Apple Account compromised – date of birth and security questions changed

Vgxglad wrote:

what to do?

If this follows a common pattern in recent times, account takeovers involve accounts with weak security and weak passwords, and password reuse.

Or more succinctly, that’s not your account. Not any more.

What can you try?

Add a virtual payment card with a very low spending limit, and (try to) use that virtual payment card info to (try to) claw back control of this account during recovery: If you forgot your password and can’t sign in to your Apple Account - Apple Support (account recovery section)

Details on this last-chance account clawback attempt: iPhone, iPad, Mac, or Apple Account Secur… - Apple Community

PS: It is trivial to take over all accounts with re-used passwords and no two-factor authentication, just as soon as one use of that account and password anywhere leaks. If that combination describes anybody reading this now or in the future, fix this soonest. New and unique passwords for all accounts, and two-factor where available.

PS: if you can claw back enough access to enable two-factor authentication here, and can then verify and update your trusted telephone numbers and email addresses, I’d also enable a Recovery Key for at least two weeks.

This recovery key should block the folks controlling this account from re-compromising the account using theirm security questions.

Do not lose this recovery key!

After the two week window when the account security questions no longer work (disabling two-factor), then you can remove the recovery key, and revert to allowing Apple to assist with forgotten passwords.

It’s unfortunate that you didn’t have 2FA already setup.

While you changed your password, it’s only temporary. Whoever changed your security questions can STILL regain access to your account.

If you think your Apple Account has been compromised - Apple Support

You might seriously consider establishing a whole new account and abandoning this compromised account.

Vgxglad wrote:

I did it, but it doesn't matter, I haven't used my phone in a long time, there was nothing interesting there.

That is typically the case on those old accounts. If the account is signed into the device and you have proof of purchase, you may be able remove the account there by submitting the documentation for an Activation Lock removal request.

https://al-support.apple.com/#/al/agreement

Two Factor Authentication should have been turned on long ago, as it has been recommended for the last 11 years and any recently created account will always have 2FA on without being able to turn it off.

Turning it on after your account has already been compromised is usually too late. You can try doing that now, but not sure if you will be required to answer those unknown Security Questions.

Two-factor authentication for Apple Account - Apple Support

I suspect this is a very old account, are you using it anymore? Many services/features now can only be used with 2FA turned on.

MrHoffman has provided a much more detailed approach and hopefully that will work for you.

Is that in-response to something YOU did …

… or did spontaneously arrive ?

I’m also not sure what EXACTLY we’re looking at ???

All sorts of things can be set to pop-up on a lock screen; even communications from criminals

what to do?

[Edited by Moderator]

I did it, but it doesn't matter, I haven't used my phone in a long time, there was nothing interesting there.