I have a personal domain with catch-all email enabled. Someone signed up for an Apple ID with a scrambled (random) username on that domain, and I got notified about it on my inbox.
This happens every few months and I have usually ignored them because my understanding is that Apple wouldn't allow usage of that Apple ID if the email address is not verified. Since this happens every few months, I decided to act on it this time: instead of clicking on "verify now" on the email I received, I worked through the password reset flow and managed to set a new password to the account.
However, attempting to delete the Apple ID account prompts for answers to security questions, which I don't have because I did not create the account in the first place.
There's a flow to reset security questions as well, but that prompts for an answer to the existing questions.
In chatting with an Apple support member, there's apparently a concept of "rescue email" which is different from the Apple ID and can be used to set new security question answers if the old ones are unknown. I don't get that option which indicates that the account doesn't have a rescue email set.
Since all of my available options are fruitless, I asked that the chat support member escalate my case to a higher-up and they offer to arrange of a phone support because supervisors seem to be available only on phone support. That's not ideal for me because I am a deaf person and I don't sign, and for the reason that I don't want my mobile number to be associated with this Apple ID that I didn't create.
At this point, I am curious to hear if anyone else has ever been in this situation and to understand how you've gotten out of it. I can't imagine that this is an isolated case.
Disabling catch-all on my domain isn't a solution because that'd just make me unaware of new accounts that are being created on my domain. Shouldn't Apple be hard-verifying the email address before allowing any type of usage?
Comments URL: https://news.ycombinator.com/item?id=33756458
Points: 31
# Comments: 10
Continue reading...
This happens every few months and I have usually ignored them because my understanding is that Apple wouldn't allow usage of that Apple ID if the email address is not verified. Since this happens every few months, I decided to act on it this time: instead of clicking on "verify now" on the email I received, I worked through the password reset flow and managed to set a new password to the account.
However, attempting to delete the Apple ID account prompts for answers to security questions, which I don't have because I did not create the account in the first place.
There's a flow to reset security questions as well, but that prompts for an answer to the existing questions.
In chatting with an Apple support member, there's apparently a concept of "rescue email" which is different from the Apple ID and can be used to set new security question answers if the old ones are unknown. I don't get that option which indicates that the account doesn't have a rescue email set.
Since all of my available options are fruitless, I asked that the chat support member escalate my case to a higher-up and they offer to arrange of a phone support because supervisors seem to be available only on phone support. That's not ideal for me because I am a deaf person and I don't sign, and for the reason that I don't want my mobile number to be associated with this Apple ID that I didn't create.
At this point, I am curious to hear if anyone else has ever been in this situation and to understand how you've gotten out of it. I can't imagine that this is an isolated case.
Disabling catch-all on my domain isn't a solution because that'd just make me unaware of new accounts that are being created on my domain. Shouldn't Apple be hard-verifying the email address before allowing any type of usage?
Comments URL: https://news.ycombinator.com/item?id=33756458
Points: 31
# Comments: 10
Continue reading...
