Apple ID locked emails: check in Settings, not in the email
Messages warning that your Apple ID has been locked, that unusual sign-in activity requires immediate verification, or that your account and photos will be deleted within a day, are phishing unless proven otherwise. They imitate Apple's clean design well, but they all end at a fake sign-in page built to harvest your password and two-factor code. Your real account status lives in your device's settings, which no email can alter.
What to do
- Do not tap the button or link, and do not enter your password or any code on a page an email sent you to.
- Check the real status on your device: on iPhone or iPad open Settings and tap your name at the top; on a Mac open System Settings and your account. A genuinely locked account shows its state there, with official recovery steps.
- Look at the sender's full address. It will be a free mailbox or a domain that is not Apple's, however polished the message looks.
- If you want a second check, type appleid.apple.com into your browser yourself and sign in there, never through the message.
- Report the message: forward phishing claiming to be Apple to the reporting address Apple lists on its support site, then delete it.
Why it works, and the small print that betrays it
- Deletion threats: claims that photos and data vanish within 24 hours push people past their caution. Apple does not delete accounts on a day's notice by email.
- The fake page asks for more than a password, card details 'to confirm identity' or the two-factor code. Real sign-in never asks for card numbers.
- Sender domains are lookalikes, with extra words or swapped letters that survive a quick glance.
- Your device disagrees: if Settings shows your account working normally, the email is lying, and the device wins.
Entered your password or a code? Change your Apple ID password immediately from your device settings, and review the trusted devices list there, removing anything you do not recognize. Turn on two-factor authentication if it is off. If card details were entered, call your issuer. Report the message and the incident at reportfraud.ftc.gov.
Common questions
Can Apple actually lock my Apple ID? Yes, for security reasons, after repeated wrong password attempts, for example. But the unlock happens through your device or the official recovery flow you start yourself, and Apple does not collect passwords through emailed links.
The email had my name and looked perfect. Still fake? Names leak in data breaches, and Apple's emails are easy to imitate visually. Polish is not proof. The deciding test is the channel: status checked in Settings or at the address you typed yourself is real; a link delivered by the message is not.
Related