News for hackers. Stuff that matters.

Ask HN: Is this email from Apple legit?

I received this very weird email from Apple saying that my banking information is invalid.

I do in fact have an App Store developer account, but this email talks about "iTunes Connect", which I thought doesn't exist any more...

Furthermore, the email is from "The Apple Music Team". Why on earth would they be emailing me about my banking information?

Everything about this email is just weird. My scam/phishing alarm bells went off immediately, but from what I can tell, it looks legit.

---

From: [email protected] Subject: Correct your banking details to receive payments.

Dear X,

We’re reaching out because your banking information in iTunes Connect is invalid and needs to be corrected to ensure the successful payment of any amounts owed to you.

Users with the Admin, Legal, or Finance role can update these details in the Agreements, Tax, and Banking section in iTunes Connect. For help with making updates, visit iTunes Connect Resources and Help.

Once your banking information is corrected, it may take up to two payment cycles to send your payment. If you have any questions, contact us.

Best regards,

The Apple Music Team

( 35 comments | 23 points | on HN )
Re:Ask HN: Is this email from Apple legit? by necovek on Thursday July 28, 2022 @02:09AM (#32260966)
When you are suspicious of any incoming emails, look for "received from" lines in SMTP envelope (not in the header fields which are trivially forgeable): as soon as email hits a normal server, it can't be forged anymore, and a relaying/delivering server will insert the actual header.

If there is no apple.com mail server in the sequence of received-from lines, it's not a valid email.

If there is, it should be valid or their MX servers are compromised.

Regardless, always browse yourself to wherever you need to update any banking info or personal data.

Re:Ask HN: Is this email from Apple legit? by pqvst on Thursday July 28, 2022 @02:47AM (#32261194)
Indeed. The first thing I did was close the email and log into my account, but couldn't find any warnings there. I've sent a support message to Apple as well asking what's up with this email.
Re:Ask HN: Is this email from Apple legit? by andreineculau on Thursday July 28, 2022 @09:04AM (#32263729)
Re:Ask HN: Is this email from Apple legit? by gwillen on Thursday July 28, 2022 @02:25AM (#32261058)
I think they must have sent a whole fuckton of these in error. I got it as well, it seems to be "legitimate" (in that I believe it is from Apple), but my account is not set up with iTunes Connect (and would have no reason to be, and trying to access it confirms this.)
Re:Ask HN: Is this email from Apple legit? by gwillen on Thursday July 28, 2022 @02:27AM (#32261074)
I also got this email yesterday from iTunes Connect, despite the fact that I do not have an account on that service and I don't sell books:

https://9to5mac.com/2022/07/26/apple-book-sellers-tax-britis...

Re:Ask HN: Is this email from Apple legit? by acesup93 on Thursday July 28, 2022 @04:34AM (#32261747)
me too.
Re:Ask HN: Is this email from Apple legit? by kerembaydogan on Thursday July 28, 2022 @04:56PM (#32270007)
Hello, some developers may have received an email yesterday noting that their banking information in iTunes Connect is invalid and needs to be corrected. This email was sent in error and we apologize. No action needs to be taken at this time.

source: https://developer.apple.com/forums/thread/711039

Re:Ask HN: Is this email from Apple legit? by cloakedcode on Thursday July 28, 2022 @01:49AM (#32260869)
Turns out Apple has a help doc on identifying legitimate Apple emails:

https://support.apple.com/en-us/HT201679

In any case, avoid any links in the email. If you think it’s legitimate, update your payment information by following what’s listed in the above doc or by getting there through means outside of what’s provided in the email.

Re:Ask HN: Is this email from Apple legit? by digitsdashes on Thursday July 28, 2022 @01:40AM (#32260831)
I got the same email just now and wondered the same thing. This post was the only result when I googled the first sentence. I also did have an Apple developer account, although I haven't used it for a few years. They certainly don't owe me any money. The email does have my real name in it, which is different from the "Dear customer" in normal phishing emails. There was a story on The Register yesterday about Apple's network being hijacked and routed through Russia so I'm wondering if these two things are connected.
Re:Ask HN: Is this email from Apple legit? by ghnapp on Thursday July 28, 2022 @03:56AM (#32261576)
Same here. Also have an Apple dev account. Make my living from app sales. Nearly got a heart attack. This is my only source of income.

Phishing bells went off immediately too, so I did not click. Looked at source code of email… urls go to itunespartner.apple.com and itunesconnect.apple.com so at least that part seems legit.

I’m away from my computer for a few days so can’t check smtp envelope. Anyone done this?

To me indeed looks like (and sincerely hope) a screw up on Apple side.

But since today is pay day I’ll be doing ‘pull-to-refresh’ in my banking app for the rest of the day :/

Re:Ask HN: Is this email from Apple legit? by ghnapp on Thursday July 28, 2022 @04:14AM (#32261654)
Just checked https://developer.apple.com/system-status/

There was an issue with App Store Connect during the last 3 hours approximately. Unfortunately doesn’t mention any detail on the kind of issue, but timing is pretty similar to posts here.

