"center" width=3D"625">
<tr>
<td width=3D"25%"><a href=3D"http://store.apple.com/uk"><img style=3D"displ=
ay:block;margin:0" border=3D"0" height=3D"41" width=3D"156" alt=3D"Apple On=
line Store" src=3D"http://store.apple.com/Catalog/uk/Images/email/applestor=
e.jpg"></a></td><td width=3D"43%"><img style=3D"display:block;margin:0" bor=
der=3D"0" height=3D"41" width=3D"100%" alt=3D"" src=3D"http://store.apple.c=
om/Catalog/uk/Images/email/spacer.jpg"></td><td width=3D"93"><a href=3D"htt=
p://store.apple.com/uk/orderstatus"><img style=3D"display:block;margin:0" b=
order=3D"0" src=3D"http://store.apple.com/Catalog/uk/Images/email/orderstat=
us.jpg"></a></td><td width=3D"93"><a href=3D"http://store.apple.com/uk/help=
"><img style=3D"display:block;margin:0" border=3D"0" src=3D"http://store.ap=
ple.com/Catalog/uk/Images/email/help.jpg"></a></td><td width=3D"15"><img st=
yle=3D"display:block;margin:0" height=3D"41" width=3D"15" alt=3D"" src=3D"h=
ttp://store.apple.com/Catalog/uk/Images/email/tspacer_r.jpg"></td>
</tr>
</table>
<table style=3D"border-left:solid 1px #B3B3B3; border-right:solid 1px #B3B3=
B3;" border=3D"0" bgcolor=3D"#ffffff" cellspacing=3D"0" cellpadding=3D"0" a=
lign=3D"center" width=3D"625">
<tr>
<td width=3D"30"><img border=3D"0" height=3D"1" width=3D"30" src=3D"http://=
store.apple.com/Catalog/uk/Images/email/spacer.gif"></td><td style=3D"font-=
size:11px;padding:20px 50px 15px 30px" align=3D"left" valign=3D"top" width=
=3D"570">
<div style=3D"font-family: Lucida Grande, Arial, Helvetica, Geneva, Verdana=
, sans-serif; color:#333333; font-size:11px; line-height: 14px">Dear Apple =
Customer,</div>
<div style=3D"font-family: Lucida Grande, Arial, Helvetica, Geneva, Verdana=
, sans-serif; color:#333333; font-size:11px; line-height: 14px; padding-top=
:10px">
<span style=3D"white-space: pre-wrap;">Thank you for shopping at the Apple =
Store online.</span>
</div>
<div style=3D"font-family: Lucida Grande, Arial, Helvetica, Geneva, Verdana=
, sans-serif; color:#333333; font-size:11px; line-height: 14px; padding-top=
:10px">
<span style=3D"white-space: pre-wrap;">Unfortunately your attempt to place =
an Order with us has been unsuccessful.</span>
</div>
<div style=3D"font-family: Lucida Grande, Arial, Helvetica, Geneva, Verdana=
, sans-serif; color:#333333; font-size:11px; line-height: 14px; padding-top=
:10px">
<span style=3D"white-space: pre-wrap;">Your credit card has been authorised=
and we are in the process of reversing this authorisation. Please contact =
your bank directly to confirm when the authorization will be cancelled.</sp=
an>
</div>
<div style=3D"font-family: Lucida Grande, Arial, Helvetica, Geneva, Verdana=
, sans-serif; color:#333333; font-size:11px; line-height: 14px; padding-top=
:10px">
<span style=3D"white-space: pre-wrap;">If you would like to place an order =
with us please call one of our Sales Representatives on 0845 600 1683 who w=
ill be more than happy to facilitate this for you.</span>
</div>
<div style=3D"font-family: Lucida Grande, Arial, Helvetica, Geneva, Verdana=
, sans-serif; color:#333333; font-size:11px; line-height: 14px; padding-top=
:10px">
<span style=3D"white-space: pre-wrap;">Kind regards,</span>
</div>
<div style=3D"font-family: Lucida Grande, Arial, Helvetica, Geneva, Verdana=
, sans-serif; color:#333333; font-size:11px; line-height: 14px; padding-top=
:10px">
<span style=3D"white-space: pre-wrap;">Apple Online Store</span>
</div>
</td><td width=3D"25"><img border=3D"0" height=3D"1" width=3D"25" src=3D"ht=
tp://store.apple.com/Catalog/uk/Images/email/spacer.gif"></td>
