Was I just "phished"?

dictoresno

macrumors 601
Original poster
Apr 30, 2012
4,196
465
NJ
Got an email stating my trouble ticket was closed, which I do have some open but not this number and this isnt my contact info. Links appear to bring me to apples legit website. Anyone else confirm?

Every time I try to log into my Apple ID with 2FA it says I'm near Atlanta Georgia and I'm actually in NJ.

 
Last edited:

Roy G Biv

macrumors 6502
Dec 26, 2010
328
25
Check the actual email sender. It may show "Apple" as the name but a 3rd party for the email if you look. I think phishing would give you a number or a link that mimics Apple to give your information. Caution.
 

steve23094

macrumors 68030
Apr 23, 2013
2,621
1,333
Doesn't sound legit then. With this sort of stuff (including 'banks' contacting you) don't reply or speak to anybody that has phoned or emailed you. Call them on a number you know is good and ask if they were trying to get hold of you.
 

3568358

macrumors 6502
Jun 11, 2015
274
106
United States
Yes you have been fished. The email isn't one that apple will use, and apple will not get your name wrong. Change all accounts that use your apple id email/pass combo

If you think you're safe- you're already dead. Ive seen many people get phished and i know some people that do it actually- CHANGE PASS IMMEDIATELY!
 
  • Like
Reactions: jgelin

dictoresno

macrumors 601
Original poster
Apr 30, 2012
4,196
465
NJ
Yes you have been fished. The email isn't one that apple will use, and apple will not get your name wrong. Change all accounts that use your apple id email/pass combo

If you think you're safe- you're already dead. Ive seen many people get phished and i know some people that do it actually- CHANGE PASS IMMEDIATELY!
I did change it within a minute of clicking on it.
 

dictoresno

macrumors 601
Original poster
Apr 30, 2012
4,196
465
NJ
No matter which browser I use on my phone, it keeps saying I'm near Atlanta every time I try to log into the legit apple website. Even after a reboot and cache clearing.
 

Relentless Power

macrumors Nehalem
Jul 12, 2016
30,379
30,646
Got an email stating my trouble ticket was closed, which I do have some open but not this number and this isnt my contact info. Links appear to bring me to apples legit website. Anyone else confirm?

Every time I try to log into my Apple ID with 2FA it says I'm near Atlanta Georgia and I'm actually in NJ.

Yes. You were phished. If haven't, take the immediate precautions to update your account and log in information. I would also contact Apply directly.
 

dictoresno

macrumors 601
Original poster
Apr 30, 2012
4,196
465
NJ
Yes. You were phished. If haven't, take the immediate precautions to update your account and log in information. I would also contact Apply directly.
Gonna call them when I get home. Passwords have been updated within minutes. Also, checked online and there are no additional devices or purchases made on the account. Is Apple open this late?
 

Relentless Power

macrumors Nehalem
Jul 12, 2016
30,379
30,646
Gonna call them when I get home. Passwords have been updated within minutes. Also, checked online and there are no additional devices or purchases made on the account. Is Apple open this late?
No. Online chat possibly. Phone contact is out of operating hours.
 

dictoresno

macrumors 601
Original poster
Apr 30, 2012
4,196
465
NJ
Why would my location for 2FA be popping up as Atlanta when my phone is properly reporting my correct location?
 

dictoresno

macrumors 601
Original poster
Apr 30, 2012
4,196
465
NJ
Something to do with the way your ISP is identifying your location?
my ISP correctly identifies where is always does, a few towns away from my actual location. when I'm on cellular connection, it shows as Atlanta.

so I'm on the chat with apple care. they cannot confirm their automated emails come from that address or not at this time, however the case number I provided is valid. they also couldn't confirm with me that their contact info matched the one I gave them, for obvious reasons. however they and a senior advisor said they are very confident it was just a mistake. they said the advisors manually type in email addresses and they think I received someone elses confirmation email. I checked the email header in OS X and don't see anything out of the ordinary. also, the link in the email brought me to the actual apple support website, as it had the green "apple.com" verification up top. they scheduled a security team phone call in the morning, but preliminary checks so it to all add up for now.

there were no unauthorized purchases, log on attempts or password changed to my account.

The rep also sent me an email, which came from "noreply@email.apple.com" and the automated email confirming my call back in the morning came from AppleSupport@email.apple.com, same as the one in the OP. so I'm guessing it really is legitimate.
 
Last edited:

dictoresno

macrumors 601
Original poster
Apr 30, 2012
4,196
465
NJ
Spoke with apple care. They stated it was indeed a mistake and was in fact a legitimate email. Apparently the apple care rep helping the other guy somehow linked my information to his trouble ticket. How the F does that happen? Well apple had no idea either other than it was human error. She apologized on behalf of her colleague and took my info off this other guys trouble ticket. So if this happens to anyone else, it is possible.
 

EX1127

macrumors 6502
May 26, 2009
300
120
Louisiana
Spoke with apple care. They stated it was indeed a mistake and was in fact a legitimate email. Apparently the apple care rep helping the other guy somehow linked my information to his trouble ticket. How the F does that happen? Well apple had no idea either other than it was human error. She apologized on behalf of her colleague and took my info off this other guys trouble ticket. So if this happens to anyone else, it is possible.
Thats weird I think the same thing happened to me the other day. I didnt call to check it out but didnt click anything inside the email either.
 
  • Like
Reactions: dictoresno

midnightcapybara

macrumors newbie
Aug 11, 2015
8
4
This will help you as well. Basically, as long as you're getting the 2FA notification within a few seconds, it's you. The location is just extra security but just approximate.

HT204915 - What if I don’t recognize the location shown in my sign in notification?

When you sign in on a new device, you’ll get a notification on your other trusted devices that includes a map showing the approximate location of the new device. This is an approximate location based on the IP address the device is currently using, rather than the exact location of the device. The location shown might reflect the network you're connected to, and not your physical location.