How to Tell If an Email is Truly from Apple

How to Tell If an Email Was Truly Sent from Apple
Text Size
- +

Today, almost every Apple user has come across a fake email that appears to have been sent by Apple. We present to you a thorough guide to determine whether the email message truly originated from Apple, or is actually a scam targeted to gain information about your email account, Apple ID, or even worse – your credit card. While the process might seem highly-technical at first, we’re sure that most people will be able to understand this tutorial quickly and easily.

Most Frequent Emails Sent from Apple

Friendly FromEmail AddressIP AddressNature of EmailSafe
App StoreAppStore@new.itunes.com17.xx.xx.xxApp Promotions, App Store Spotlight
Applenews@insideapple.apple.com17.xx.xx.xxApple Products and release promotions
Applenoreply@email.apple.com17.xx.xx.xxApple ID and iCloud Alerts
Apple Beta Software Programbetaprogram@InsideApple.Apple.com17.xx.xx.xxBeta Software Updates
Apple Newsnewsdigest@insideapple.apple.com17.xx.xx.xxApple News Digest
Apple Storenoreply@apple.com17.xx.xx.xxAppointment Follow Ups
Apple SupportAppleSupport@insideapple.apple.com17.xx.xx.xxSurveys and Support Follow Ups
Apple SupportAppleSupport@email.apple.com17.xx.xx.xxProduct notifications
Apple Support Communities Updatesdiscussions-updates@apple.com17.xx.xx.xxApple Support Communities Updates
Find My iPhonenoreply@insideicloud.icloud.com17.xx.xx.xxFind My iPhone Alerts
iBooksiBooks@new.itunes.com17.xx.xx.xxiBooks Newsletter
iClouddo_not_reply@icloud.com17.xx.xx.xxiCloud transactional emails
iCloudno_reply@me.com17.xx.xx.xxiCloud transactional emails
iCloudnoreply@insideicloud.icloud.com17.xx.xx.xxiCloud Alerts (storage, Apple ID, etc.)
iTunesdiscover@new.itunes.com17.xx.xx.xxiTunes newsletter (Apps, Movies, etc.)
iTunesitunes@new.itunes.com17.xx.xx.xxiTunes Spotlight Newsletter
iTunes Storedo_not_reply@itunes.com17.xx.xx.xxiTunes Billing and Store emails
iTunes UiTunesU@new.itunes.com17.xx.xx.xxiTunes U Newsletter
no friendly fromnoreply@apple.com17.xx.xx.xxApple Support Community Notifications
no friendly frommarketresearch@insideapple.apple.com17.xx.xx.xxMarket Research Surveys
no friendly frompostmaster@mac.com17.xx.xx.xxDelivery notifications

We compiled the most frequent email messages sent from Apple. The table below shows that in all instances the sending IP address starts with the number 17 (e.g.  17.254.6.138,  17.171.37.29,  etc.). This quick check is the most effective way to validate any messages you might receive from Apple. This is because all IP addresses that follow 17.xx.xx.xx are owned and operated by Apple, Inc.

Secondly, all Apple messages contain “received: from” (e.g. nwk-txn-msbadger0504.apple.com). While this “received: from” field alone can be faked or spoofed, the combination of IP address and passing DKIM on the apple.com domain is a the highest security credential an email message can have.

How to view “Received: from” field or the sending IP address in iCloud, Gmail, Yahoo, Hotmail, and AOL.

In iCloud Mail:

  1. Double click the email message.
  2. Click on the wheel icon.
  3. Select “Show long headers.”
  4. Look for “Received: from” under “Original-recipient” (e.g. msbadger0506.apple.com. [17.254.6.160])

Show long headers in iCloud mail.

In Gmail:

  1. Select the message.
  2. Click on the drop-down triangle in the top right corner.
  3. Select “Show original.”
  4. Look for “Received: from” (e.g. msbadger0506.apple.com (msbadger0506.apple.com. [17.254.6.160]))

How to show original email in gmail.
In Yahoo:

  1. Select the message.
  2. Click on “More.”
  3. Select “View Raw Message.”
  4. Look for “Received: from” (e.g. msbadger0506.apple.com. [17.254.6.160])
How to view email source in yahoo.

In Hotmail/Outlook:

  1. Select the message.
  2. Click on the drop-down arrow in the top right corner.
  3. Select “View Message Source.”
  4. Look for “Received: from” right above the “From:” field (e.g. msbadger0506.apple.com. [17.254.6.160])
How to view message source in hotmail/outlook.

In AOL:

  1. Select the message
  2. Click on the drop-down arrow in the top right corner
  3. Select “View Message Source.”
  4. Look for “Received: from” right above the “From:” field (e.g. msbadger0506.apple.com. [17.254.6.160])

Recommended

Today's Deals
Social Sharing