</tr>
</table>
<table style=3D"border-top:solid 1px #ccc;" bgcolor=3D"#ffffff" border=3D"0=
" cellpadding=3D"0" cellspacing=3D"0" width=3D"625" align=3D"center">
<tr colspan=3D"3">
<td align=3D"left" width=3D"10"><img height=3D"48" width=3D"10" src=3D"http=
://store.apple.com/Catalog/uk/Images/email/bspacer_l.gif"></td><td style=3D=
"font-family: Lucida Grande, Arial, Helvetica, Geneva, Verdana, sans-serif;=
font-size:11px; line-height: 14px;color:#999; border-bottom:solid 1px #B3B=
3B3; font-size:11px;" bgcolor=3D"#ffffff" align=3D"center" width=3D"605"><a=
class=3D"aapl-link" style=3D"color:#007CBA;font-family: Lucida Grande, Ari=
al, Helvetica, Geneva, Verdana, sans-serif; font-size:11px; line-height: 14=
px;white-space:nowrap" href=3D"http://store.apple.com/uk/open/salespolicies=
">Terms & Conditions</a>=20
=09=09=09=09=09=09=09=09=09|=20
=09=09=09=09=09=09=09=09 <a class=3D"aapl-link" style=3D"color:#007CBA;font=
-family: Lucida Grande, Arial, Helvetica, Geneva, Verdana, sans-serif; font=
-size:11px; line-height: 14px;white-space:nowrap" href=3D"http://www.apple.=
com/uk/legal/privacy/">Privacy Policy</a>=20
=09=09=09=09=09=09=09=09=09|=20
=09=09=09=09=09=09=09=09 <a class=3D"aapl-link" style=3D"color:#007CBA;font=
-family: Lucida Grande, Arial, Helvetica, Geneva, Verdana, sans-serif; font=
-size:11px; line-height: 14px;white-space:nowrap" href=3D"http://www.apple.=
com/uk/legal/terms/site.html">Terms of Use</a>=20
=09=09=09=09=09=09=09=09=09|=20
=09=09=09=09=09=09=09=09 <a class=3D"aapl-link" style=3D"color:#007CBA;font=
-family: Lucida Grande, Arial, Helvetica, Geneva, Verdana, sans-serif; font=
-size:11px; line-height: 14px;white-space:nowrap" href=3D"http://www.apple.=
com/uk/contact/">Contact Us</a>
=09=09
<br>Copyright =A9 2012 Apple Inc. All rights reserved.</td><td align=3D"ri=
ght" width=3D"10"><img height=3D"48" width=3D"10" src=3D"http://store.apple=
.com/Catalog/uk/Images/email/bspacer_r.gif"></td>
</tr>
</table>
<table bgcolor=3D"#D0D8DB" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"=
width=3D"625" align=3D"center">
<tr colspan=3D"3">
<td align=3D"left" width=3D"15"><img style=3D"display:block;margin:0" heigh=
t=3D"1" width=3D"15" alt=3D"spacer" src=3D"http://store.apple.com/Catalog/d=
e/Images/email/spacer.gif"></td><td style=3D"padding:24px 20px 16px 0; font=
-family: Lucida Grande, Geneva, Verdana, Arial, Helvetica, sans-serif; font=
-size:9px; line-height:12px; color:#999999;" align=3D"left" width=3D"570">A=
pple Sales International Hollyhill Industrial Estate, Cork, Republic of Ire=
land<br>Directors: Cathy Kearney (Irish), Tim Cook, Jae Allen, Peter Oppenh=
eimer and Elizabeth S. Rafael (United States of America).<br>
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
<img src=3D'http://insideapple.apple.com/img/APPLE_EMAIL_LINK/spacer4.gif?v=
=3D2&a=3Db%2Bv4TqPBUZrQ0spypQQhv06%2BiK04NerXm%2F0giXaEIZZ3IK1TZArD%2FtgTRG=
47geMKbjIyG7qmAEwocIF3sBvGZb8xkNa1RFzAaUslKEeGf2jp0KwYYh07f7sxZsy1IPV1%2FfS=
AFz60Zm6qSgnsZ%2BEJV46Mc52x9gNIS90UjO2jC7RosDFosd7KL6oDHs30xSLjAeXznpO2Q7JI=
eDkQ8GeLxVu2O1jEe3CqFBbyL4ByfPS8raOhGup1kM%2F0UhKeEDKoJPnfXquM%2FhvkJ2O9Zfr=
REAQLJq%2FlTRCfD8jfVRgHRaGnQvO%2B0OHPPr1bRa%2BnJAsth9AILInHcgSDh75sChmTMNpd=
Q2dIFXH7gkLtvG0bx7gxwow6ohIu%2BFRFVANqPNdkG0o1M06d%2FN39jYOa%2F4Hv8JkhMi030=
w%2F79DHEk67UBI16ce05v9HDVYn43W5eoXj5mawCvm17keNL%2B%2FA2ur%2FVj7T373BCbotU=
HSN7TX%2BvczNcfInjRGmA2MHa%2BwzVfeiF5c%2BVsUziReGQ1DJcKFSXS4T0hSPd8fhM9LDeH=
z3HeoNX6dT76eauC1aVhaBMG%2Bkq'/>
</html>
