Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

3bs

macrumors 603
Original poster
May 20, 2011
5,434
24
Dublin, Ireland
I wasn't sure where to post this. I got 2 emails from store@itunes.com to my college email which I don't have associated with my Apple ID so I'm not sure why I got them on that email. Is store@itunes.com even a legit Apple email?

I got 2 emails with the same content but different order number. What is this? I never purchased anything worth $699. I see one of the links is a download link for something.

"________________________________________
From: iTunes [store@itunes.com]
Sent: 26 February 2012 14:23
To: my name
Subject: Your receipt #1620148288048

[http://ax.phobos.apple.com.edgesuite.net/email/images_shared/header_invoicereceipt_l.gif] [http://ax.phobos.apple.com.edgesuite.net/email/images_shared/header_receipt_r.gif]



Billed To:
myemail






Order Number: M1V2075411
Receipt Date: 02/24/12
Order Total: $699.99
Billed To: Credit card




Item Number Description Unit Price


1 Post card (View\Download<http://omnioneworld.com/download.jpg.exe> )
Not your order?<http://noble-creek.com/check.php> Report a Problem<http://noble-creek.com/check.php> $699.99



Subtotal: $699.99
Tax: $0.00


Order Total: $699.99




Please retain for your records.
Please See Below For Terms And Conditions Pertaining To This Order.

Apple Inc.
You can find the iTunes Store Terms of Sale and Sales Policies by launching your iTunes application and clicking on Terms of Sale or Sales Policies<http://noble-creek.com/check.php>

FBI ANTI-PIRACY WARNING
UNAUTHORIZED COPYING IS PUNISHABLE UNDER FEDERAL LAW.

Answers to frequently asked questions regarding the iTunes Store can be found at http://www.apple.com/support/itunes/store/





Apple ID Summary<http://noble-creek.com/check.php> • Detailed receipt<http://omnioneworld.com/history.pdf.exe>
Apple respects your privacy.


Copyright © 2011 Apple Inc. All rights reserved<http://www.apple.com/legal/>"
 
Looks like a phishing scam. Look at some of the links to omnioneworld.com and noble-creek.com these do not look like Apple links.

FWIW did you really intend to post your email and name this way?

B
 
Looks like a phishing scam. Look at some of the links to omnioneworld.com and noble-creek.com these do not look like Apple links.

FWIW did you really intend to post your email and name this way?

B

Yeah and are they saying a post card is worth $699? I'm not really sure what the email is saying.

What do you mean? I don't understand. I removed my email and name. Is that what you meant?
 
Yeah and are they saying a post card is worth $699? I'm not really sure what the email is saying.

What do you mean? I don't understand. I removed my email and name. Is that what you meant? "FWIW did you really intend to post your email and name this way?"

They are trying to get you to click the links to the non-Apple sites. They may be Spam, Phishing or Malware loaded.

Check your account within iTunes, and check your bank. If you see no activity that you don't recognize, safely ignore these messages as spam.

You edited your message to remove the name and e-mail that were there when I first responded. Good.

B
 
They are trying to get you to click the links to the non-Apple sites. They may be Spam, Phishing or Malware loaded.

Check your account within iTunes, and check your bank. If you see no activity that you don't recognize, safely ignore these messages as spam.

You edited your message to remove the name and e-mail that were there when I first responded. Good.

B

Oh ok. Yes I will monitor my credit card statements and Apple ID. I talked to another student and she received the same email so it's safe to say that my Apple ID wasn't hacked and this is just a scam.
 
I've gotten legitimate email from Apple with all of these addresses as the FROM address:
discover@new.itunes.com
discover@newmusic.itunes.com
do_not_reply@itunes.com
do_not_reply@newmusic.itunes.com
itunes@new.itunes.com
itunes@new-music.itunes.com
iTunesStoreSupport@apple.com​
I've also gotten fake email with forged data in the FROM field to make it look like the email is from Apple. The fake ones almost always contain additional links, to non-Apple sites, and that's one way to tell them apart.
 
On a serious note: anything ending with a .exe is never apple associated.
On a not so serious note: anything ending with a .exe is never a good thing.
 
Phishers will often disguise malware within an extra long file name so that when you look at it in your file manager you will only see up to the .jpg and not the .exe

Also, spammers, scammers,and phishers are known to spoof email addresses. Recognizing the sender isn't always enough to protect you.

Forward the email to reportphishing@apple.com
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.