Someone trying to hack my Apple password using security questions

I keep these emails everyday, someone is trying to hack my account clearly:


“We were unable to reset the password for your Apple Account (xxx@gmail.com) because there were too many unsuccessful attempts to answer your security questions. To protect the security of your account, you will not be able to reset your password for the next eight hours.”


when I go into my Apple settings I see that I have 2 factor authentication enabled but I don’t see anything related to security questions. (I want to change them)


how exactly are these hackers trying to answer these security questions ? Do I need to be concerned ?

Posted on Dec 21, 2025 6:14 AM

Reply
9 replies

Dec 21, 2025 12:34 PM in response to InformedBuyerR

As I said before, if you are using two factor authentication then there are no security questions. If you set two factor it is impossible to then have security questions.


Bogus from scammers. They don't care if they got things right. They can send out an email to 100,000 people and if even 20 people try to sign into a fake "Apple" web page and reveal their account information, the scammers have won.


Read this document if you think your Apple Account has been compromised. --> If you think your Apple Account has been compromised - Apple Support


For iOS 15 or earlier, if you want to see if anyone else has access to your device or accounts, click here --> Checklist 1: Limit device and account access - Apple Support


For iOS 16 or later see how Safety Check on iPhone works to keep you safe. Safety Check for an iPhone with iOS 16 or later - Apple Support


Use the information in this document to check your Apple ID device list to find where you're signed in --> Check your Apple Account device list to find where you’re signed in - Apple Support


Related materials:

Personal Safety User Guide

Personal Safety User Guide - Apple Support

> open the Table of Contents and review the articles


A document with general information about security and your Apple ID --> Security and your Apple Account - Apple Support


Contact Apple for help with Apple ID account security. This page provides country-specific Apple Support contact information ➞ Contact Apple Support - Apple Support


Dec 21, 2025 1:05 PM in response to InformedBuyerR

InformedBuyerR wrote:

I keep these emails everyday, someone is trying to hack my account clearly:

“We were unable to reset the password for your Apple Account (xxx@gmail.com) because there were too many unsuccessful attempts to answer your security questions. To protect the security of your account, you will not be able to reset your password for the next eight hours.”

when I go into my Apple settings I see that I have 2 factor authentication enabled but I don’t see anything related to security questions. (I want to change them)

how exactly are these hackers trying to answer these security questions ? Do I need to be concerned ?


The only “hacking” happening here is social engineering; phishing.


They’re trying to hack you and your perceptions. Not your Apple Account. Your Apple Account is fine.


The hackers are trying to fool you into giving them access to your Apple Account credentials.


Delete the spam, and move on with the rest of your day.


PS: the sending email address can be forged, just as can the calling phone number, or thr texting number for SMS.


More reading on common scams:


Recognizing Apple Pay Fraud Report Scams - Apple Community




Dec 21, 2025 9:50 PM in response to Limnos

Geez - maybe I wasn’t clear enough. The emails are coming from apples servers. I’ve verified the email headers, SPF and DKIM signatures (if you don’t know what that is look it up). The email is NOT coming from spammers. Apple is warning me that someone is trying to change my password using my security questions but it’s been blocked due to incorrect entries. The links in the email lead to apple.com, the email is 100% genuine from Apple to me. This isn’t a “social engineering” attack (best not assume everyone is dumb - I’m not a newbie to security or IT systems).



My question is how are scammers / hackers even attempting to access my Apple security questions if I have 2 factor authentication enabled?


It sounds like folks think that that’s “impossible”; then I fear Apple has a hole or a backdoor in their IDSMA systems that someone is trying to exploit.

Dec 21, 2025 11:05 PM in response to InformedBuyerR

InformedBuyerR wrote:
when I go into my Apple settings I see that I have 2 factor authentication enabled but I don’t see anything related to security questions. (I want to change them)

That is the part that does not make sense because there is no such thing as having security questions when 2 factor authentication is turned on. You can't find them because they are not there and no one else is able to find them either. Two Factor Authentication also cannot be turned off, so there would be no way to return to security questions.


I suspect the gmail address seen in the email is not EXACTLY the same as what you are using on your Apple Account. You are seeing you have 2FA on your actual Apple Account, not the one that is slightly different in the email. Look for characters such as the lower case L (l) and the uppercase I (I) that could look exactly the same, or other differences that could be easily overlooked.

Dec 21, 2025 11:58 PM in response to Mac Jim ID

The email is valid and so is everything in the email. There’s nothing remotely wrong with the email. It’s coming from Apples servers and the information is 100% accurate. I’ve been building IT systems for 30 years, including setting up and managing email and DNS servers and more than familiar with email and DNS security protocols.


The only thing I’m not familiar with is apples security infrastructure. Someone how these folks are attempting to answer my “security questions” if I have 2 factor enabled? I’m not even getting any 2 factor auth requests. My suspicion like increasingly confirmed that these folks have found a backdoor into apples IDSMA infrastructure.

Dec 22, 2025 12:22 AM in response to Limnos

Is this a bot repeating the same thing over and over?


yes the apple faqs state that security questions are not used once 2 factor auth is enabled. Bur clearly there’s either a bug or loophole in apple security infrastructure because someone is able to access security questions despite enabling 2 factor auth AND apple servers are sending me an email saying that someone is trying to access my security questions (thankfully that part of the security infrastructure is still working)


clearly something is a miss within apples security infrastructure and there is some api or someway to get to ones security questions bypassing the 2 factor auth.

Dec 22, 2025 3:53 AM in response to InformedBuyerR

You are getting responses from real people; Apple products users just like yourself. We are people sitting at home helping other users like ourself. Since you are posing us with something that is factually impossible I recommend you contact Apple about this.


Refer to this page for Apple Support features ➔ Contact - Official Apple Support

Select from the presented options until you find a solution for your issue, or see if there is a chat or phone call contact method offered lower on the page under “Get more help” (you sometimes have to narrow down the options multiple times before this is shown). If you do not see your issue, keep experimenting with any series of selections until you reach one that offers a chat session or a telephone call and get the representative to redirect you. For chat, you can also try using the Apple Support App —> https://apps.apple.com/app/apple-support/id1130498044


This support article has various country telephone numbers for contacting Apple for support and service ➔ Contact Apple Support - Apple Support For some countries look under “Other” listing at the end of the list. Not every country has telephone support, and phone numbers may only work when calling from the same country.


Someone trying to hack my Apple password using security questions

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.