A friend saw an alert about their last device on their Apple account and possible recovery consequences. The wording had underscores and looked odd. Could it be legitimate, and what happens if they continue?
Does an iPhone recovery warning with underscores mean it's hacked?
Asked by
Vellix.3q
Answers
Underscores in a system alert can be a localization glitch. Apps and system software use internal text identifiers that are normally replaced with readable wording, and sometimes those identifiers show through. That alone isn't evidence of a hack.
The recovery warning sounds plausible, but the description isn't enough to verify the exact alert or say what continuing would do. The specific action matters, so don't confirm it until your friend knows what they're changing.
Reply to this answer
If the alert is still open, cancel or back out for now. Then check the Apple account and its devices directly in Settings, rather than following a link or calling a number shown in an unexpected message.
If they're trying to remove a device or change account security, the warning may be about losing a way to verify their identity or recover access. Contact Apple Support through the official Support app or Apple's website before proceeding if the consequences aren't clear.
Reply to this answer
I'd separate the weird formatting from the hacking concern. Check the devices listed on the Apple account and look for anything unrecognized. If there's an unfamiliar device or another concrete sign of unauthorized access, change the account password and contact Apple Support.
Reply to this answer
Add your answer
Answers are reviewed before publication.
nearly.unstuck_9:
A screenshot of the full alert, with personal information covered, could help support identify what action triggered it.