Re:Ask HN: Is this email from Apple legit? by boppo1 on Thursday July 28, 2022 @04:55AM (#32261903)
Maybe it's an old automated thing that someone forgot to deprecate? A little ghost in the machine
Re:Ask HN: Is this email from Apple legit? by ghnapp on Thursday July 28, 2022 @05:41AM (#32262275)
I just received payment. Belgian EUR IBAN bank account.
Re:Ask HN: Is this email from Apple legit? by ameliaray on Thursday July 28, 2022 @01:52AM (#32260878)
I received the same e-mail. My music is distributed to Apple through CD Baby so I have never received direct payment from Apple. I thought there might have been an error on the CD Baby side but wondered why the e-mail was sent to my address and name. As with digitsdashes, this post was the only result when I Googled. I will ignore the e-mail for now. Thanks for posting and commenting.
Re:Ask HN: Is this email from Apple legit? by pqvst on Friday July 29, 2022 @05:54AM (#32274973)
Update: I received a response from Apple now:

"You were sent an email today noting that your banking information in iTunes Connect is invalid and needs to be corrected. This email was sent in error and you do not need to update banking information. We apologize for the error."

Re:Ask HN: Is this email from Apple legit? by davidkuennen on Thursday July 28, 2022 @01:39AM (#32260829)
I got it as well on two separate accounts. One of which I changed the banking information this month and Apple owes me money and one which doesn't have any banking information at all. Very weird.

Since today is payday on the first account I will let you know if the payment gets through regardless.

Re:Ask HN: Is this email from Apple legit? by davidkuennen on Friday July 29, 2022 @05:21AM (#32274730)
Got this support response today from Apple:

------------

Hello X,

My name is X from Apple Developer Program Support.

You were sent an email today noting that your banking information in iTunes Connect is invalid and needs to be corrected. This email was sent in error and you do not need to update banking information. We apologize for the error.

If you have additional questions related to this request, please refer to case number X.

Best regards,

X

Apple Inc.

------------

So it really was an error

Re:Ask HN: Is this email from Apple legit? by davidkuennen on Thursday July 28, 2022 @06:29AM (#32262600)
Update: Payment got through
Re:Ask HN: Is this email from Apple legit? by mtrf on Thursday July 28, 2022 @08:47AM (#32263556)
Oh man! Got heart attack. Thank you for the update.
Re:Ask HN: Is this email from Apple legit? by baruch_forest on Thursday July 28, 2022 @01:34AM (#32260803)
I got the same email like 40 minutes ago.

My friend and I have two separate developer account, with different bank account from the same bank and the same branch. I got the email but He didn't.

And I've been getting paid for the last 6 months with this very bank account without any problem.

It's weird for me too.

Re:Ask HN: Is this email from Apple legit? by Mlara75 on Thursday July 28, 2022 @02:48AM (#32261204)
What do you mean; its been paying you for the last 6 months? What are the payments for?
Re:Ask HN: Is this email from Apple legit? by baruch_forest on Thursday July 28, 2022 @03:11AM (#32261335)
I have an apple developer account. I develop app and sell subscriptions. I have submitted a bank account and got paid with no problem in the past 6 months. That’s my only bank account that apple is aware of. So I thought that sth may be wrong with it based on the email.
Re:Ask HN: Is this email from Apple legit? by acesup93 on Thursday July 28, 2022 @02:04AM (#32260942)
I did receive it as well.

The previous payments went through with no problem and I haven't made any changes since then.

Strange that the contact us redirects to a itunes account. When trying to login it says I don't have an account there.

Re:Ask HN: Is this email from Apple legit? by test500 on Thursday July 28, 2022 @01:55AM (#32260894)
I've got this email from Apple and it looks legitimate. The problem is there are no warnings on in app store connect - agreements,tax and banking and I received payment last month..
Re:Ask HN: Is this email from Apple legit? by pqvst on Thursday July 28, 2022 @02:49AM (#32261206)
Same, couldn't find any warnings. Glad to hear I'm not the only one at least!
Re:Ask HN: Is this email from Apple legit? by Mlara75 on Thursday July 28, 2022 @02:50AM (#32261212)
iTunes connect sent you a payment? What is it for?
Re:Ask HN: Is this email from Apple legit? by pqvst on Thursday July 28, 2022 @03:08AM (#32261308)
Well. I receive monthly payments from Apple for App Store revenue. I guess this used to be from "iTunes Connect" but is now called "App Store Connect", hence the confusion on my part.
Re:Ask HN: Is this email from Apple legit? by kasabulatov on Thursday July 28, 2022 @05:07AM (#32261983)
I am living from app sales too. Got heart attack. Received that email and after two hours successfully received payment.
Re:Ask HN: Is this email from Apple legit? by rxkxa on Thursday July 28, 2022 @05:14AM (#32262051)
I have received the email and no payment:( you have and EUR or USD account? SEPA bank account?
Re:Ask HN: Is this email from Apple legit? by mtrf on Thursday July 28, 2022 @08:47AM (#32263554)
Oh man! Got heart attack too. Thank you for the update.
Re:Ask HN: Is this email from Apple legit? by rxkxa on Thursday July 28, 2022 @05:10AM (#32262000)
Same here. Are you using a SEPA bank account? This might be the issue…. Idk I just emailed Apple for clarification.
Re:Ask HN: Is this email from Apple legit? by misterchuck on Thursday July 28, 2022 @02:16AM (#32260998)
Received that for 2 separated appstore accounts today. Must be sent in error.
Re:Ask HN: Is this email from Apple legit? by cbanek on Thursday July 28, 2022 @07:58PM (#32271529)
Just got one of these too. I wish they were going to pay me money.
Re:Ask HN: Is this email from Apple legit? by vaibhavthevedi on Thursday July 28, 2022 @03:30AM (#32261441)
Can vouch for receiving the same emails in the last couple of days.
Re:Ask HN: Is this email from Apple legit? by hrrsn on Thursday July 28, 2022 @03:52AM (#32261547)
I've received it on two addresses today, as well as an update about tax in British Columbia yesterday. I've never sold anything on Apple's stores, and haven't had an email from iTunes Connect before this.