Reply to thread

Message

<blockquote data-quote="Hacker News" data-source="post: 75884" data-attributes="member: 365">I have a personal domain with catch-all email enabled. Someone signed up for an Apple ID with a scrambled (random) username on that domain, and I got notified about it on my inbox.This happens every few months and I have usually ignored them because my understanding is that Apple wouldn't allow usage of that Apple ID if the email address is not verified. Since this happens every few months, I decided to act on it this time: instead of clicking on &quot;verify now&quot; on the email I received, I worked through the password reset flow and managed to set a new password to the account.However, attempting to delete the Apple ID account prompts for answers to security questions, which I don't have because I did not create the account in the first place.There's a flow to reset security questions as well, but that prompts for an answer to the existing questions.In chatting with an Apple support member, there's apparently a concept of &quot;rescue email&quot; which is different from the Apple ID and can be used to set new security question answers if the old ones are unknown. I don't get that option which indicates that the account doesn't have a rescue email set.Since all of my available options are fruitless, I asked that the chat support member escalate my case to a higher-up and they offer to arrange of a phone support because supervisors seem to be available only on phone support. That's not ideal for me because I am a deaf person and I don't sign, and for the reason that I don't want my mobile number to be associated with this Apple ID that I didn't create.At this point, I am curious to hear if anyone else has ever been in this situation and to understand how you've gotten out of it. I can't imagine that this is an isolated case.Disabling catch-all on my domain isn't a solution because that'd just make me unaware of new accounts that are being created on my domain. Shouldn't Apple be hard-verifying the email address before allowing any type of usage?<hr />Comments URL: <a href="https://news.ycombinator.com/item?id=33756458" target="_blank">https://news.ycombinator.com/item?id=33756458</a>Points: 31# Comments: 10<a href="https://news.ycombinator.com/item?id=33756458" target="_blank">Continue reading...</a></blockquote>

[QUOTE="Hacker News, post: 75884, member: 365"] I have a personal domain with catch-all email enabled. Someone signed up for an Apple ID with a scrambled (random) username on that domain, and I got notified about it on my inbox. This happens every few months and I have usually ignored them because my understanding is that Apple wouldn't allow usage of that Apple ID if the email address is not verified. Since this happens every few months, I decided to act on it this time: instead of clicking on "verify now" on the email I received, I worked through the password reset flow and managed to set a new password to the account. However, attempting to delete the Apple ID account prompts for answers to security questions, which I don't have because I did not create the account in the first place. There's a flow to reset security questions as well, but that prompts for an answer to the existing questions. In chatting with an Apple support member, there's apparently a concept of "rescue email" which is different from the Apple ID and can be used to set new security question answers if the old ones are unknown. I don't get that option which indicates that the account doesn't have a rescue email set. Since all of my available options are fruitless, I asked that the chat support member escalate my case to a higher-up and they offer to arrange of a phone support because supervisors seem to be available only on phone support. That's not ideal for me because I am a deaf person and I don't sign, and for the reason that I don't want my mobile number to be associated with this Apple ID that I didn't create. At this point, I am curious to hear if anyone else has ever been in this situation and to understand how you've gotten out of it. I can't imagine that this is an isolated case. Disabling catch-all on my domain isn't a solution because that'd just make me unaware of new accounts that are being created on my domain. Shouldn't Apple be hard-verifying the email address before allowing any type of usage? [HR][/HR] Comments URL: [URL]https://news.ycombinator.com/item?id=33756458[/URL] Points: 31 # Comments: 10 [url="https://news.ycombinator.com/item?id=33756458"]Continue reading...[/url] [/QUOTE]

Verification