My Apple ID was compromised, how do I take it back?
Last reviewed: 2026-08-01 · Checked with Hunch’s on-device engine, the same one inside the extension. How Hunch checks →
Part of our guide: What to do if you got scammed →
An Apple ID can be secured again, and it's worth doing immediately since it guards your devices, iCloud, and payments. The compromise typically begins with a fake "account locked" notice linking to a lookalike host like apple-id-verify-secure.example rather than apple.com. Follow Apple's official compromised-account steps: change your password from a trusted device and review where your ID is signed in.
Got a message like this? Paste it here →
Apple ID holders are targeted because the account can unlock devices, iCloud backups, and stored payment methods, and a locked iPhone is an easy way to demand a ransom. The lure works by imitating Apple's tone and warning of imminent suspension, so users rush to "verify" on a lookalike domain instead of checking their device directly.
Illustrative example of the pattern, not a real message someone received.
How to verify it yourself
- Confirm it's fake, Apple's real support lives on apple.com, not apple-id-verify-secure.example.
- On your own iPhone or Mac, open Settings > [your name] to see and manage the devices signed in to your Apple ID.
- Change your Apple ID password directly on the device or at Apple's official account page you typed in.
- Check whether trusted phone numbers or the recovery contact were altered.
Common questions
Can the hacker wipe or lock my iPhone?
That's the danger, which is why speed matters. Regain control of the Apple ID first; if a device shows as locked with a ransom demand, contact Apple Support directly through apple.com.
Should I turn off Find My?
No, keep Find My on. It helps you track and protect your devices. The real fix is resetting your Apple ID password and removing unknown trusted devices.
What if they changed my Apple ID email?
Apple's account recovery can restore access even when the email was changed, using your trusted devices and phone numbers to prove ownership.
How do I prevent a repeat?
Keep two-factor authentication on, set up a recovery contact and key, and never enter your Apple ID on a page reached from an unexpected message.
If you already responded
- From a trusted Apple device, change your Apple ID password following Apple's official "If your account is compromised" guide.
- In Settings > [your name], remove any device or trusted phone number you don't recognize.
- Confirm two-factor authentication is on and your recovery details are yours.
- Check Apple Pay, subscriptions, and iCloud for changes the attacker may have made.
- No legitimate recovery service cold-calls you or charges a fee, Apple never phones to demand payment to "reactivate" your ID.
If you were already hit, expect a follow-up
One more thing to expect: after a scam, your details often land on lists that get reused, so you may be contacted again, sometimes by people posing as investigators, your bank's "fraud team," or "recovery agents" who promise to get your money back for an upfront fee. That follow-up is a second scam. No legitimate service charges a fee to recover funds.
Source: Apple, If your account is compromised
Hunch is not affiliated with Apple. Apple is named only to describe a scam that impersonates it; the real Apple does not send these messages.