Apple Account Security and Phishing Help

Recognise a concern without trusting a message

Unrequested authentication codes, unfamiliar devices, changed account details or a password that no longer works can signal a problem. Open Apple's official account site directly instead of following a message link. A geographic sign-in alert alone is not conclusive proof of an attacker.

Regain control through the official process

From a trusted device, change or reset the Apple Account password. Review personal and security information and remove devices that the owner does not recognise. Check control of the associated email address and phone number, including unexpected forwarding or account changes.

If sign-in or password reset is unavailable

Use iforgot.apple.com to start Apple's account recovery process. There may be a waiting period. Do not pay for a promise to skip Apple's identity checks or defeat two-factor authentication.

After a phishing message

If credentials were entered, change them through the legitimate provider and review account access. If files or remote-support software were opened, arrange a device assessment as well. Keep the original message and relevant timestamps where reporting or an investigation is needed.

Technical assistance and limits

ZA Support can help review device settings, account-security options, available records and the recovery steps. Account ownership, provider decisions and encryption remain controlling limits. Passwords and recovery codes should not be included in ordinary enquiry messages.

Further reading

• Apple: regain control of a compromised account