I received emails saying that the password and billing information for an Apple Account linked to my email address had been changed. I initially assumed they were scams because I didn't remember creating the account, but Apple Support confirmed the messages were legitimate and helped me reset the password. I still can't fully sign in because I don't know the account's three security-question answers. The password was changed again shortly afterward, apparently through those questions, and I had to reset it again. Apple says the account was created in 2016 but hasn't been able to bypass the security questions. What practical steps can I take to secure, disable, or delete the account, and how can I get the issue properly escalated?
3 Answers
Old Apple Accounts that use security questions can be extremely difficult for Support to recover or close. If you can sign in with the current password on an iPhone, iPad, or Mac, look for an option to upgrade the account to two-factor authentication. That replaces the security-question setup and may restore full control. Once two-factor authentication is active, you can decide whether the account should be kept, deactivated, or deleted through Apple’s privacy and account-management tools. Make sure the email account itself is secure and protected by its own two-factor authentication first.
These compromises are sometimes used to access established accounts for gift-card scams. Contact Apple Support through chat and specifically ask for the case to be escalated to a phone specialist. Signing in from an Apple device with the new password may trigger a prompt to enable two-factor authentication. Check places such as Media & Purchases or Internet Accounts, not just the main iCloud settings. If the confirmation email doesn’t arrive, Support may need to check whether the address is only listed as a rescue or backup address.
Secure the email account connected to Apple immediately: change its password, enable two-factor authentication, review forwarding rules and recovery details, and remove unfamiliar devices or sessions. Also change any other passwords that were reused. If this Apple Account isn’t connected to your devices or payment methods, keep monitoring it and avoid entering credentials through links in unexpected emails. Repeated failed sign-ins or password resets may eventually cause an automated lock, but that isn’t guaranteed, so don’t rely on it as the main solution.
The Apple Account isn’t signed in on any of my devices, but I’ll secure the email account and try Support again with an escalation request.
The account may also be blocked or limited by Support if it appears to be involved in gift-card or payment abuse. It’s worth asking for an escalation, but Support may not be able to manually bypass the security questions.