Apple Account compromised – waiting weeks for a response from Apple Support

For the past 11 years Apple has recommended users turn on Two Factor Authentication for those old account that are using Security Questions. The use of Security Questions have long ago been deprecated due to their ease of compromising account through Social Engineering to get the answers to them. Once that is done, it is likely you will never have control over that account and that would include deleting it.

Having access to a Gmail account does not prove you own the Apple Account it is linked to. If that was the case then anyone that compromised your Gmail account would be able to gain access to your Apple Account, but in either case having access to one does not prove ownership of the other. No positive identification is used to prove ownership of either account.

Review the information provided by Limnos here:

Unable to Reset Apple Account Security Qu… - Apple Community

HHHansen wrote:

Is there really no way for Apple to verify the situation and delete an account that has been compromised?

It just does not place Apple in a very good position where they are the arbitrator to determine who actually "owns" the account, especially when you don't even prove your identity when the account is created. That is why they place ownership on the user with the Password and access using the security tools that they provide for their own protection and verification. When companies are placed in the position in giving someone access to an account, that has failed in the past and are then liable for their actions. It is the user that protects their account and if you end up giving the password to someone else, then they "own" the account and can make any changes they wish including deleting it.

Imagine your current account being deleted because someone was able to convince Apple that they owned the account. If the use of the email address linked to the account was all that was needed, just by getting the password to your email account would mean I could delete your Apple Account. Deleting an account requires that you have access to it in the first place.

HHHansen wrote:

I have never knowingly shared my password, and I would appreciate it if that assumption could be avoided.

Since you were not using Two Factor Authentication, the only thing that they need to do is answer the Security Questions you had set up. That information is now readily available through Social Engineering and why Apple does not use them anymore and the recommendation for older account to turn on 2FA. Mother's maiden name, place of birth, etc are not that difficult nowadays to figure out. For the last several years you cannot even create an account without 2FA.

With 2FA, none of this is possible, since it would require a code sent to one of your Trusted Devices or a Trusted Phone Number that only you would add to your account to receive that code. Once your account has been compromised, then it is very difficult to enable 2FA, since it can be turned off within 14 days on an older account.

There is a User Tip provided by another user that may be helpful.

iPhone, iPad, Mac, or Apple Account Secur… - Apple Community

Thank you for your reply. This is an old Apple Account that I haven't used for many years.

Someone has taken control of the account and changed the security questions without my permission. Because of this, I can no longer access my account.

If I still had access to the account, I would simply delete it myself. I am not trying to recover the account so I can use it again. I just want it deleted, as I no longer use it.

I have contacted Apple Support and forwarded the relevant emails and evidence several times over the past few weeks, but I still haven't received a resolution.

Is there really no way for Apple to verify the situation and delete an account that has been compromised?

I understand your point, but I have never given my password to anyone.

I have received emails in my Gmail account indicating that someone is selling products linked to my Apple Account. I believe my account is being misused.

When I change the Apple Account password to prevent further misuse, the person involved appears to react by attempting to change the account credentials again. I don't know whether this person is the scammer or someone who may also have been deceived.

I have been trying to prevent further misuse and make it more difficult for them to change the account details, but I cannot regain proper control because the security questions have been changed without my permission.

This is why I contacted Apple and forwarded the relevant emails as evidence. I am not asking Apple to hand the account over to me based solely on access to my Gmail address. I am asking them to investigate the suspected fraud and advise me on what can be done.

I have never knowingly shared my password, and I would appreciate it if that assumption could be avoided.