Archive. This is an archive of the Apple Support Community. Discussions are being restored and soon you will be able to read and post here again.

Unable to recover compromised Apple Account after security details changed

My wife's Apple Account has been compromised; her password, phone number and security questions have all been changed.


We've been through the "If you think your Apple Account has been compromised" page in the support area, but always hit a dead end when it comes to recovery.


The account is still associated with her email address, but we cannot complete the steps in https://iforgot.apple.com because the above details have been changed.


How do we resolve this..?


Thanks



4 replies

Apple offers several layers of security around account. Unfortunately you were still using an older form which was poorly implemented and sometimes easily circumvented by social engineering. In 2015 Apple transitioned to using two factor authentication instead of security questions. Since then Apple has been persistently encouraging users to switch to the more secure system. Apple allows you continue to use security questions if you already use them, but if you end up having problems then they no longer get direct support.


If somebody has successfully taken over an account to the level you indicate then there is probably not much chance of recovering ownership. Have you tried contacting Apple and seeing if they have any other ways for you to demonstrate ownership (note that anybody taking over an account could also have removed any other information demonstrating this)?


This support page has information about contacting Apple support and service ➔ https://support.apple.com/106932 If live support options (chat and/or telephone) are available they will show near the bottom left.

- Telephone numbers may only work when calling from the same country.

- Chat options (telephone numbers appear as active links, not plain text) may depend upon cellular connectivity. If a number shows as an active link, click on it to see additional options.

- If chat is not available on the top level support page, try selecting your hardware and narrow down your issue to see if a support article offers a support link offering chat. For example, the contact support link on this page https://support.apple.com/119902#zerobalance offers a chat link about emptying account balance even on a computer where the top level page does not offer any chat.

With an iPhone, iPad, or Vision, you may be able to chat using the Apple Support App if it is available in your country —> https://apps.apple.com/app/apple-support/id1130498044


You will be unable to regain access to the account. Create a new account, use a strong, unique password, and enable two-factor authentication.

Unfortunately not really.


Fundamentally, your wife can’t prove that she’s the owner because she never proved who she was to Apple to begin with. (e.g. As you'd do for a gov’t-issued ID)


The only “keys” to her account (“weak” plain text security questions) were compromised, and the holder of the keys is the holder of the account.


This is why Apple has been encouraging conversion of older accounts to 2FA for several years. (It’s mandatory on any new accounts)

Really..?


I'm concerned the individual that has stolen the account might be using it for some kind of identity theft now that they have access to the PII associated with the account.


Additionally, because the stolen account is still associated with her primary email address, I don't think we're even able to create a new account?


Surely there must be some other option? Is it possible to have to stolen account deactivated or deleted?