------=_Part_1908025_934860988.1331552416280--That really looks like a phising attempt to me. Notice the mispelling of "authorisation" followed shortly by the correct spelling. Apple likely would not have been that careless. Also the capitalization of "Order" is wrong. I feel sorry for the people who actually call that number and give up their credit card number.
The number *is* the Apple UK number. The email certainly smells of phish, even if it doesn't actually manage to do anything (taste of) phishy.
If you do a bit of DNS digging - the originating Email server (badger1702.apple.com) is using an IP Address that does belong to Apple.com.
As there is no other payload in the content of the message meta data and all the links are properly constructed and point to valid Apple web pages......I'd say it's an internal balls up and nothing more sinister personally
As there is no other payload in the content of the message meta data and all the links are properly constructed and point to valid Apple web pages......I'd say it's an internal balls up and nothing more sinister personally
Who knows? Who cares?
Unless I'm missing something:
In the examples I've seen - the email originates from a valid Apple owned IP (mail server), goes straight to your ISP / Email provider receiving mail server and ends up with you directly without any further hops to unknown IP addresses
There are no badly constructed or "hidden" links to non-Apple web pages
There is no payload hidden in the message content itself
For a scam to work there has to be an intention to harvest data from or deliver a payload to the end user. They need a way to capture your login etc.
This message has no mechanism that allows that to happen. All it has are valid links to valid web pages all from / on valid Apple.com IP address......maybe Apple are scamming us
!!!.....Hang-on...I just paid a crap load for their latest device.....I've already been scammed
It's spam people. I have been getting similar ones from amazon.com randomly. Do not reply or follow any links! Call Apple directly on their authorized number if you have any questions.
I had one of these this morning.
Called Apple. At first they were slightly confused and couldn't work out what it was from however have now heard back from them.
Turns out it's to do with, in my case anyway, having had my card pre authorised more than once when attempting to purchase the new iPad but getting the 'oops' message.
Several orders were pre authorised on my card, but the orders not actually fulfilled. This email was Apple's finance department dropping the pre authorisation on my card.
It's just taking them time to sort out these errors from last Wednesday / Thursday. Am delighted to know that it has not affected my actual order which is still due on or before the 16th.
I'd suggest it's still worth checking this out with Apple however suspect the majority of people receiving these will have pre ordered an iPad and perhaps encountered difficulties / the 'oops' error while doing so.
Called Apple. At first they were slightly confused and couldn't work out what it was from however have now heard back from them.
Turns out it's to do with, in my case anyway, having had my card pre authorised more than once when attempting to purchase the new iPad but getting the 'oops' message.
Several orders were pre authorised on my card, but the orders not actually fulfilled. This email was Apple's finance department dropping the pre authorisation on my card.
It's just taking them time to sort out these errors from last Wednesday / Thursday. Am delighted to know that it has not affected my actual order which is still due on or before the 16th.
