I think not

I got the following email this morning:

Payment Confirmation

Order Invoice <smithfre9642@

09:28 (3 hours ago)

to ewanherbalmagic, bcc: me

Thank You For Your Recent Purchase With iCloud by Apple Inc
This is an auto-generated confirmation email for the purchase that you have done.
You will receive another email with the invoice shortly.
This charge may appear in your account in the next 24 hours of purchase.
If you want to cancel or modify your order, visit iTunes/apple. store or call at xxx-9348
Please find your order information below:
Order Number: FNJ DCC NM2M
Order Date: 23-Sep-2021
Order Name: 12 TB iCloud Space
Amount: USD 1499.99
Paid via iTunes
We hope you shop with us again soon.
Apple Inc.
Helpdesk : xxx-9348

There is so much wrong with this message.

First, it was sent from a gmail address. I somehow doubt Apple is using gmail. Next, notice that it wasn’t sent directly to me, but to someone else with a bcc to me. I suppose the hope is that I won’t notice that and no, I have no idea who “ewanherbalmagic” is.
This was sent to an email address that I set up for a specific purpose and isn’t one I use as a matter of course, so is not attached to my iTunes account.

Now that I’ve disposed of the obvious errors, let’s look at the rest: According to the message I purchased 12 Terrabytes of iCloud storage at a price of $1,499.99 USD. That price is the equivalent today, September 23, 2021, of $1,889.99 CAD but there is no guarantee Apple would process it today, so that Canadian amount could be different from my calculation. And, I have a 1 Tb drive that still has 884 Gb free, so such a purchase would have been completely frivolous as well as far too expensive.

My feeling is that they expect you to have questions/suspicions about this message and you will either call them or use the email provided. I’ll save you the trouble and tell you that the address provided is not the way the real iTunes site shows up in your browser. This is a scam or phishing so, if you get such an email, I suggest you just delete it.

Cat.

Nice try

My email brought me the following early this afternoon:

iTunes <iTunes@websitewelcome.com>

Identity verification required

Dear Customer ,

You have received this email because our system has noticed some unusual activity under your Apple ID account.

We have taken steps to ensure nothing can be purchased until you have confirmed your identity.

Please take a moment to confirm it using the link below.
< Click Here

Thanks,
Apple Customer Support
TM and copyright © 2014 Apple Inc. 1 Infinite Loop, MS 96-DM, Cupertino, CA 95014.

Sounds serious, doesn’t it? I can’t speak for you, but when I see something like this, one of the first things I do is check my credit card statement to see if there has indeed been any unusual activity involving the company telling me I’ve been cut off. Since I haven’t bought anything from iTunes in months, any purchases would show up immediately and I’d be on the phone to the credit card company. Nothing. The only purchase in the last week was the incense I bought yesterday.

This showed as being sent “to me”, which is quite common for gmail I’ve found. But there is a little arrow that allows you to see more information. Clicked on the arrow and found something very interesting. It wasn’t sent from iTunes or Apple. Oh no. Here’s what the detailed information showed me:

from: iTunes <iTunes@websitewelcome

to: gcathoward@
cc: iTunes@websitewelcome.com
date: 2 May 2014 12:05
subject: Your Apple ID Has Been Temporarily Restricted
mailed-by: subaru.websitewelcome

Since WordPress’s robots consider any posting with too many links to be spam and blocks your account (I had it happen last year) I’ve removed the extensions on the addresses, but they were both “.com” and I removed the balance of my address for the same reason.

I’m working on only my second coffee of the day so perhaps my brain isn’t fully functioning yet, but am I the only one who finds it suspicious that a message purportedly sent by iTunes is actually being sent by Subaru? I suspect that had I actually clicked on the link I would have provided Subaru with all kinds of information that would have resulted in all kinds of promotional information being sent to me.

Not that I have anything against Subaru. We had a new sedan back in 1983 and I loved it. And truth be told, I’d love to have a new WRX Sti, but that ain’t gonna happen. Besides, there’s something about a 70 year old woman flying around in Subaru’s nastiest offering that puts people off.

If you receive a similar email apparently from iTunes, before you do anything, check your credit card statement. And when you find there is nothing unusual, delete the email. DO NOT, under any circumstances, click on the link.

Enjoy your day and remember to hug an artist – we need love too.

Cat.