I'd suggest it's still worth checking this out with Apple however suspect the majority of people receiving these will have pre ordered an iPad and perhaps encountered difficulties / the 'oops' error while doing so.
Last edited:
My card was authorised 3 times but only one order went through. I got 2 unsuccessful emails from Apple which I reckon are to do with the 2 authorisation charges I enquired about which they said they were going to sort out.
I had the same email/ It does look like them catching up with the 'Ooops' as I also ordered a new iPad and got the error several times.
I looked through the headers and found no problem / scam with it.
BTW. in the UK (British English) 'authorisation' is the correct spelling. There is no 'z' in it.
pi
I looked through the headers and found no problem / scam with it.
BTW. in the UK (British English) 'authorisation' is the correct spelling. There is no 'z' in it.
pi
I got this too. Rang them and they said it must have been due to the numerous 'Oops' screens I encountered when pre-ordering. They said my iPad order is fine and will arrive on the 16th!
I rang them too (but on the number on the website to be safe), and they said it would have been from an aborted order that had gotten as far as authorising the card. So I think its genuine. I guess we'll see when we get credit card bills, and see if there are two debits, followed by a returned one.
Would have sucked if anyone had an aborted one, and then couldn't do a proper one because their card was maxed out!
Would have sucked if anyone had an aborted one, and then couldn't do a proper one because their card was maxed out!
Guys there's no way this is a phishing email. As someone pointed out the headers show the email is from Apple, and the email is simply referring to the duplicate authorizations.
If it was a phishing email, it'd be utterly useless seeing as the number they give is Apple's official number, and the link takes you directly to Apple
If it was a phishing email, it'd be utterly useless seeing as the number they give is Apple's official number, and the link takes you directly to Apple
I agree. However, they should be doing that so as not to arouse suspicion in any event!
Not calling me by my name is the first thing I notice in any fake email.
----------
Authorization is the American spelling (I say American but it's probably used elsewhere). Chopping and changing between the two and also capitalising "order" is very strange bearing in mind the email appears to be a standard letter.
Grammatical errors from employers are to be expected, but I highly doubt a company such as Apple would have so many errors in their standard letters.
Looks dodgy to me!
The phone number quoted appears to belong to Apple UK.
I got one of these too.. And, I can't figure it out because the mentioned Order Number doesn't match ANY of my orders!!! Also, all my orders state Shipped and I have a tracking number that shows they're scheduled for a future delivery date of March 16th!!
Here's the copy paste of the email body:
Order Date: Mar 07, 2012
Customer Name: Rahul Xxxxx
Dear Apple Customer,
Thank you for your recent iPad purchase at the Apple Online Store.
While we appreciate your interest in the new iPad, we are unable
to process your order. Apple is unable to fulfill orders that exceed
the quantity limit per customer, or that ship to an international,
freight forwarder, or an APO/AFO address.
Your iPad order has been cancelled, and you will not be charged.
Thank you for shopping with Apple.
The Apple Online Store
Answers to many Apple Online Store questions can be found at
online Help: <http://store.apple.com/us/help>
Email Header:
Action Required: Order xxxxxxxxx88
donotreply@apple.com
Sent: Monday, March 12, 2012 8:14 PM
To: Rahul_Xxxxx@alum.mit.edu
Weird indeed!!!
Here's the copy paste of the email body:
Order Date: Mar 07, 2012
Customer Name: Rahul Xxxxx
Dear Apple Customer,
Thank you for your recent iPad purchase at the Apple Online Store.
While we appreciate your interest in the new iPad, we are unable
to process your order. Apple is unable to fulfill orders that exceed
the quantity limit per customer, or that ship to an international,
freight forwarder, or an APO/AFO address.
Your iPad order has been cancelled, and you will not be charged.
Thank you for shopping with Apple.
The Apple Online Store
Answers to many Apple Online Store questions can be found at
online Help: <http://store.apple.com/us/help>
Email Header:
Action Required: Order xxxxxxxxx88
donotreply@apple.com
Sent: Monday, March 12, 2012 8:14 PM
To: Rahul_Xxxxx@alum.mit.edu
Weird indeed!!!
Its just Bill Gates trying to get you. His dad never took him fishing as a kid. He is just trying to make up for it.